A matrix that lists policies and requirements under the headings of: Disclosures, Agency Risk Assessment, FCOI & COC, Training, Certifications, and Research Security Program for each federal agency. Per COGR, this tool is frequently updated to reflect the release of new documentation. Updated September 30, 2025.
Reference Library
Browse and search all federal research security policies, guidance, and compliance requirements.
A chart that compares federal laws, regulations, and policies in the area of science and security. The chart is divided into three separate tabs that cover (a) major federal-wide legislation or policy, (b) agency disclosure requirements for researchers and research institutions; and (c) agency conflict of interest policies. Updated September 30, 2025.
The National Academies Assessing Research Security Efforts in Higher Education working group held a number of meetings and a May workshop with federal and non-federal experts beginning September 2024 and concluding September 4, 2025, to discuss assessment of federal research security efforts. Proceedings from the workshop can be found on the National Academies website.
Published September 3, 2025, a National Academies Committee conducted an expedited study to examine federal research regulations and identify ways to improve regulatory processes and administrative tasks, reduce or eliminate unnecessary work, and modify and remove policies and regulations that have outlived their purpose while maintaining necessary and appropriate integrity, accountability, and oversight. Research security specific options include: implement the NSPM-33 common disclosure forms and disclosure table without deviation; establish common principles for agency research security risk reviews for fundamental research; continue prior efforts to streamline and clarify export controls; and adapt cybersecurity requirements for university settings.
The Congressional Research Service (CRS) issued a report on May 20, 2025, summarizing federal research security policy efforts to date, and providing options Congress might consider to address perceived gaps or deficiencies while also remaining cognizant of the potential increase to administrative burden they would present. Proposed options discussed include: a. Expanding sources of foreign support researchers are required to disclose, b. Broadening the scope of who is required to disclose Current and Pending (Other) Support, c. Increasing the frequency of post-award updates, d. Expanding agency requirements when reviewing disclosed information, e. Focusing risk assessment activities more narrowly on critical and emerging technologies, f. Expanding agencies' requirements to report to congress on research security violations, mitigation measures, and implementation status.
September 2024, report ordered by Committee on Homeland Security. States that IHEs which have a relationship with a Confucius Institute or Chinese entity of concern is ineligible to receive any funds from the Department of Homeland Security, unless the institution terminates the relationship.
An August 2024 report emphasizing the importance of the critical quantum information science and technology (QIST) field and the need to enhance interagency cooperation, fund international collaboration, and track global competitiveness.
Final Research Security Program (RSP) Guidelines published on July 9, 2024, via a memorandum to the heads of federal research funding agencies. Federal agencies are directed to implement the guidelines and provide time for institutional implementation. The four required areas are: cybersecurity, foreign travel security, research security training, and export control training. Agencies are coordinating implementation under a memorandum of agreement and anticipated to issue the requirements in early 2026.
A matrix developed to assist in determining if specific activities are required to be disclosed and what form is appropriate for reporting. Last updated May 2024.
Per Section 10631 of the CHIPS and Science Act, this document issued in February 2024 from the White House OSTP provides definitions of both foreign talent recruitment programs (FTRPs) and malign foreign talent recruitment programs (MFTRPs) [pages 4-6] and what is not considered an FTRP. A foreign talent recruitment program is any program, position, or activity that includes compensation in the form of cash, in-kind compensation, including research funding, promised future compensation, complimentary foreign travel, things of non de minimis value, honorific titles, career advancement opportunities, or other types of remuneration or consideration directly provided by a foreign country at any level or their designee, or an entity based in, funded by, or affiliated with a foreign country.
A congressional hearing held in February 2024 with representatives from the White House (OSTP), NSF, NIH, and DoE examining federal science agency actions to secure the U.S. science and technology enterprise.
A February 2024 biannual update from the Fast Track Action Subcommittee on Critical and Emerging Technologies of the NSTC that defines critical and emerging technologies (CETs), which are a subset of advanced technologies that have a significant impact on U.S. national security. [List of CETs is outlined on pages 8-11]
Issued by the White House OSTP in February 2024, this policy requires federal agencies to use the Common Forms for current and pending support and biosketches, noting that NSF will serve as steward. Deviation from the common disclosure forms will require Office of Management and Budget (OMB)/Office of Information and Regulatory Affairs (OIRA) review and clearance under the Paperwork Reduction Act (PRA).
Published February 2024, this document outlines best practices agreed upon by G7 member nations for maintaining secure and open research.
A condensed and consolidated one-hour version of the four federal training modules developed by the University of Michigan in collaboration with Ohio State University, Stanford University, and Duke University. Other academic institutions or organizations can download for their use. The training includes two editable html-based files that can be modified to supply institution-specific contact information and links to resources. SCORM files, Storyline file, and written version of the narrative are available.
An updated one-hour condensed and consolidated federal research security training module offered by the SECURE Center. NSF, NIH, DoD, DOE, and USDA have indicated that the condensed module meets their research security requirements. The SCORM files (for upload in the institution's learning management systems), Storyline file, and transcript can also be found on the website. The training includes two, four or six editable html-based files that can be modified to supply institution-specific contact information and links to resources. A preview version can be viewed on the website and a version that offers a certificate of completion is now available.
A 2024 report by the National Academies: Sciences, Engineering and Medicine examining international talent programs in the context of the changing global environment.
A summary document from AAU, updated in January 2024, that references key federal documentation that has been developed to address foreign influence in research.
The common form for federal-wide biographical sketch disclosure, created as directed by NSPM-33 with NSF serving as steward. Includes certification by each senior/key person at the time of submission that they are not a party to a malign foreign talent recruitment program as defined in the CHIPS and Science Act of 2022. As of November 2025, the form has been implemented by NSF and NASA.
The common form for federal-wide use for current and pending (other) support disclosure, created as directed by NSPM-33 with NSF serving as steward. The form includes certification by each senior/key person at the time of submission that they are not a party to a malign foreign talent recruitment program as defined in the CHIPS and Science Act of 2022. As of November 2025, the form has been implemented by NSF and the National Aeronautics and Space Administration (NASA).
A November 2023 supplement to the NSPM-33 Implementation Guidance that provides definitions of terms used throughout the guidance and related policy documents.
EDUCAUSE's formal response commenting on the Research Security Programs standard requirement, submitted in June 2023.
AAMC's formal response to the OSTP Request for Information on the NSPM-33 Research Security Programs Standard Requirement, submitted in June 2023.
A June 2023 report issued by the National Academies providing recommendations that U.S. institutions of higher education can take to identify and mitigate risks associated with foreign-funded language and culture institutes on campus.
AAU's formal response to the OSTP Request for Information on the NSPM-33 Research Security Programs Standard Requirement, submitted in May 2023.