Research Security
![Steven N. Liss, Vice-President, Research & Innovation, presenting in front of a crowded room at the 2019 Celebration of Excellence](/content/dam/research/images/resources/ovpri-research-security.jpg)
As the Canadian government and other international jurisdictions implement new national security-related funding requirements and guidelines, higher education institutions are being asked to share the responsibility of safeguarding the research ecosystem, strengthening its integrity and enhancing its overall resilience.
The OVPRI works with counterparts at other universities, government stakeholders and our researchers and faculties to support the development of appropriate mitigation strategies.
The Government of Ontario has published new (PDF file) Research Security Guidelines for Ontario Research Funding Programs (opens in new window) . NEW June 2024.
These guidelines are to provide Ontario's institutions and researchers with an overview of the research security requirements and processes when they apply for a research funding program under the Ontario Ministry of Colleges and Universities.
The guidelines include: Definitions, Process overview, Application stages, Adjudication stage, Contracting stage and FAQs.
There are notable differences between the federal and provincial research security definitions and guidelines.
Tri-agency guidance on research security webpage (external link, opens in new window) March 28, 2024
This webpage provides up-to-date guidance for the research community with regard to the implementation of research security measures by the federal granting agencies. We encourage the TMU research community to familiarize themselves with this guidance, as well as the policies, guidelines and resources provided by the Government of Canada.
Research security refers to the ability to identify possible risks to your work through unwanted access, interference or theft and the measures that can be taken to minimize these risks and protect the inputs, processes and products that are part of scientific research and discovery.
Support Services
The OVPRI can provide support and guidance on conducting due diligence and developing risk mitigation strategies. Additionally, the Director of Research Security offers tailored one-on-one consultation and advice for security-related questions or concerns.
Contact An Chi Lee, Director, Research Security, at an.lee@torontomu.ca.
Questions to consider for due diligence
- If you are considering applying for federal or provincial grants, do the security requirements apply to you?
- If you are considering collaborating with foreign researchers or commercial partners, how can you identify potential risks that could impact your project or grant application?
- Are you hosting any international visiting scholars?
- Do you plan to travel abroad for research or present at a conference?
- Do you need help conducting due diligence or drafting risk mitigation plans for your proposals?
- Is your research area considered sensitive or dual-use? (Does your research involve large data sets of personal, identifiable information? Does your research involve or have implications for critical infrastructure?)
STRAC Additional Resources:
- Policy on Sensitive Technology Research and Affiliations of Concern (STRAC)
(external link, opens in new window) - Sensitive Technology Research Areas (external link, opens in new window)
- Named Research Organizations (external link, opens in new window)
- Definitions Used by the STRAC Policy (external link, opens in new window)
- Updated link of the Annex A Sensitive Technology Area of the National Security Guidelines to Research Partnerships (external link, opens in new window)
- Frequently Asked Questions (FAQ): Policy on Sensitive Technology Research and Affiliations of Concern (external link, opens in new window)
- MITACS Research Security Plan (external link, opens in new window) NEW August 8, 2024
Resources: Federal and Provincial Research Security
The list of Sensitive Technology Research Areas (STRA) (external link, opens in new window) published by the Government of Canada now applies to both the Sensitive Technology Research and Affiliations of Concern (STRAC) policy and the National Security Guidelines for Research Partnerships (NSGRP). The list includes the following 11 categories and their related subcategories. Please refer to the links provided to access detailed descriptions of each listed technology.
- Advanced Digital Infrastructure Technology (external link, opens in new window)
- Advanced Energy Technology (external link, opens in new window)
- Advanced Materials and Manufacturing (external link, opens in new window)
- Advanced Sensing and Surveillance (external link, opens in new window)
- Advanced Weapons (external link, opens in new window)
- Aerospace, Space and Satellite Technology (external link, opens in new window)
- Artificial Intelligence and Big Data Technology (external link, opens in new window)
- Human-Machine Integration (external link, opens in new window)
- Life Science Technology (external link, opens in new window)
- Quantum Science and Technology (external link, opens in new window)
- Robotics and Autonomous Systems (external link, opens in new window)
This STRA list may be updated periodically in accordance with the evolution of technologies, the military and intelligence applications of technology and national security imperatives.
The federal government has published a series of resources to help Canadian researchers, faculties, and the general academic community familiarize themselves with research security.
- National Security Guidelines for Research Partnerships (external link, opens in new window)
- Tri-agency guidance on the National Security Guidelines for Research Partnerships (external link, opens in new window)
- Policy Statements (external link, opens in new window)
- Protect your research – Ontario regional factsheet (external link, opens in new window)
- Safeguarding Your Research (external link, opens in new window)
- List of the Tri-agency's recommended research security resources (external link, opens in new window)
- Canadian Foundation for Innovation (CFI) research security guidance (external link, opens in new window)
Researchers, particularly those interested in applying for federal and/or provincial funding, are strongly encouraged to take the free online risk mitigation courses provided by the Government of Canada (external link, opens in new window) , which are each approximately 30–40 minutes long. Completing these courses is viewed as a good first mitigation measure to address research security-related risks. There are currently three free online courses offered:
- Introduction to Research Security
- Cyber Security for Researchers
- Safeguarding Research Partnerships with Open-Source Due Diligence
- Guidance on conducting open source due diligence (external link, opens in new window)
- CSIS – Safeguarding your research checklist (external link, opens in new window)
- Mitigating economic and/or geopolitical risks in sensitive research projects (external link, opens in new window)
- Government of Canada's overview of cyber security guidelines (external link, opens in new window)
- Canada Foundation for Innovation’s implementation of research security measures (external link, opens in new window)
- "A Shared Commitment by Universities to Protect Ontario's Research" by Ontario's Universities (external link, opens in new window) "
- (PDF file) "G7 Best Practices for Secure and Open Research" (external link, opens in new window)
- (PDF file) "Safeguarding Research in Canada: A Guide for University Policies and Practices" by U15 (external link, opens in new window)
- Research areas related to critical minerals, including critical mineral supply chains, on the Government of Canada’s critical minerals list (external link, opens in new window) .
- Research areas classified within one of the critical infrastructure sectors of the National Strategy for Critical Infrastructure (external link, opens in new window) . (Critical infrastructure refers to processes, systems, facilities, technologies, networks, assets and services essential to the health, safety, security or economic well-being of Canadians and the effective functioning of government.)
- Research areas that use large datasets that can be analyzed to reveal patterns, trends and associations, especially related to human behaviour and interactions that may have ethical, commercial or legal impacts at the individual, domestic or international level. The sensitivity of a large dataset depends on the nature, type and state of the information it contains, as well as how it may be used in the aggregate.
- Research areas that use personal data that could be leveraged by hostile state actors to harm Canada’s national and economic security through its exploitation.
Ontario: Definitions
The Definitions used by the Ontario Government for the following terms can be found in (PDF file) section 1 of the Ontario Research Security Guidelines (opens in new window) : Applicant, Conflicts of Interest (CoI), Conflicts of Commitment (CoC), Collaboration, Funding Beneficiaries, High-Risk, In-Kind Support, Non-disclosure, Named Researchers, Relevant Period.
- English version (external link, opens in new window)
- French version (external link, opens in new window)
Note: These terms and definitions are different from the federal government research security terms and definitions.
Ontario: Application Attestation Form (June 2024)
All named researchers in an application are required to complete and sign the Application Attestation Form (section 2.a.) when they apply for a research funding program under the Ontario Ministry of Colleges and Universities.
- English version (external link, opens in new window)
- French version (external link, opens in new window)
Ontario: Mitigating Economic and Geopolitical Risk Checklist (updated June 2024)
The Principal Investigator is required to complete the Mitigating Economic and Geopolitical Risk Checklist for Ontario Research Fund Applications when applying for a research funding program under the Ontario Ministry of Colleges and Universities.
- English version (external link, opens in new window)
- French version (external link, opens in new window)
Ontario: Research Security FAQs (June 2024)
We encourage you to familiarize yourself with the following TMU policies, procedures and guidelines to help maintain the integrity and confidentiality of electronically accessed research data and foster responsible and secure digital practices among researchers and staff.
TMU researchers travelling abroad for academic and professional purposes may be targeted for their access to certain sources of information and data, as foreign governments and businesses place a high priority on acquiring information related to research and innovation.
We encourage you to familiarize yourself with the Government of Canada guides and recommendations, which include tips for staying cyber-safe before and during travelling, as well as once you return home.
- Far From Home – A Travel Security Guide (external link, opens in new window)
- Government of Canada Device security for travel and telework abroad (external link)
- Government of Canada Cyber security while travelling (external link)
- Government of Canada Remaining cyber safe while travelling: security recommendations (external link)
- Government of Canada Travel security guide for university researchers and staff (external link)