Awareness and Training

Recommended Stony Brook University Training

At a a minimum researchers engaged in international activities (funded and unfunded) should complete in the Collaborative Institutional Training Institute (CITI) Module 3: Manage and Mitigate Risk (see Complete the National Science Foundation (NSF) Research Security Training in Collaborative Institutional Training Institute (CITI) below). Note some sponsors may require completion of additional modules.

Identify Academic Solicitation

The Defense Counterintelligence and Security Agency (DCSA) defines Academic Solicitation as the use of students, professors, scientists or researchers as collectors improperly attempting to obtain sensitive or classified information. These attempts can include requests for, or arrangement of, peer or scientific board reviews of academic papers or presentations; requests to study or consult with faculty members; requests for and access to software and dual-use technology; or applications for admission into academic institutions, departments, majors, or programs, as faculty members, students, fellows, or employees.

This may include requests from U.S. persons, or from foreign nationals located in the United States or abroad, and may consist of:

Unsolicited applications or requests for undergraduate, graduate, postgraduate or other research positions.
Unsolicited requests for access to research papers or other research-related publications or documents.
Unsolicited requests for assistance with or review of thesis papers, draft publications or other research-related documents.
Unsolicited invitations to attend and/or present at international conferences.

Identify Intelligence Threats from Social Media

The National Counterintelligence and Security Center (NCSC) released a video about social media and hostile actors posing as trusted individuals - read more and watch "The Nevernight Connection".

The NSCS and FBI encourage basic cyber hygiene when using social media:

Never accept an invitation to connect from someone you do not know, even if they are a friend of a friend
If possible, validate invitation requests through other means before accepting them
Exercise caution when posting information about yourself, your job and contacts on social media, as it could draw unwanted attention from adversaries and criminals
Report suspicious online approaches to appropriate authorities

Complete the National Science Foundation (NSF) Research Security Training in Collaborative Institutional Training Institute (CITI)

Be sure to complete this training in the CITI* program to create an institutional record of completed training. SBU strongly encourages completion of these modules - these modules are required by some sponsors.

The U.S. National Science Foundation, in partnership with the National Institutes of Health, the Department of Energy and the Department of Defense, is sharing online research security training for the research community. In a series of four video modules, the training provides recipients of federal research funding with information on risks and threats to the global research ecosystem — and the knowledge and tools necessary to protect against these risks.

Modules: 1. What is Research Security, 2. Disclosure, 3. Manage and Mitigate Risk, and 4. International Collaboration.

*CITI is available to all SBU faculty, staff and students - Use the Log In Through My Organization option and use your NetID and password

Directions: Select "Add a Course", then "I want to complete the Research Security Course at this time", then "Research Security Training", select "Next". You will then have the option of viewing any or all four modules, completion of the modules will be recorded in CITI.

Practice Travel Security

The Office of the Director of National Intelligence has issued a brochure and a travel awareness video aimed at privacy and security for international travel.

The Federal Bureau of Investigation (FBI) has issued several brochures aimed and safety and security of international travel.

Additional Research Security Awareness Trainings in Collaborative Institutional Training Institute (CITI)

In addition to the research security training referenced above. CITI has created videos based on research security topics.

Modules: 1. Introduction to Research Security, 2. Risk Mitigation and Research Security, 3. Cybersecurity and Research Security, 4. International Collaborations, 5. International Travel, 6. Foreign Interference, 7. Federal Funding & Foreign Gifts and Contracts, and 8. Disclosures and Transparency.

*CITI is available to all SBU faculty, staff and students - Use the Log In Through My Organization option and use your NetID and password

Directions: Select "Add a Course", then "I want to complete the Research Security Course at this time", then "Research Security Advanced Refresher", select "Next". You will then have the option of viewing any or all eight modules, completion of the modules will be recorded in CITI.