The research security rulebook, in plain English.
Requirements are arriving faster than most compliance offices can track them. This library explains each mandate — who is covered, what it requires, the dates that matter, and what institutions should do — in language you can forward to a dean. Reviewed monthly against primary sources.
NSPM-33 & research security program certification
Expected 2026–27National Security Presidential Memorandum 33 directs federal agencies to require research security programs from institutions receiving more than $50 million in federal science funding.
The CHIPS & Science Act research-security provisions
In forceThe CHIPS and Science Act of 2022 codified NSPM-33-style requirements into law — including required research security training, disclosure requirements, and MFTRP prohibitions.
The NIH Research Security Training requirement, explained
In forceNIH Guide Notice NOT-OD-26-017 requires every senior/key person on an NIH application with a due date on or after May 25, 2026 to have completed research security training within the previous 12 months.
Common Forms & SciENcv — the 2026 disclosure standard
In forceNIH (and NSF) applications require personally certified biosketch and current-and-pending disclosures produced in SciENcv, with ORCID linked to eRA Commons. Rolled out in three phases in 2026; system enforcement began May 8, 2026.
Malign Foreign Talent Recruitment Programs (MFTRP) — certification & prohibitions
In forceThe CHIPS Act prohibits federal research funding to individuals participating in a malign foreign talent recruitment program, and requires institutions to certify no covered individuals participate.
False Claims Act enforcement in university research — a living tracker
Active enforcementThe federal False Claims Act is now the primary enforcement vehicle for research disclosure failures. Settlements since 2020 — with institution, year, amount, and DOJ link — updated as they're announced.
Explainers ground the strategy. Verification grounds the certification.
If your institution certifies federal research disclosures, a briefing walks through verification on realistic examples — in about 30 minutes.