Research security
The RCF is obliged by law us to ensure that research security and the risks associated with it are taken into account appropriately in funded research projects and research collaboration and in the utilisation of research results. However, according to the law, consideration of security aspects must not restrict the researcher’s right to choose their research topic and methods.
International cooperation is vital for scientific research in Finland. The changing geopolitical situation and international tensions call for increasingly accurate risk identification and management. Responsible international cooperation entails not only taking advantage of opportunities, but also being aware of risks and engaging in well-thought-out cooperation.
The RCF’s funding schemes are designed to support a broad range of international research collaboration. At the same time we recognise that, in some situations, research activities may involve security risks. As a research funder, we consider research security issues also in our own international cooperation.
Research security refers to the anticipation and management of risks related to international collaborations.
- The risks may be associated with the transfer of critical knowledge and technology to collaborators in such a way that national security could be compromised through the military or intelligence use of the information.
- Risks are also posed by harmful interference in research, where research is used as a tool to spread disinformation or to induce self-censorship among students and researchers, thereby undermining academic freedom and research integrity.
- There is also a risk that knowledge and technology could be used to undermine fundamental rights or violate European values.
Consideration of research security issues is part of responsible research funding. Each applicant is responsible for ensuring that security aspects are taken into account in the research project.
What we expect from applicants
All applicants must include a security assessment with their application, including a self-assessment of research security and, if necessary, a risk management plan. If the project involves issues related to research security, the researcher must explain in sufficient detail in the risk management plan how these issues have been taken into account.
The self-assessment shall cover the following aspects:
- Is the research related to critical technology?
- Does the research have dual-use potential (civilian and military use)?
- Does the research involve collaborators who may pose a security risk?
- Does the research involve any other identifiable security risks?
If security risks are identified in the project using the self-assessment questions, the applicant must draw up a risk management plan. The self-assessment and plan will together form an appendix, which must be properly prepared in order for a positive funding decision to be made.
What we expect from the site of research
The site of research undertakes to ensure that the risks associated with research security and the management of those risks are described in the application and taken into account appropriately in the research and cooperation carried out in the project, as well as in the utilisation of the research results.
Review and decision-making process
The research security description is not part of the international peer review of the application. However, the self-assessment and risk management plan appended to the application will be sent to the reviewers as part of the application, and the reviewers will have the opportunity to comment on them.
Security aspects are taken into account as part of the RCF decision-making process, as required by law and the recommendation by the Council of the European Union. The RCF’s presenting officials will check that sufficient information has been provided in the self-assessment and the risk management plan. The RCF’s decision-making bodies will consider on a case-by-case basis what level of risk related to research security the RCF as a funder can accept.
It is important to note that the existence of risks is not an obstacle to the granting of funding. Critical technologies are permitted research topics, and the dual-use nature of the research results will not prevent funding. There are also no prohibited collaborator countries or organisations (except those subject to sanctions). However, with some collaborators, particular care must be taken to consider the research security risks.
Changes in risk assessment during the project
If changes occur during the project in international cooperation or in other factors affecting the risk assessment, the security assessment submitted at the application stage must be revised to reflect these changes. Any changes that increase the risk level must be notified to the RCF. More detailed instructions on changes related to research security during the project are available in the funding terms and conditions accompanying the funding decision.
