Select Page

Research Security Program

Research Integrity and Security

Research Security Program

Research Security is the necessary safeguarding of the research enterprise against the misappropriation of research and development to the detriment of national or economic security, related to violations of research integrity, and foreign government interference.

Implementation Guidance for NSPM-33, January 2022

Requirements around research security that affect Mines and all major research institutions in the United States have evolved quickly since 2021. The federal laws and regulations in this area have developed with strong bipartisan support (see below for highlights). Committed to research in a wide variety of disciplines that support national security, Mines already had robust protections in place. We have enhanced these measures as necessary and organized them into a cohesive research security program. Elements of Mines’ research security program include the following:

  • Provide annual Research Security training.
  • Provide cybersecurity training program.
  • Operate a cybersecurity program for research involving controlled unclassified information (CUI) or cybersecurity maturity model certification (CMMC).
  • Provide resources and education for data integrity and data security.
  • Curb undue foreign influence and prohibit participation in Malign Foreign Talent Recruitment Programs (MFTRPs).
  • Review gifts to the university to ensure compliance with federal requirements.
  • Designated Research Security Officer.

Federal Guidance

Academic Research Security – Department of Defense. This resource highlights actions the Department and academic community are taking to ensure the integrity of fundamental research in academia.

Safeguarding Academia – National Counterintelligence and Security Center (NCSC). Representing a collaborative effort across NCSC’s stakeholder community, this bulletin raises awareness about security threats and counterintelligence, promotes best practices, and fosters collaboration to protect the nation’s security and advance U.S. interests.

Federal Requirements

National Science Foundation – published Important Notice No. 149: Updates to NSF Research Security Policies (July 2025), giving NSF the authority to conduct research security assessments and to establish policies and procedures.

White House Office of Science and Technology Policy – released “Guidelines for Research Security Programs at Covered Institutions” (July 2024) which defines covered institutions as those that receive over $50 million in federal research funding annually, and further outlines the requirements of a research security program.

National Science Foundation – commissioned JASON to review research security needs, which led to a “Research Program on Research Security” report (March 2023) which defines research security as “protecting the means, know-how, and products of research until they are ready to be shared, by approval of the leader(s) of the research program and other stakeholders in their security.”

CHIPS and Science Act of 2022 – defined and prohibits participation in malign foreign talent recruitment programs and outlines requirements for implementing research security programs.

National Science and Technology Council (NSTC) report – Implementation Guidance for NSPM-33 (January 2022) provided additional clarification. Consistent with NSPM-33, the guidance requires that research security programs address the following: (1) cybersecurity, (2) foreign travel security, with security briefings and assistance with electronic device security, (3) research security training, (4) export control training, as appropriate, and (5) designation of a research security point of contact (POC).

Presidential Memorandum on United States Government-Supported Research and Development National Security Policy – National Security Presidential Memorandum (NSPM) 33 (January 2021) required Mines and all major research universities to establish research security programs: “Institutional research security programs should include elements of cyber security, foreign travel security, insider threat awareness and identification, and, as appropriate, export control training.”