The US National Science Foundation (NSF) has very recently published its guidelines for agency research security practices. Basically, this document describes NSF's internal practices for research security  analysis -- who conducts these activities, what resources are used, and how information is validated and shared both within and beyond NSF. This is well worth a look and I think helps substantially with transparency around NSF practices; it should go a considerable distance to addressing some long-standing concerns.

The announcement is here

https://new.nsf.gov/news/nsf-announces-guidelines-agency-research-security

and the guidelines proper can be found at

https://new.nsf.gov/research-security/guidelines

Note that there is a link to a PDF at the bottom of the guidelines page.

Clifford Lynch
Director, CNI