Research Security

The House passed its FY2027 National Defense Authorization Act in July, but the Senate has not scheduled a markup or floor vote, leaving final provisions unresolved. Higher education groups oppose adding broad foreign-funding and research restrictions, which could increase compliance burdens and affect research partnerships for institutions and contractors supporting federally funded academic work.

The Association of American Universities and the Association of Public and Land-grant Universities urged Congress to revise proposed Department of Defense research-security provisions in the FY2027 NDAA. DoD-funded universities, research organizations, and contractors should monitor the conference outcome for possible effects on foreign collaborations, funding eligibility, laboratory access, and compliance obligations.

The **Department of Energy** is broadening cybersecurity and research-security due diligence for SBIR/STTR applicants under a statutory framework extended through September 30, 2031. Applicants in the FY 2025 Phase II Release 2 Applied Science round must provide a body of evidence and requirements reporting instead of the standard cybersecurity self-assessment, while DOE may review foreign ties, ownership, and other affiliations.

A December 8 virtual briefing will examine foreign-research risks in federally funded grants, including visiting-scholar vetting, researcher identity checks, and pre-award portfolio screening. The event may help agencies and contractors assess research-security needs and tools, but it announces no solicitation, award, or mandatory requirement.

The Department of War says all 30 universities directed to audit relationships tied to the NDAA Section 1286 list mitigated identified concerns, resulting in more than 80 termination-related actions. The department has signaled further scrutiny, putting federally funded research institutions and their contractors on notice to review foreign affiliations, disclosures, and collaboration risks.