New Federal Research Security (RS) Training Requirement
Several federal agencies have taken steps to implement the Research Security (RS) training required out of NSPM-33 and the Chips and Science Act.
All key personnel on projects funded by the National Science Foundation (NSF), National Institutes of Health (NIH), U.S. Department of Defense (DOD), and U.S. Department of Energy (DOE) must now complete federally mandated research security training to strengthen the integrity and protection of U.S. funded research. Further, NIH issued NOT-OD-25-1255 which states all Senior/Key Personnel must complete research security training within 12 months of a proposed submission to be eligible for an (NIH) award. It is anticipated that all federal grant funding agencies will soon include research security training requirements. Therefore, UMBC is requiring all key personnel on federally funded (direct or flow through) sponsored proposals and awards to complete this training.
How to Complete the Training:
- Visit https://www.citiprogram.org
- Log in or create an account
- Affiliate with UMBC – if you have not already done so.
- Enroll in the "Research Security Training Combined Course"
- Complete all required modules
Frequently Asked Questions
Who must complete RS Training?
Anyone who is key on any federal proposal or award.
We are also recommending the training for anyone working on any sponsored award, as well as the RCA administrative community.
Please note, we do expect RS training requirements to expand, as federal and non-federal agencies follow NIH, NSF, DOD and DOE.
Why is RS training required?
Stemming from administrative direction provided to agencies via NSPM-33 and the Chips and Science Act, multiple federal agencies (NSF, DOE, NIH and DOD) have issued mandatory security training. It is anticipated that all federal agencies and non-federal sponsors will be issuing similar requirements.
When must RS training be completed?
As of 10/1/25 OSP will not submit a proposal or issue any award modification without the training completed. OSP will attempt to provide any flexibility allowed by the sponsor throughout 2025.
Each agency is implementing a bit differently. NSF and DOE require this training to be completed at the proposal stage, NIH requires as Just in Time, or award stage. As such, we are requiring the training at the proposal stage for all sponsors.
Training renewals will be required every three (3) years. (Note: We are still verifying if NIH is requiring an annual renewal).
How long will it take me to complete the RS training?
CITI estimates the training will take about an hour.
How is the RS training being tracked?
The training is capture as part of your CITI training portfolio. It is also fed into Kuali where it will be attached to your Personal record in Kuali where all of your other RCA training is captured. At the proposal stage, your unit Administrative team will be able to confirm the training has been completed for anyone named on a proposal. OSP is required to officially certify the training is completed when the proposal is submitted. Your Administrative support will also be required to verify training when any key or named individuals are added to an award. It is critical that you utilize your UMBC login credentials to access the CITI training modules. Otherwise, your training will not feed to Kuali.
I am on a Technology Control Plan (TCP) that required me to take Export Control Training. Is that the same?
Unfortunately, it is not the same. Export Control Training does not cover all the topics associated with Research Security Training. Export Control is a component of Research Security.
I have taken PIRATE, does that satisfy as meeting the RS training requirement?
Not yet. We are working with CITI to move PIRATE from Blackboard to CITI. Once it has been moved, we are creating a link to the required RS training.
I have taken RCR training, does that satisfy as meeting the RS training requirement?
No. The RCR RS training is simply a short overview, but it does not cover the all the topics required by the federal agencies.
Who can I contact if I have additional questions about this training requirement?
ORPC at researchintegrity@umbc.edu
This new training requirement will be discussed at the September 12, 2025 RCAC meeting, which will be held from 11-1pm in PHYS 401, Faculty are welcome to attend.
This training will also be discussed during the September 17, 2025 ERAG for administrative staff, which will be held via Webex from 9:30am to 11:00am.