A Technology Control Plan (TCP) is required for all research involving data, material, or technology that requries safeguarding. This may include research not covered by the fundamental research exemption (FRE) . TCPs must include:
- A physical and information security plan
- Personnel screening procedures
- A process for carrying out the research in a controlled environment
To assist ORIA and Research Security in helping you develop a TCP, please complete the TCP Security Questionnaire.
All members of a research team will be required to read, understand, and sign the TCP before funds will be released and before anyone can work on, or be paid for, the project. Additionally, the business manager, department chair, and IT support will be required to sign the TCP.
Training and Exclusions
All individuals working on a project with a TCP must complete export training before beginning work or being charged to the project. Training sessions are offered monthly but fill quickly, so sign up as soon as possible. Annual refresher training will be required throughout the life of a project.
Foreign nationals may not work on a project outside the fundamental research exemption without approval from the Office of Research Integrity Assurance. This may require an export license from the federal government which requires significant lead time. An export license may take three - six months to receive. Also, students (including U.S. citizens) may not work on any project that is ineligible for the fundamental research exemption for a thesis or dissertation without approval of the Office of Research Integrity Assurance.