SYSWERX — NSPM-33 and the 2026 DoW Decision Matrix

Where things stand · October 2026

Some requirements are here. More are arriving.

In force

Research security training certification for covered individuals on proposals to DOE, NSF and NIH, under CHIPS and Science Act §10634.

In use

The 2026 Department of War decision matrix for risk-based security reviews of fundamental research proposals selected for award.

Arriving

Research security program certification for institutions above $50M a year in federal science and engineering support, agency by agency, with realistic dates from late 2026 into 2027.

Requirement by requirement

What the rules ask, and where SYSWERX answers.

Disclosure of appointments, affiliations and support

"Is what they disclosed complete?"

Disclosure check. Load the Current & Pending (Other) Support and Biographical Sketch common forms. Every item from the screening is checked line by line: disclosed items are quoted, and omissions tied to listed entities come first. The document is read in your browser and never uploaded.

Malign foreign talent recruitment programs · CHIPS §10632, §10638

"Are they in a talent program?"

Talent program detection. Programs named on the researcher's own record, in paper acknowledgments, appointments and titles, matched to a cited program list and marked attributed or unattributed. A current, corroborated program sets HIGH priority. Whether a program is malign stays your institution's call.

Entity lists · US and allied government lists

"Do they work with a listed entity?"

Watchlist screening. Restricted and sanctioned entities from government lists, each cited to its list. Checked against the researcher's own affiliations, the parent organizations of their units, their co-authors, and their funders, with the paper behind every tie.

DoD fundamental research · 2026 DoW decision matrix

"What will the program office see?"

Matrix reading on every record. Talent programs, funding sources, patents and entity lists, each marked prohibited-class, mitigation-class, check the disclosure, or nothing in the window, with the facts behind it. The decision on a proposal stays with the program office.

Consistent, documented decisions

"How did your office decide?"

Cases. Findings settled one by one, requests to the researcher, referrals to other offices, a sign-off with a written rationale, optional two-Lead approval, and a tamper-evident audit trail, all in a confidential case file.

Program certification

"Does your program work?"

My Institution. The roster monitored on a schedule set by risk, alerts that say what changed, exposure by department, program completeness, and a one-page program summary for leadership.

The matrix, on every record

Walk into the review knowing what they'll see.

Each screening is read against the four factors of the 2026 DoW decision matrix, over the matrix's five-year window, with the watchlist version stamped on it. Co-authorship is treated as the matrix treats it: a reason for mitigation, never on its own a reason to reject.

DoW 2026 decision matrix past 5 years (2021–2026)

1Talent programs

Mitigation-class

1 in window

2Funding sources

Mitigation-class

1 in window

3Patents

None in window

0 US patents matched

4Entity lists

Prohibited-class

4 in window · 2 context

▸ The facts behind each reading

Sample record · fictional researcher

What the software covers. SYSWERX covers the review side of a research security program: disclosure, affiliations, funding, talent programs, entity lists, and the decisions that follow. Cybersecurity controls, travel briefings and training delivery are outside the software.

Built for the questions NSPM-33 asks.