Research Security: NIH Action Needed to Strengthen Foreign Interference Risk Management

The National Institutes of Health is the largest public funder of biomedical research. Foreign entities' efforts to misappropriate or gain unauthorized access to this research could undermine U.S. national security and economic competitiveness.

NIH relies heavily on disclosures from researchers and institutions to identify and manage foreign interference risks. But foreign interference often involves undisclosed conflicts of interest or commitments. Therefore, it's important for NIH to determine when additional controls, such as verifying disclosures, may be needed.

We recommended ways that NIH could better manage foreign interference risks.

Front entrance of a National Institutes of Health building.

The National Institutes of Health (NIH) funds extramural research through awards to universities and other institutions. Implementation of federal research security requirements helps safeguard this research from foreign interference, including misappropriation and unauthorized access by foreign countries and entities.

NIH implemented 14 of the 15 federal research security requirements GAO reviewed that address: (1) disclosure, (2) malign foreign talent recruitment programs, (3) research security training and programs, and (4) collaboration and information sharing. These requirements apply across federal research agencies and include actions NIH must take, as well as requirements it must impose on grant applicants, recipients, and specified individuals. For the remaining requirement concerning certification by certain recipient institutions that they have established and operate research security programs, NIH is working with an interagency group to implement the requirement.