Research Security

Colorado State University remains firmly committed to the principles of academic freedom, open inquiry, and international collaboration. Global engagement and the free exchange of ideas are essential to advancing knowledge and addressing the world’s most pressing challenges.

Over the past several years, the federal government has placed increased emphasis on protect public investment in science, prevent the misuse of sensitive data and technologies, and ensure the safety of university personnel, including those traveling abroad.

Colorado State University’s Research Security Program brings together compliance programs outlined in NSPM-33, OSTP Guidelines, CHIPS and Science Act and funding agency policies, including: cybersecurity, foreign travel security, insider threat awareness, export control training, conflicts of interest and commitment, and prohibition on participation in malign foreign talent recruitment programs.

Research Security Training

Federal regulations and guidance require that all PIs, Co-PIs, and key/senior research personnel listed on proposals for federal funding must take Research Security training prior to the submission of a proposal.  This regulation goes into effect in the summer of 2025. CSU Research is strongly encouraging all investigators and named key personnel to complete this training as soon as possible.

Training is available through CITI. Please select the “Research Security Training (Combined)” course, which takes approximately 1 hour to complete and covers:

  • What is Research Security
  • Disclosure
  • Managing and Mitigating Risk
  • International Collaboration

No action is needed to report completion—your training record will be automatically updated.

Federal Laws, Regulations and Directives Pertaining Research Security

The U.S. Government has enacted the following federal directives and legislation regarding disclosures, research security program requirements, and research security training:

National Science Foundation

National Institutes of Health

Department of Energy

Department of Defense

  • Cybersecurity Maturity Model Certification (CMMC) regulations for handling Controlled Unclassified Information (CUI)