National Security Presidential Memorandum 33 (NSPM-33) requires UO researchers to complete specific training related to research security, cybersecurity, foreign travel security, and export controls.
Currently:
- Research security training is required for all principal investigators and senior/key personnel who apply to or hold federal awards
- Cybersecurity training is required for all UO employees.
- Foreign travel security training is recommended for researchers who travel internationally for business, teaching, conference attendance, or research purposes regardless of whether the travel will be charged to a sponsored project.
- Export control training is recommended for researchers working with export-controlled technologies.
Quick Navigation
Research Security Training (Required for All Federally Funded Researchers)
Effective October 1, 2025, principal investigators (PIs), co-principal investigators (co-PIs), and senior/key personnel who apply to or hold federally funded awards must complete annual research security training. Any researcher who contributes in a substantive, meaningful way to the scientific development or execution of the project is considered senior/key personnel and has the training requirement.
Training Details:
- Required annually
- Must be completed before proposal submission and annually during the period of a federal award
- Takes about 1 hour
- Available in MyTrack Learning
Be sure to advance the training module until you see the certificate of completion at the very end. Otherwise, MyTrack may not record the training as complete.
Research Security Training for Subawardees and Contractors (Required)
The subawardee PI, co-PI, and senior/key personnel on federally funded awards must complete research security training, as does any other subaward researcher who contributes in a substantive, meaningful way to the scientific development or execution of the project.
Contractors who contribute in a substantive, meaningful way to the scientific development or execution of the project also need to complete research security training. Some contractors will meet this definition and others won’t.
Training Details:
- Required annually
- Must be completed before proposal submission and annually during the period of a federal award
- Takes about 1 hour
- Available from the SECURE Center
Subawardees and contractors should print and retain the certificate of completion at the end. Subawardees indicate their completion of the training requirement to the UO via the subaward certification form.
Please note that any UO researcher with a Duck ID must complete the research security training via MyTrack Learning. The below link is only for subawardees and contractors.
Training for Subawardees & Contractors
Back to Top
Cybersecurity Training (Required for All Employees)
All UO employees must complete annual cybersecurity training starting May 17, 2025. The training covers various aspects of cybersecurity, including recognizing phishing attempts, creating strong passwords, working remotely and in the cloud, and securing personal devices.
Back to Top
Foreign Travel Security Training (Encouraged, Not Yet Required)
This training will soon be required for principal investigators (PIs), co-principal investigators (co-PIs), and senior/key personnel who travel internationally for organization business, teaching, conference attendance, or research purposes regardless of whether the travel will be charged to a sponsored project.
Training Details:
- Required every 6 years
- Must be completed before international travel
- Takes about 1 hour
- Available in MyTrack Learning
Back to Top
Export Control Training (Encouraged, Not Yet Required)
Researchers working with export‑controlled technologies will be required to complete export control training once federal agencies finalize requirements.
The Office of Export Controls and Sponsored Projects Services will monitor award terms and conditions to identify researchers who will have this training requirement.
Training Details:
- Takes about 30 minutes
- Export Compliance Course available in CITI
Download our step-by-step guide for adding the Export Compliance Course. You're also welcome to email us, and we can add it for you. The course will take approximately 30 minutes to complete.
CITI offers instructions on how to affiliate the University of Oregon with your account if you have not already done so. If your account is not associated with the UO, we cannot confirm your required course completion.
Login to CITI with Your Duck ID