Robust Cybersecurity Mandatory for US R&D Institutions — White House

Research and Development (R&D) institutions in the US will be required to establish cybersecurity programs aimed at securing research and development, amid emerging threats from China.

“The Biden-Harris Administration is implementing several measures to improve research security while preserving the openness that has long enabled U.S. R&D leadership throughout the world and without exacerbating xenophobia, prejudice, or discrimination,” the White House said in a memorandum.

This memorandum states that higher education institutions certified by federal research agencies must adopt a cybersecurity program aligned with the CHIPS and Science Act's cybersecurity guidelines for research-focused entities.

This implementation is required within one year from the final issuance of this document, with the National Institute of Standards and Technology having published an initial draft of the guidelines.

“It is vital that research security programs increase awareness of research security threats and enable researchers, other participants in the U.S. R&D enterprise, and federal research agencies to respond appropriately while maintaining openness and ensuring fairness,’ the memorandum reads.

Recently, the White House also issued a memorandum to the heads of all Federal agencies outlining its "cross-agency cybersecurity investment priorities" for fiscal year 2026.

Signed by Office of Management and Budget (OMB) Director Shalanda Young and National Cyber Director (NCD) Harry Coker on July 10, through the memo the White House is calling on agencies to prioritize modernizing IT systems in their FY26 cybersecurity budget.