
Essential Research Trainings
Dr. Nadim Mahmud
Introduction
Before you can be listed as study personnel on a Penn IRB protocol, handle patient data, or enroll subjects in a trial, you need to complete a set of regulatory certifications. These trainings are not just administrative boxes to check. They exist to protect research participants, the integrity of your data, and you as a researcher.
The good news: most of these are completed once, with only a few requiring periodic renewal. Getting them done early, before you have identified a specific project, means you will not be stuck waiting on paperwork when a mentor is ready to bring you onto a study. This article breaks down what is required at Penn, how to complete each training, and how to stay current.
Pro tip for new residents
Complete your CITI Biomedical Research certification early in intern year, well before you need it for a specific project. Many projects stall not because of the science, but because of missing certifications.
The Core Trainings
Here are the key certifications you will encounter as a Penn IM resident doing research. Some are required universally; others depend on the nature of your project.
CITI Program Training
Required for IRB personnelThe Collaborative Institutional Training Initiative (CITI) is the primary platform for human subjects research training at Penn and most major research institutions. Anyone listed as study personnel on a Penn IRB protocol must have completed CITI certification prior to starting research.
At Penn, the standard track for clinical/biomedical residents is the Biomedical Research course. The Social/Behavioral Research track applies to qualitative or survey-based work. If you are unsure which applies to your project, ask your mentor or IRB coordinator, or select Biomedical, which is the more common requirement.
Penn-specific note
As of April 2019, renewal of CITI Human Research training is no longer required at Penn. Initial completion is required prior to starting clinical research, but there is no ongoing recertification requirement. Confirm with your IRB coordinator if you are being added to a protocol at another institution, as requirements may differ.
At a glance:
Time to complete: ~4 to 6 hours for initial certification
Renewal: Not required at Penn (as of April 2019)
Platform: citiprogram.org — affiliate with University of Pennsylvania
HIPAA Privacy & Security Training
Required annuallyAll Penn Medicine employees and trainees, including residents, must complete HIPAA training annually. You likely completed this at the start of residency and will receive a reminder when renewal is due.
For research purposes, HIPAA training underscores the importance of handling Protected Health Information (PHI) appropriately, whether you are conducting a chart review, using an institutional database, or enrolling participants in a study.
At a glance:
Time to complete: ~30 to 60 minutes
Renewal: Every year
Platform: Knowledge Link or Workday (see links below)
Good Clinical Practice (GCP)
Required for clinical trialsIf you are involved in a clinical trial, even peripherally as a sub-investigator reviewing data or assessing eligibility, you need GCP certification. This is an international standard for designing, conducting, recording, and reporting trials involving human subjects, and it is required by the FDA and most industry sponsors.
GCP training is available through CITI (the most commonly used option at Penn). Certain pharmaceutical sponsors may require their own GCP module in addition to CITI. Check with your principal investigator.
At a glance:
Time to complete: ~3 to 4 hours
Renewal: Every 3 years (some sponsors require every 2)
Platform: citiprogram.org — select the GCP module after completing initial CITI setup
Responsible Conduct of Research (RCR)
Required for NIH-funded traineesThe NIH (National Institutes of Health) requires RCR training for trainees on T32 grants, F fellowships (F32, F31), and K awards. RCR covers research misconduct, data management, authorship, conflicts of interest, and the ethical treatment of research subjects. This will not apply to most residents during residency, but becomes relevant for those pursuing clinician-scientist pathways in fellowship.
Penn offers RCR training through CITI and in-person workshops. NIH requires a face-to-face component at least every 4 years, so online modules alone may not satisfy the requirement. Confirm specifics with your program director.
At a glance:
Time to complete: Varies — CITI module ~2 to 3 hours; in-person workshops vary
Renewal: At minimum every 4 years per NIH; some programs require annually
Platform: CITI + Penn RCR workshops (check with your program)
Financial Conflict of Interest (FCOI) Disclosure
Required for investigatorsPenn requires anyone listed as an Investigator on a research proposal or IRB protocol to submit a financial conflict of interest disclosure. The term "Investigator" is defined broadly as anyone responsible for the design, conduct, or reporting of research, regardless of title or position. This means that residents named on IRB protocols are included.
Disclosures are submitted through Penn's RIA (Research Integrity and Assurance) system, which replaced the prior FIDES platform in March 2024. The disclosure must be completed prior to participating in research, and then updated at least annually and within 30 days of acquiring any new Significant Financial Interest (SFI). For most residents, the disclosure is straightforward, as significant outside financial interests are typically limited at this stage of training.
At a glance:
Time to complete: ~10 to 15 minutes for most residents
Renewal: Annually and within 30 days of a new financial interest
Platform: RIA system (contact your research coordinator or IRB coordinator for access)
Training Needs Finder
Not sure exactly which trainings apply to your situation? Answer three quick questions and your personalized checklist will appear automatically.
1. Are you currently supported by, or contributing to, a federally funded research project (NIH, AHRQ, etc.)?
2. Will your research involve human subjects or patient data?
3. Will you be involved in a clinical trial or interventional study?
Setting Up CITI at Penn: Step by Step
CITI is the most commonly used research training platform at Penn. Here is how to get started:
- 1
Create or log in to your CITI account
Go to citiprogram.org and register using your Penn email address, or log in if you already have an account.
- 2
Affiliate with the University of Pennsylvania
Under "Add an Affiliation," search for and select University of Pennsylvania. This unlocks Penn-specific required course tracks.
- 3
Select your course track
For most Penn IM residents, the required track is Biomedical Research. If your research is exclusively survey- or interview-based, choose Social/Behavioral Research. If you are involved in a clinical trial, you will also need to add the GCP module. You can add multiple courses.
- 4
Complete the modules at your own pace
The Biomedical course is broken into modules that you can complete over multiple sessions. Most people finish in one or two sittings. You must pass a short quiz after each module.
- 5
Download and save your completion certificate
Once all modules are passed, download your certificate PDF. Save it somewhere you can retrieve it quickly. Your mentor, the IRB coordinator, or a sponsor may ask for it when you are added to a protocol.
Renewal & Staying Current
Expired certifications are one of the most common reasons residents get blocked from joining a new IRB protocol or trial. Here is a simple reference for how long each training is valid:
| Training | Valid For | Renewal Format |
|---|---|---|
| CITI Biomedical / SBR | No renewal required at Penn | N/A (Penn-specific policy) |
| CITI GCP | 3 years (some sponsors: 2) | Online refresher |
| HIPAA | 1 year | Online module via Knowledge Link or Workday |
| FCOI Disclosure | 1 year | Online form / annual attestation in RIA |
| RCR | 4 years (NIH minimum) | Online + face-to-face component |
A good habit is to review your certifications at the start of each academic year, particularly for HIPAA and FCOI, which renew annually. For GCP, check your CITI dashboard and renew anything expiring within the next 6 months before it becomes an obstacle to joining a new study.
Practical Tips for Residents
Complete CITI before you need it. IRB protocol amendments to add personnel can take time. If you want to join an existing study, having a valid CITI certificate already in hand dramatically speeds up the process. Aim to finish it in your PGY-1 year.
Keep your certificates in one accessible place. A shared Google Drive folder or your Penn email archive works well. You may be asked for your certificate by multiple people across multiple studies, and hunting through old emails is frustrating.
Check your expiration dates before joining a study. It is common for IRB coordinators to flag expired certifications when you are being onboarded to a protocol. A quick check on CITI before reaching out to a mentor saves everyone time.
Ask about GCP early for clinical trial work. If you are rotating with a mentor who runs trials, proactively completing GCP certification is worthwhile. Sponsors auditing clinical trials will check that all personnel on the delegation log have current GCP, and it is far easier to have this done before the audit is scheduled.
If you are on a T32, talk to your program director about RCR. The NIH requirement has specific face-to-face components that vary by training program. Do not assume the CITI RCR module alone is sufficient, as it typically is not.
When in doubt, contact the Penn IRB directly. The Penn IRB office is remarkably approachable and can answer training questions quickly. irb.upenn.edu ↗
Continue Learning
Once your certifications are in order, these topics are natural next steps: