Research Security Training

Research Security Training

The University of Colorado Colorado Springs is committed to fostering international research and educational collaborations; we are focused on creating global impact by cultivating and supporting collaboration on campus and across the globe while also promoting full transparency surrounding all interactions with external sponsors, industry and foreign entities.

The Presidential Memorandum on United States Government-Supported Research and Development National Security Policy (NSPM-33) of 2021 and the CHIPS and Science Act of 2022 mandate that federal funding agencies develop safeguards and policies to protect research security. As part of these safeguards, several federal funding agencies have issued Research Security Training requirements for PIs and others working on federally sponsored programs.

Training Requirements

Currently, the Department of Energy (DOE), the National Science Foundation (NSF), the US Department of Agriculture (USDA), National Institutes of Health (NIH), and the National Aeronautics and Space Administration (NASA)  require certain individuals (typically PIs, Co-PIs, key/senior research personnel, or investigators) on proposals to complete Research Security Training. A chart published by the NSF SECURE Center summarizes these requirements.

Department of Energy (DOE)

The DOE requirements for Research Security training took effect on May 1, 2025 with the issuance of FAL 2025-02.

  • Who is Required to Complete the Training? All "covered individuals" involved in Department of Energy (DOE) funded R&D projects or proposals. A "covered individual" is one who contribute substantively to the development or execution of the project and includes, at a minimum, the PI/PD, Co-PI/Co-PD, project manager, or any person designed as a covered individual in the NOFO.
  • What training should be completed? CITI Research Security Training (Combined Course) A condensed and combined single-module course based on the NSF’s Research Security Training.
  • How Long Does the Training Take to Complete? Approximately 60 minutes.
  • When Does the Training Need to be Completed By? Within 12 months prior to proposal submission or within 30 days of being newly added to an existing award. 
  • How is this reported? Individuals will certify via the Current and Pending Support disclosure certification that they have completed training. Individuals added to existing awards must certify within 30 days of being added to the award that they have completed the training.

This requirement does not impact existing DOE grant awarded prior to May 1, 2025 unless requested at the time of renewal by the Sponsor.

Details on the Research Security CITI Training and how to sign-up are below.

National Science Foundation (NSF)

The NSF requirements took effect on October 10, 2025, per NSF Important Notice No. 149.  NSF Supplement 1 from December 8, 2025, also provides some guidance. Additional information should be included in NSF’s implementation of the 2026 NSF Proposal and Award Policies and Procedures Guide (PAPPG), draft 26-1.

  • Who Is Required to Complete the Training? All covered individuals involved in NSF-funded projects or proposals, including:
    • Principal Investigators (PIs)
    • Senior/Key Personnel
  • What training should be completed? CITI Research Security Training (Combined Course) A condensed and combined single-module course based on the NSF’s Research Security Training.
  • How Long Does the Training Take to Complete? Approximately 60 minutes.
  • When Does the Training Need to Be Completed By? Within 12 months prior to proposal submission.
  • How is this reported? Individuals will certify in the Biographical Sketch and Current and Pending (Other) Support documents that they have completed training.

This requirement does not apply retroactively to existing NSF grants awarded prior to October 10, 2025 unless specifically requested by the sponsor at the time of renewal or continuation.

Details on the Research Security CITI Training and how to sign-up are below.

National Institutes of Health (NIH)

NIH has issued notice that for applications submitted for due dates on or after May 25, 2026, all senior/key personnel listed on an NIH grant must complete Research Security Training within 12 months prior to submitting an application for funding to NIH. NIH will be collecting the individual certification of completed Research Security training at the time of the application submission through the Biographical Sketch in SciENcv. For more information, see NOT-OD-26-017 (Dec. 2025).

  • Who Is Required to Complete the Training?  Senior/Key personnel, defined as:
    • A PD/PI or other individual who contributes to the scientific development or execution of a project in a substantive, measurable way, whether or not they receive a salary or compensation under the grant
  • What training should be completed? CITI Research Security Training (Combined Course) A condensed and combined single-module course based on the NSF’s Research Security Training.
  • How Long Does the Training Take to Complete? Approximately 60 minutes.
  • When Does the Training Need to Be Completed By? Within 12 months prior to proposal submission.
  • How is this reported? Completion certification will be collected from individuals at the time of application submission through the Biographical Sketch in SciENcv.

The NIH Research Security requirement differs from the Other Support Training requirements in NIH NOT-OD-25-133; however, both can be met by completing the Research Security training. 

Details on the Research Security CITI Training and how to sign-up are below.

U.S Department of Agriculture (USDA)

The USDA’s General Terms and Conditions, published December 31, 2025, outlines the requirements for Research Security Training for USDA funded projects. These requirements align with other federal grantors and with requirements outlined by NSPM-33. 

  • Who Is Required to Complete the Training? Each individual employed to work on the award.
  • How Long Does the Training Take to Complete? Approximately 60 minutes.
  • What training should be completed? CITI Research Security Training (Combined Course) A condensed and combined single-module course based on the NSF’s Research Security Training.
  • When Does the Training Need to Be Completed By?
    • Within 12 months prior to the time of application submission or prior to beginning to work on an existing award, and
    • Annually for the duration of the award
  • How is this reported? Training is certified through the institution’s submission process (i.e., institutional AOR signature). Additionally, the PI must certify in the RPPR that all personnel have completed the required training.

Details on the Research Security CITI Training and how to sign-up are below.

National Aeronautics and Space Administration (NASA)

NASA has issued Grant Information Circular 26-02 (GIC 26-02) to implement the research security training (RST) and certification requirements mandated by Section 10634 of the CHIPS and Science Act of 2022 for all research grant and cooperative agreement proposals submitted to the agency. This requirement will be in effect starting August 5, 2026.

  • Who Is Required to Complete the Training?  “Covered Individuals” listed on the proposal or who join a funded project after the award. A “covered individual” is defined as:
    • Any Principle Investigator (PI), regardless of level of effort
      • Any Co-PI, regardless of level of effort
      • Any Co-investigator (Co-I) proposing to spend ten percent or more of their time in any given year on a NASA-funded award
    • Any personnel category designated as “covered individuals” by a NASA funding organization on a project-by-project basis and as explicitly stated in the NOFO.
  • How Long Does the Training Take to Complete? Approximately 60 minutes.
  • What training should be completed? CITI Research Security Training (Combined Course) A condensed and combined single-module course based on the NSF’s Research Security Training.
  • When Does the Training Need to Be Completed By?
    • Within 12 months prior to proposal submission, or
    • Before being newly added to an existing NASA-funded award
      • Individuals added to an existing NASA-funded award must submit certification of RST completion with their Biographical Sketch and Current and Pending (Other) Support forms.
  • How is this reported? Covered individuals must certify on their Biographical Sketch and Current and Pending (Other) Support forms that they have completed Research Security Training within 12 months prior to proposal submission. 
    • Certification for covered individuals should state: "In accordance with Section 10634 of the CHIPS and Science Act of 2022 (42 U.S.C. § 19234), I certify that I have completed the requisite research security training that meets the requirements specified in NASA’s research security training requirements policy within 12 months prior to proposal submission.”

Details on the Research Security CITI Training and how to sign-up are below.

Content Part 2

Training Resources

UCCS is offering the CITI training [Research Security Training (Combined Course)] which provides an overview of Research Security, the importance of disclosure, and mitigation and management strategies.

The CITI training is anticipated to take 60 minutes to complete. This training is shorter than the 4-hour long training modules offered through NSF.

To sign up, follow these steps:

  1. Sign in to an existing CITI account or start a new account. If you start a new account, be sure to use your UCCS email address and associate your account with UCCS. Guides on how to do this are available on CITI’s website.
  2. Navigate to your “My Courses” page and scroll down to the bottom where you will see “Add a Course”
  3. Select “Research Security
  4. Select “Research Security Training (Combined Course) A condensed and combined single-module course based on the NSF’s Research Security Training

Please reach out to Mike Sanderson via composp@uccs.edu if you have questions.

Resources