The US National Science Foundation (NSF) has very recently published its guidelines for agency research security practices. Basically, this document describes NSF's internal practices for research security analysis -- who conducts these activities, what resources are used, and how information is validated and shared both within and beyond NSF. This is well worth a look and I think helps substantially with transparency around NSF practices; it should go a considerable distance to addressing some long-standing concerns.

The announcement is here

NSF announces guidelines for agency research security analytics practice | NSF - U.S. National Science Foundation

The U.S. National Science Foundation recently released guidelines for research security analytics on the agency's research security website . Research security, defined as safeguarding of the U.S…

and the guidelines proper can be found at

Research Security Guidelines | NSF - U.S. National Science Foundation

Note that there is a link to a PDF at the bottom of the guidelines page.

Clifford Lynch Director, CNI