Browse and search all federal research security policies, guidance, and compliance requirements.
September 2024, report ordered by Committee on Homeland Security. States that IHEs which have a relationship with a Confucius Institute or Chinese entity of concern is ineligible to receive any funds from the Department of Homeland Security, unless the institution terminates the relationship.
Issued on August 8, 2024. Effective May 1, 2025, applicants are required to have a Digital Persistent Identifier or Persistent Identifier (PID) if: 1. Individuals are listed within financial assistance applications that will fund R&D activities, or technical assistance to support R&D activities; and 2. Individuals are required to submit Biographical Sketch and/or Current and Pending (Other) Support disclosure. A PID is defined as globally unique, persistent, machine resolvable and processable, and has an associated metadata schema (example: ORCID iD). PIDs must be provided in the Biographical Sketch and/or Current and Pending (Other) Support disclosures as part of the application. This requirement is optional until May 1, 2025, and mandatory thereafter.
An August 2024 report emphasizing the importance of the critical quantum information science and technology (QIST) field and the need to enhance interagency cooperation, fund international collaboration, and track global competitiveness.
August 2024. Assists agency staff in assessing grant applications and ongoing awards for potential foreign interference. Factors considered include: (1) current or past participation in a malign foreign talent recruitment program, which is prohibited by law, (2) undisclosed current or prior funding from a foreign country of concern (FCOC), or connected entity (currently China, Russia, North Korea, and Iran (higher risk)) or other foreign country (lower risk) and, (3) Indicators of an undisclosed current or past affiliation with an institution or entity located in or connected to a FCOC (higher-risk/mitigation) or foreign country (lower-risk/mitigation). Per the matrix, mitigation is either required, recommended, suggested, or not required based on the timing of the engagement and if accurate and complete disclosure information was provided. Mitigation conditions include: (1) specific award conditions, (2) modification of terms and conditions of award, (3) suspension, termination, or withdrawal of an award, (4) conversion from advance payment to reimbursement, and (5) recovery of funds.
An NIH blog post from August 2024 explaining the new Decision Matrix and clarifying NIH processes for handling allegations of foreign interference.
Final Research Security Program (RSP) Guidelines published on July 9, 2024, via a memorandum to the heads of federal research funding agencies. Federal agencies are directed to implement the guidelines and provide time for institutional implementation. The four required areas are: cybersecurity, foreign travel security, research security training, and export control training. Agencies are coordinating implementation under a memorandum of agreement and anticipated to issue the requirements in early 2026.
June 2024. NSF initiated a proposal risk review process similar to that of DoD but with some notable differences. NSF's process will focus on critical technologies, beginning with a pilot of quantum technologies proposals in FY25, expanding to other key technologies in phase 2, and scaling up for all key technologies identified in the CHIPS and Science Act in phase 3. NSF will evaluate Three Criteria: 1. Appointments and positions with U.S. proscribed parties (e.g., U.S. BIS Entity List) and currently party to a MFTRP; 2. Non-disclosures of appointments, activities, and financial support; and 3. Potential foreseeable national security applications of the research. NSF will consider only current foreign appointments and affiliations and is not considering co-authorship in risk assessment.
A summary of the NSF-funded workshop 'Responsible Collaboration Through Appropriate Research Security' held at Rice University's Baker Institute for Public Policy in May 2024. Discusses challenges and opportunities in the emerging field of RoRS and provides recommendations to guide NSF's new RoRS program.
A matrix developed to assist in determining if specific activities are required to be disclosed and what form is appropriate for reporting. Last updated May 2024.
Frequently asked questions about DARPA's Fundamental Research Risk-Based Security Review Program (FRR-BS), issued May 2024.
A survey issued by COGR in April 2024 documenting research institutions' experiences with DoD's policy for risk-based security reviews of fundamental research.
A March 2024 report commissioned by NSF and issued by the JASON group. Recommends NSF adopt a dynamic approach for identifying potentially sensitive research topics as they arise and weigh the balance between the protective benefits and the unintended negative consequences of controls on sensitive research. It is suggested that the identification of sensitive projects proposed to NSF occurs most naturally before peer or panel review. Specific mitigation strategies for sensitive research projects should be negotiated and agreed upon by the principal investigator (PI), NSF, and the institution and be proportionate to the assessed risk, relative to the associated costs.
Joint comments submitted by ACE, AAU, APLU, COGR, and EDUCAUSE on February 26, 2024 in response to the proposed CMMC rule.
A February 2024 biannual update from the Fast Track Action Subcommittee on Critical and Emerging Technologies of the NSTC that defines critical and emerging technologies (CETs), which are a subset of advanced technologies that have a significant impact on U.S. national security. [List of CETs is outlined on pages 8-11]
Per Section 10631 of the CHIPS and Science Act, this document issued in February 2024 from the White House OSTP provides definitions of both foreign talent recruitment programs (FTRPs) and malign foreign talent recruitment programs (MFTRPs) [pages 4-6] and what is not considered an FTRP. A foreign talent recruitment program is any program, position, or activity that includes compensation in the form of cash, in-kind compensation, including research funding, promised future compensation, complimentary foreign travel, things of non de minimis value, honorific titles, career advancement opportunities, or other types of remuneration or consideration directly provided by a foreign country at any level or their designee, or an entity based in, funded by, or affiliated with a foreign country.
A congressional hearing held in February 2024 with representatives from the White House (OSTP), NSF, NIH, and DoE examining federal science agency actions to secure the U.S. science and technology enterprise.
Published February 2024, this document outlines best practices agreed upon by G7 member nations for maintaining secure and open research.
Issued by the White House OSTP in February 2024, this policy requires federal agencies to use the Common Forms for current and pending support and biosketches, noting that NSF will serve as steward. Deviation from the common disclosure forms will require Office of Management and Budget (OMB)/Office of Information and Regulatory Affairs (OIRA) review and clearance under the Paperwork Reduction Act (PRA).
A summary document from AAU, updated in January 2024, that references key federal documentation that has been developed to address foreign influence in research.
A 2024 report by the National Academies: Sciences, Engineering and Medicine examining international talent programs in the context of the changing global environment.
A condensed and consolidated one-hour version of the four federal training modules developed by the University of Michigan in collaboration with Ohio State University, Stanford University, and Duke University. Other academic institutions or organizations can download for their use. The training includes two editable html-based files that can be modified to supply institution-specific contact information and links to resources. SCORM files, Storyline file, and written version of the narrative are available.
An updated one-hour condensed and consolidated federal research security training module offered by the SECURE Center. NSF, NIH, DoD, DOE, and USDA have indicated that the condensed module meets their research security requirements. The SCORM files (for upload in the institution's learning management systems), Storyline file, and transcript can also be found on the website. The training includes two, four or six editable html-based files that can be modified to supply institution-specific contact information and links to resources. A preview version can be viewed on the website and a version that offers a certificate of completion is now available.
The proposed rule for the CMMC Program published in December 2023, which was superseded by the final rule in October 2024.
The common form for federal-wide use for current and pending (other) support disclosure, created as directed by NSPM-33 with NSF serving as steward. The form includes certification by each senior/key person at the time of submission that they are not a party to a malign foreign talent recruitment program as defined in the CHIPS and Science Act of 2022. As of November 2025, the form has been implemented by NSF and the National Aeronautics and Space Administration (NASA).
A November 2023 supplement to the NSPM-33 Implementation Guidance that provides definitions of terms used throughout the guidance and related policy documents.
