Research Security Training: Risk Management and Mitigation

该项目将在评估研究人员对研究安全的当前理解和知识差距的基础上，制定和评估一项关于研究安全的培训活动。这项活动将探索研究人员及其机构可以采取的行动，以评估、减少和管理对拟议和正在开发的研究、未发表的研究数据和其他信息的安全风险，并维护科学价值。根据《国家安全总统备忘录-33》(NSPM-33)和《2022年芯片加科学法案》，该项目直接满足了加强美国政府支持的研发的研究安全的需要。这种培训的传播和使用将更好地保护美国的研究利益不受国内外风险和威胁的影响。培训模块将是基于互联网的、可扩展的、灵活的，各种情况下的研究人员和利益攸关方，包括残疾研究人员，都可以广泛使用。培训单元将有标准内容，同时也为研究机构提供了增加内容以处理其当地做法的灵活性，并将培训纳入其当地系统。研究安全培训模块系列的开发由美国国家科学基金会(NSF)、美国国立卫生研究院(NIH)、能源部(DOE)和国防部(DOD)共同出资。这一专注于风险管理和缓解的研究安全培训模块将在与内容专家组协商的情况下设计和开发，该专家组包括政府部门的研究安全专家。培训发展将由ADDIE(分析、设计、开发、实施、评估)模型指导，ADDIE模型是一种广泛使用的、灵活的、健壮的课程和课程设计模型。在初步设计工作和咨询之后，将召集焦点小组，以确定潜在的教学挑战，评估学习者现有的知识和误解，认识技术和结构要求，并确定所需教学的类型和范围。项目组将评估该单元的有效性，方法是进行用户测试，在最后确定材料之前与一小群学习者排练培训材料和教学方法，然后与现实世界的目标学习者进行试点研究，以评估完成的培训模块的有效性。在最终用户测试、评估和修改设计后，该模块将分发给研究安全利益相关者，包括基于大学的研究人员、本科生和研究生、学术管理人员、研究安全管理人员以及政府机构和国家实验室的研究人员和工作人员。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

This project will develop and evaluate a training activity about research security based on an assessment of current understanding and knowledge gaps among researchers about research security. This activity will explore actions researchers and their institutions can take to assess, reduce, and manage risks to the security of research proposed and under development, unpublished research data, and other information and to uphold scientific values. This project directly addresses the need to strengthen research security of U.S. government-supported research and development, per the National Security Presidential Memorandum – 33 (NSPM-33) and the CHIPS plus Science Act of 2022. Dissemination and use of this training will better protect U.S. research interests from both foreign and domestic risks and threats. The training module will be Internet-based, scalable, flexible, and widely accessible to researchers and stakeholders in a variety of settings, including researchers with disabilities. The training module will have standard content while also providing research institutions the flexibility to add content to address their local practices and incorporate training into their local systems. The development of the research security training module series is collaboratively funded by the National Science Foundation (NSF), the National Institutes of Health (NIH), the Department of Energy (DOE), and the Department of Defense (DOD).This research security training module focused on risk management and mitigation will be designed and developed in consultation with a Content Expert Group, which includes experts in research security across government. Training development will be guided by the ADDIE (Analyze, Design, Development, Implementation, Evaluation) model, a widely used, flexible, and robust model for curriculum and course design. Following the initial design work and consultation, focus groups will be convened to identify potential instructional challenges, evaluate learners’ existing knowledge and misconceptions, recognize technical and structural requirements, and determine the type and extent of instruction needed. The project team will assess the effectiveness of the module by performing user testing where training materials and instructional methods are rehearsed with a small group of learners before finalizing the materials, and then conducting a pilot study with real-world target learners to assess the effectiveness of the completed training module. Following end-user testing, evaluation, and revisions to the design, the module will be made available for dissemination to research security stakeholders, including university-based researchers, undergraduate and graduate students, academic administrators, research security administrators, and researchers and staff in government agencies and national laboratories.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.