Effective: 03/31/2025
Last revised: 9/4/2026
Many federal agencies require research security training for applicants and awarded researchers. This mandate originates from the National Security Presidential Memo-33 (2021) and the CHIPs and Science Act (2022). Research Security Training is an integral component of a Research Security Program. The goal is to raise awareness and ensure that risks are identified, elevated, and addressed by the appropriate offices.
Core Training Areas include:
- Research Security Fundamentals: What research security is, why it matters, key federal regulations and core values.
- Disclosure & Compliance: Understanding disclosure requirements (funding, affiliations, conflicts of interest/commitment).
- Export Controls: Training on U.S. export control laws relevant to research.
- Foreign Travel/Collaboration: Risks associated with international travel, foreign visitors, talent programs, and fostering principled international partnerships.
- Data & IP Protection: Best practices for protecting sensitive data, valuable research, and patentable property.
- Cybersecurity: Recognizing phishing, ransomware, social engineering, password hygiene, multi-factor authentication (MFA), and safe browsing.
WashU’s Research Security Training (RST) is part of the Responsible Conduct of Research (RCR) course, which is required for the initial training. The Research Security Training Refresher, is required thereafter. Both courses satisfy the RST requirements mandated by funding agencies.
When
Training must be completed within the last 12 months required prior to proposal submission and annually thereafter. Additional training, such as Conflicts of Interest or Export Controls, may also be required based on other policies. The university assures and confirms training compliance as part of the funding application process and/or prior to award acceptance.
Who (covered individuals)
Individuals required to complete the training include the PI/PD, Co-PI/PD, and Investigators. Additional study team members may be required to take the training as specified by the agency (e.g. DOE and USDA). The training module may be automatically assigned in Workday. If it is not, self-enroll to complete the training. Be advised, WashU’s training does not cover non-WashU covered individuals. Alternatives are noted below.
Agency Requirements
Training is currently required for the following federal agencies. Other agencies may require the training; therefore, always confirm with the sponsor’s latest requirements before submitting a proposal or annual certification.
- National Institutes of Health (NIH): Research Security Training Requirements for NIH – NOT-OD-26-017; NIH also collects individual certifications at the time of application submission through the Biographical Sketch.
- National Science Foundation (NSF): Important Notice No. 149: Updates to NSF Research Security Policies
- Department of Energy (DOE): Financial Assistance Letter Research Security Training Requirements for all R&D Financial Assistance Awards. Be advised, additional study team members may be required to take the training under the NOFO or award terms.
- United States Department of Agriculture (USDA): America First Memorandum for USDA Arrangements and Research Security. Be advised, all study team members must complete the training.
- National Aeronautics and Space Administration (NASA): Research Security Training Requirements – NASA GIC 26-02
- Department of War: Agency wide training requirements are expected 10/1/2026.
Additional federal agencies will adopt these requirements in the future. It is strongly recommended that Senior Key Personnel on active federal awards or recently submitted federal proposals complete research security training.
Training for non-WashU covered individuals
WashU’s training cannot be completed by non-WashU individuals because it is customized around internal institutional practices; therefore, the content is not as beneficial for individuals outside of WashU.
For covered individuals on outgoing subcontracts from WashU, assurances of compliance are provided by the subcontracting institution through the letter of intent and subcontracting process.
For other non-WashU covered individuals, the following options are available to meet the requirements at the frequency noted above. Covered individuals who cannot illustrate compliance will need to be removed from that role prior to proposal submission.
- Provide a RST completion certificate or an institutional assurance letter from your home institution.
- Complete NSF’s Secure Center Training. The initial 1-hour training, and the annual 30-minute refresher training, are publicly available. Provide the completion certificate to WashU to illustrate compliance.
- Complete CITI’s Research Security Training for the initial training and refresher thereafter. Provide the completion certificate to WashU to illustrate compliance.
Contact Office: Office of Research Integrity and Ethics – orie@wustl.edu
Revision dates: 9/4/2026; 6/25/2026; 12/9/2025