Research Security Program Components

International travel associated with university business, sponsored research, conferences, professional activities, or other university-related purposes may be subject to research security and export control review.

Researchers should consult RIC as early as possible in the travel planning process when international research activities, foreign collaborations, international shipments, or sensitive technologies may be involved.

Federal and state requirements require institutions of higher education to address foreign travel security as part of their research security programs. Certain international travel may require additional review based on destination, research activities, foreign collaborations, funding sources, technologies involved, or other risk factors. Texas State utilizes a risk-based approach to review employment-related international travel activities.

Research security reviews may consider factors such as:

• Destination country;
• Purpose of travel;
• International research collaborations;
• Transportation of equipment, software, or research materials;
• Access to research data while abroad;
• Sponsor-specific travel requirements; and
• Information security considerations associated with international travel.

Pursuant to Executive Order GA-48, additional restrictions and reporting requirements may apply to activities involving countries designated as foreign adversaries under 15 C.F.R. § 791.4. These countries currently include China, Cuba, Iran, North Korea, Russia, and Venezuela. Researchers considering activities involving these countries should consult RIC prior to making travel arrangements, engaging in professional activities, or initiating research collaborations.

Cybersecurity is a core component of institutional research security programs. Researchers are responsible for protecting university information resources, research data, controlled information, and other sensitive information from unauthorized access, disclosure, alteration, or loss.

Texas State requires annual cybersecurity training and maintains policies and procedures that support the secure management of information resources and research activities. Researchers should ensure they comply with applicable university information security requirements and data protection practices.

Texas State's Export Control Program supports compliance with federal laws and regulations governing the export of goods, technology, software, services, and information, including regulations administered by the U.S. Departments of Commerce, State, and Treasury.

International collaborations, foreign travel, research agreements, shipments, field work, and activities involving foreign persons, foreign entities, or foreign destinations may present export control considerations. While much of the university's research qualifies as fundamental research, certain activities may be subject to export control restrictions. Researchers should consult with the Export Control Office regarding potential export control obligations.

Texas State utilizes the Collaborative Institutional Training Initiative (CITI) to provide research security training resources. Training requirements may vary based on an individual's role, funding source, research activities, and applicable sponsor requirements.

Training may include:

• Research Security;
• International Travel;
• Export Control;
• Cybersecurity; and
• Other compliance-related topics as required.

Researchers should complete all assigned training requirements in a timely manner and maintain training compliance as required by university policies and sponsor obligations. Questions regarding research security requirements should be directed to Research Integrity & Compliance