A single breach in laboratory containment can transform scientific research into a public-health emergency. The 2004 SARS outbreak in Beijing was traced to a laboratory where biosafety protocols failed. Between biosafety (preventing accidental exposure) and biosecurity (preventing deliberate theft or misuse), laboratories handling dangerous pathogens require physical containment, access controls, trained personnel, and a functioning biorisk-management system.
- Distinguish between biosafety (protecting people and environment) and biosecurity (preventing misuse).
- Understand the four Biosafety Levels (BSL-1 through BSL-4) and their containment requirements.
- Recognize primary and secondary barriers for pathogen containment.
- Explain how PPE, face protection, and respirators fit within the hierarchy of controls.
- Distinguish Security Risk Assessments for regulated select-agent access from enhanced suitability requirements for Tier 1 agents.
- Apply cyberbiosecurity controls to connected instruments, laboratory information systems, automation, and genomic-data workflows.
- Integrate cyber incidents and near misses into the laboratory biorisk-management system.
Biosafety vs. Biosecurity: Biosafety protects laboratory workers, the environment, and the public from exposure to infectious agents (CDC BMBL). Biosecurity prevents unauthorized access, loss, theft, misuse, or intentional release of biological materials (Biosafety.be).
Biosafety Levels (BSL-1 through BSL-4): BSL designations are selected through a documented, activity-specific risk assessment. The same agent may require different containment for different procedures, and a BSL level is not a proxy for whether a vaccine or treatment exists.
- BSL-1: Minimal risk agents not known to cause disease in healthy adults (Lab Manager, CDC BMBL). Standard microbiological practices, PPE, open benches allowed.
- BSL-2: Moderate-risk agents causing human disease, typically not airborne (NIH). BSL-1 practices plus biological safety cabinets (BSCs) for aerosol-generating procedures, limited access, biohazard signage.
- BSL-3: Serious or potentially lethal agents with respiratory transmission potential (UC San Diego, CDC BMBL). All work in BSCs, sealed facilities with directional airflow, strict access controls, specialized PPE.
- BSL-4: Agents requiring maximum containment because of high individual and community risk (CDC BMBL, GAO-26-107338). Full-body positive-pressure suits or Class III BSCs, airlocks, and complete decontamination of waste and exhaust air are used according to the facility’s risk assessment.
Primary Barriers: Biological safety cabinets, sealed equipment, and PPE protect personnel and the immediate laboratory environment (CDC BMBL). PPE includes gloves, protective clothing, eye and face protection, and respirators; it is selected through risk assessment and should not substitute for engineering or administrative controls when those controls are feasible (CDC/NIOSH Hierarchy of Controls, CDC/NIOSH PPE).
Secondary Barriers: Facility design features like airlocks, HEPA-filtered air systems, directional airflow, and sealed surfaces prevent release to the wider environment (CDC BMBL).
Biosecurity Controls for Select Agents:
- Regulated access: Security Risk Assessments for access to select agents and toxins; enhanced pre-access and ongoing suitability measures for Tier 1 agents (FSAP)
- Physical security: Multiple barriers for Tier 1 agents, intrusion detection systems, access logs (Select Agents Program)
- Inventory control: Tracking from procurement to disposal, immediate reporting of losses (Select Agents Program)
Cyberbiosecurity: Connected laboratories should manage cyber compromise according to its biological and safety consequences. The control model includes a current asset and dependency inventory, least privilege, segmentation, managed identities, change control, logging, resilient backups, tested recovery, supplier assurance, genomic-data provenance, and unified incident and near-miss review (WHO Laboratory Biosecurity Guidance, NIST IR 8432).
Bottom Line: BSL designation determines required containment (biosafety). Select agent status determines required security measures (biosecurity). Both work together to prevent accidental exposure AND intentional misuse.
Introduction
Laboratory biosafety and biosecurity are related but distinct concepts. Both are essential for responsible handling of dangerous pathogens in research, clinical, and production settings.
Biosafety focuses on protecting laboratory workers, the environment, and the public from accidental exposure to infectious microorganisms (CDC BMBL). This involves containment: physical barriers, engineering controls, and safe work practices that prevent pathogen escape.
Biosecurity focuses on preventing unauthorized access, loss, theft, misuse, diversion, or intentional release of valuable biological materials (Biosafety.be). This involves security: access controls, personnel vetting, inventory management, and physical protection measures.
A 2026 GAO comparison of the United States and selected G20 members identified 10 key components of biosafety and biosecurity programs: risk assessment, biosafety program, biosecurity program, occupational health, emergency and incident response, institutional policies, research review and oversight, personnel training, inventory management, and material transport (GAO-26-107338). Nine of the 10 members reviewed had national guidance comparable to at least one U.S. component, but the report found substantial variation in documentation and did not evaluate implementation or enforcement. Containment rules alone are not enough; mature laboratory governance also requires personnel systems, inventories, transport controls, and incident response.
Both biosafety and biosecurity failures occur in practice, from laboratories where BSL-3 practices are not followed correctly to select agent inventory discrepancies requiring federal investigation. The 2004 SARS Beijing lab outbreak (The Biological Threat Landscape) was a biosafety failure. The 2001 anthrax letters were a biosecurity failure involving an insider with legitimate access.
Biosafety Levels: The Containment Framework
The CDC and NIH establish Biosafety Levels in their publication “Biosafety in Microbiological and Biomedical Laboratories” (BMBL), the primary advisory document for safe conduct in biomedical and clinical laboratories (CDC BMBL, Biosecurity Central). BSL designations range from BSL-1 (lowest risk) to BSL-4 (highest risk), but the level is assigned through protocol- and activity-specific risk assessment that considers agent characteristics, procedures, exposure routes, engineering controls, and available preventive measures or treatments (CDC BMBL, GAO-26-107338).
Each higher BSL builds upon the previous level’s containment practices, adding more stringent safeguards (Lab Manager, UTRGV).
BSL-1: Minimal Risk
BSL-1 is appropriate for work with well-characterized agents not known to cause disease in healthy adult humans (Lab Manager, CDC BMBL). These agents pose minimal potential hazard to laboratory personnel and the environment (Lab Manager, CDC BMBL).
Containment Practices:
Standard microbiological practices (Lab Manager, UTRGV): - Handwashing after handling biological materials and before leaving laboratory - No mouth pipetting (mechanical pipetting only) - Safe sharps handling to prevent percutaneous exposure - Minimizing splashes and aerosols - Daily decontamination of work surfaces - Autoclave or chemical decontamination of infectious waste before disposal
PPE: Gloves, safety goggles, laboratory coats typically worn (Lab Manager, UTRGV).
Facilities: Work performed on open laboratory benches (Lab Manager, CDC BMBL). No special containment equipment required. Eating, drinking, smoking prohibited in lab (UTRGV). Biohazard signs posted (UC San Diego, UTRGV).
Examples: Bacillus subtilis, laboratory strains of E. coli, attenuated vaccine strains.
BSL-2: Moderate Risk
BSL-2 applies to work with moderate-risk pathogens that can cause human disease but are typically not transmitted via airborne route (Lab Manager, NIH). Laboratory personnel receive specific training in handling pathogenic agents and are supervised by competent scientists (NIH).
Containment Practices (BSL-1 Plus):
Access controls (NIH, UC San Diego, NIH Practices): - Limited access when work in progress - Doors closed during BSL-2 operations - Biohazard signage on laboratory entrance showing agents in use, biosafety level, investigator contact info, special entry requirements or PPE needed
Sharps handling (Lab Manager, UC San Diego): - Extreme caution with contaminated sharps to prevent percutaneous injury - Disposable syringe-needle units - Puncture-resistant sharps containers - Broken glassware not handled directly
Aerosol control (NIH, NIH Practices): - Procedures producing aerosols or splashes conducted in certified biological safety cabinets (BSCs)
PPE: Gloves mandatory; face protection (masks, eye protection) required when splashes or sprays may occur (UC San Diego, NIH Practices, University of Hawaii).
Facilities: BSCs available for aerosol-generating procedures (NIH). Autoclave available for decontamination (University of Hawaii).
Medical surveillance recommended where personal health status may impact infection susceptibility or vaccination (UC San Diego).
Examples: Hepatitis B virus, HIV, Salmonella, Toxoplasma, Staphylococcus aureus.
BSL-3: Serious or Potentially Lethal Disease
BSL-3 laboratories handle indigenous or exotic agents with potential for respiratory transmission that can cause serious and potentially lethal infection (UC San Diego, Cornell EHS). Work often involves agents capable of laboratory-acquired infections with severe consequences (UC San Diego).
Containment Practices (BSL-2 Plus):
Strict access controls (NIH, UC San Diego): - Laboratory access strictly controlled and restricted - Self-closing doors with locks - Anteroom entry recommended
Specialized training (NIH): - Laboratory personnel receive specific and thorough training in handling hazardous agents - Competency demonstrated before independent work
Primary containment (NIH, UTRGV): - All manipulations of infectious materials performed within BSCs or other primary containment devices - Equipment producing infectious aerosols contained in primary barrier devices
PPE: Solid-front wraparound gowns, scrub suits, or coveralls in addition to standard PPE (UC San Diego, UTRGV, University of Hawaii). Respirators may be required (UC San Diego, UTRGV). Gloves worn (sometimes two pairs) (University of Hawaii).
Facilities (Special Engineering Features):
Separation from unrestricted traffic areas (CDC BMBL, Cornell EHS).
Directional airflow (UTRGV): - Sustained directional airflow draws air into laboratory from clean areas toward potentially contaminated areas - Exhaust air cannot be recirculated without HEPA filtration - Negative pressure maintained in laboratory relative to surrounding areas
Facility design (UC San Diego): - Sealed seams, floors, walls, ceiling surfaces for easy cleaning and decontamination - Hands-free sink and eyewash near exit
Waste decontamination (University of Hawaii): - Autoclave or other decontamination method available within facility (preferably within laboratory itself)
Examples: Mycobacterium tuberculosis, SARS-CoV-2, St. Louis encephalitis virus, Coxiella burnetii, Francisella tularensis, Yersinia pestis.
BSL-4: Dangerous and Exotic Agents
BSL-4 is the highest containment level for work with agents that pose a high individual risk of life-threatening disease and a high community risk, often because of severe disease and limited or uncertain countermeasures (CDC BMBL, GAO-26-107338). A BSL-4 assignment is based on the activity-specific risk assessment, not on a universal claim that every agent lacks a vaccine or treatment.
Containment Practices (BSL-3 Plus with Increased Stringency):
Maximum access control (UC San Diego, CDC BMBL): - Strictly controlled access - Anteroom with two self-closing doors - Potentially biometric access (palm scanners, etc.)
Personnel protection depends on the BSL-4 laboratory type (CDC BMBL, NIH): - Complete clothing change before entry - Shower required upon exit - Suit laboratories use positive-pressure suits with Class I or II biological safety cabinets; cabinet laboratories use Class III cabinets
Primary containment (Lab Manager, NIH, CDC BMBL): - All work in Class III BSCs (totally enclosed, ventilated, gas-tight) - OR Class I or II BSCs in combination with positive-pressure suit
Facilities (Maximum Engineering Controls):
Physical isolation (NIH): - Typically separate building or isolated area within building - Specialized, dedicated entry/exit
Air handling (CDC BMBL, NIH): - Laboratory maintained under negative air pressure - All exhaust air HEPA-filtered - Airlocks at entrances to minimize aerosol escape
Total decontamination (CDC BMBL, NIH): - All laboratory waste (filtered air, water, trash) decontaminated before leaving facility - Chemical disinfectant barriers for liquid waste
Examples: Ebola virus, Marburg virus, Lassa fever virus, Nipah virus, Crimean-Congo hemorrhagic fever virus, and variola virus. Global facility counts depend on whether planned, under-construction, and operational laboratories are included.
Primary and Secondary Barriers
Containment relies on two types of barriers: primary (directly protecting workers) and secondary (protecting the environment) (CDC BMBL).
Primary Barriers
Primary barriers directly protect personnel and the immediate laboratory environment from exposure to infectious agents (CDC BMBL).
Personal Protective Equipment (PPE):
PPE includes gloves, protective clothing, eye protection, face shields, and respirators, with selection based on the biological hazard, route of exposure, and task-specific risk assessment (CDC/NIOSH PPE, CDC BMBL). In the hierarchy of controls, PPE sits below elimination, substitution, engineering controls, and administrative controls; it reduces exposure only when selected correctly, available at the point of work, and used consistently (CDC/NIOSH Hierarchy of Controls, Verbeek et al., 2020).
Face shields are best understood as face and eye protection against splashes, sprays, and spatter, not as stand-alone respiratory protection. They can reduce facial contamination risk but do not replace goggles when tight eye protection is needed, and they do not replace respirators when inhalation risk drives the assessment (CDC/NIOSH PPE, Roberge, 2016).
Respirators are a program, not just a device. Required respirator use in U.S. workplaces is governed by OSHA’s respiratory protection standard, which requires worksite-specific procedures, medical evaluation, training, maintenance, and fit testing for tight-fitting respirators; OSHA also requires selection of NIOSH-certified respirators, and NIOSH maintains the Certified Equipment List for approval verification (OSHA 29 CFR 1910.134, CDC/NIOSH-approved respirators, CDC/NIOSH Certified Equipment List).
Biological Safety Cabinets (BSCs): - Class I: Protects worker and environment, not product. Air drawn into cabinet, HEPA-filtered before exhaust. - Class II: Protects worker, product, and environment. Most common in biomedical labs. - Class III: Gas-tight, totally enclosed. Maximum protection for BSL-4 work. All operations via attached gloves (NIH, CDC BMBL).
Other Engineering Controls: - Centrifuges with sealed rotors - Enclosed containers for specimen processing - Safety-engineered sharps devices
Primary barriers control hazards at their source (Boston University).
Secondary Barriers
Secondary barriers are structural aspects of laboratory design that enhance safety and prevent release of hazardous materials to the wider environment (CDC BMBL).
Facility Design Features:
Sealed construction (CDC BMBL): - Sealed openings into laboratory - Walls, floors, ceilings that can be easily cleaned and decontaminated - Sealed penetrations for pipes, wires
Entry controls (CDC BMBL, Boston University): - Airlocks (BSL-3, BSL-4) - Anteroom for clothing change - Shower facilities for personnel exiting BSL-4
Ventilation (CDC BMBL, Boston University): - Directional airflow (clean to potentially contaminated) - Negative pressure relative to surrounding areas - HEPA filtration of exhaust air - No recirculation of unfiltered air
Liquid barriers (CDC BMBL): - Chemical disinfectant traps for drain systems in high-containment labs
For BSL-3 and BSL-4 facilities, secondary barriers become increasingly critical (CDC BMBL, Boston University). BSL-4 labs may be separate buildings or completely isolated modules with maximum physical separation.
Biosecurity: Preventing Intentional Misuse
While biosafety prevents accidental exposure, biosecurity prevents deliberate theft or misuse of dangerous pathogens (Biosafety.be). The Federal Select Agent Program establishes biosecurity requirements for laboratories possessing select agents and toxins.
Personnel Reliability Programs
Biosecurity effectiveness depends on the integrity and awareness of individuals with access to pathogens, toxins, and sensitive information (HHS ASPR). Personnel reliability programs address both insider and outsider threats (HHS ASPR).
Security Risk Assessments (SRAs):
For individuals accessing biological select agents and toxins (BSAT), FBI-conducted Security Risk Assessments are mandatory, coordinated with the Federal Select Agent Program (HHS ASPR, NIH). The SRA includes criminal history checks, immigration status verification, and review against terrorist watch lists.
Tier 1 Select Agent Requirements:
Tier 1 agents (subset of select agents posing greatest risk of deliberate misuse) require additional personnel measures (HHS ASPR, Select Agents Program):
- Pre-access suitability assessments before granting access
- Ongoing suitability evaluations
- Increased responsibilities for personnel monitoring and reporting
- Behavioral monitoring for concerning changes
Personnel Vetting (HHS ASPR, Bureau Biosecurity): - Background checks - Security clearances for sensitive positions - Reference verification - Periodic staff reviews - Anonymous reporting systems for security concerns - Leadership accountability for security culture
Good management practices, clear communication, and training are foundational for strong responsibility culture and effective biosecurity (Biosecurity Central).
Access Controls
Access controls prevent unauthorized entry into sensitive laboratory areas, animal facilities, and storage locations for infectious materials and toxins (Select Agents Program, UNC).
Physical Access Limitations:
Entry restricted to authorized and designated employees based on need (Select Agents Program): - Locked doors (minimum) - Card key systems - Biometric access for highest-security areas - Visitor and contractor escorts required (University of Houston)
Material Tracking:
Hazardous material procurement tracked from delivery to proper storage (University of Houston): - Up-to-date inventories of biological, chemical, radiological materials - Chain-of-custody documentation - Immediate reporting of loss, theft, or suspicious activity (University of Houston)
Select Agent Security Requirements
Select agents and toxins require written security plans developed through site-specific risk assessment to prevent unauthorized access, theft, loss, or release (CDC, Select Agents Program).
Tier 1 Agents (Additional Security) (Select Agents Program Tier 1, Select Agents Program Security):
Minimum three distinct physical security barriers required (Select Agents Program): - Physical structures preventing unauthorized access - Note: Cameras and intrusion detection systems (IDS) are monitoring tools, not barriers themselves
Intrusion detection systems (Select Agents Program): - All registered spaces containing Tier 1 select agents must be protected by IDS unless area is physically occupied - Alternative: continuous visual observation
Security Plan Components (CDC, Select Agents Program): - Risk assessment identifying vulnerabilities - Physical security measures (barriers, locks, alarms) - Information security for sensitive data - Transportation security - Incident response procedures - Regular security reviews and drills
For laboratories building site-specific risk assessments, Sandia National Laboratories’ Global Chemical and Biological Security program describes BioRisk Assessment Models (BioRAMs) as tools for laboratory biorisk officers to identify, prioritize, and visualize biosafety and biosecurity risks using factors such as onsite agents, security practices, mitigation measures, and local malicious-activity likelihood.
Violations can result in civil and criminal penalties, suspension or revocation of registration, and mandatory remedial actions (CDC).
Cyberbiosecurity for Connected Laboratories
Cyberbiosecurity integrates cybersecurity with biosafety and biosecurity. Its unit of analysis is not the computer network alone. It asks whether compromise of a connected instrument, laboratory information management system, automation platform, identity service, genomic-data pipeline, cloud dependency, or vendor update process could affect biological material, worker safety, public health, scientific integrity, regulatory records, or operational continuity. The WHO Laboratory Biosecurity Guidance places cybersecurity and information security within the biological risk-management lifecycle, alongside emerging technologies and institutional oversight. A laboratory can therefore have a technically mature information-security program and still have a cyberbiosecurity gap if its controls are not tied to biological consequences.
The implementation evidence remains limited. Crawford and colleagues developed an asset-impact approach for high-containment laboratories that links cyber and cyberphysical assets to consequences for science, public health, worker safety, security, and laboratory operations (Crawford et al., 2023). A 2026 scoping review found that laboratory implementation studies were sparse and that no standardized laboratory assessment approach had been established across the reviewed literature (Cova et al., 2026). These findings support consequence-based local assessment. They do not establish the effectiveness of any single control package.
Connected-Laboratory Control Model
A defensible program begins with an inventory of safety-relevant assets and dependencies. This includes networked instruments, controllers, laboratory information management systems, electronic notebooks, sequencing and bioinformatics pipelines, automation schedulers, identity providers, cloud storage, remote-support channels, software dependencies, backups, and vendors. The inventory should record the accountable owner, approved users, data and material flows, software and firmware state, external connections, safety function, recovery objective, and biological consequence if integrity or availability is lost.
Controls should follow that consequence assessment:
- Least privilege and managed identity: Grant people, services, and agents only the access required for a bounded task. Use named identities, scoped credentials, strong authentication, timely revocation, and separation between design, approval, execution, and result release.
- Segmentation and safe states: Separate business systems, guest networks, scientific computing, instrument control, and safety-critical environments. Define how instruments and automation enter a safe state when identity, network, monitoring, or control services fail.
- Change and supplier control: Approve, test, record, and, where possible, cryptographically verify software, firmware, methods, integrations, and remote maintenance. Include security and recovery obligations in supplier assessment.
- Logging and detection: Preserve time-synchronized records for identity, configuration, protocol approval, instrument commands, data transformation, and result release. Monitoring should identify unauthorized change, improbable access, loss of expected signals, and unexplained divergence between approved and executed work.
- Resilient recovery: Maintain protected backups for configurations, methods, inventories, audit records, and essential data. Test restoration, manual fallback, and continuity procedures before an incident.
Agent-specific tool access, prompt injection, and delegated authority are addressed in Autonomous AI Agents in Laboratory Contexts. Those risks are one implementation of the broader connected-laboratory control model, not a separate biorisk-management system.
Genomic-Data Integrity and Privacy
Genomic data requires controls across generation, processing, storage, sharing, reuse, and deletion. NIST IR 8432 identifies gaps in lifecycle practice, responsible sharing, system monitoring, guidance for genomic-data processors, and policy for human genomic privacy and national-security concerns. Laboratories should preserve sample-to-sequence provenance, reference and pipeline versions, access decisions, transformations, quality-control results, release history, and the ability to reproduce or investigate a result.
The governance context matters. Human genomic data creates durable privacy and re-identification concerns. Pathogen genomic data raises different questions about surveillance, sample and location metadata, sensitive operational context, and timely public-health sharing. The control objective is not to restrict all exchange. It is to make integrity, authorization, purpose, retention, monitoring, and recovery explicit for the type of data and decision involved. For surveillance-specific infrastructure and response integration, see Digital Biosurveillance.
Unified Incident and Near-Miss Learning
A cyber event belongs in the laboratory biorisk process when it could affect biological material, containment, safety-critical systems, scientific or genomic-data integrity, regulated records, or continuity of essential operations. The response should combine technical containment with biological-consequence assessment. At minimum, the team should preserve evidence, stabilize affected processes, account for relevant material and data, determine whether approved and executed work diverged, notify responsible biosafety, biosecurity, privacy, security, and operational leaders, and document interim restrictions.
After stabilization, root-cause review should identify technical, procedural, organizational, supplier, and human contributors. Corrective actions need owners and completion evidence. Recovery should be tested rather than assumed, including restoration of configurations and data, revalidation of safety-relevant functions, and regression testing of the control that failed. The WHO Laboratory Biosafety Manual, Fourth Edition treats incident and near-miss review as an opportunity for root-cause analysis and prevention. Lessons should be shared at a level that improves defense without publishing credentials, exploitable configurations, or other operationally sensitive detail.
Balancing Research and Security
Tension exists between open science culture and security requirements (NIH DURC). Select agent regulations aim to enable legitimate research while preventing misuse (NIH).
Concerns about regulations stifling research led to periodic list reviews and exemptions for attenuated strains or toxins below concentration thresholds (CDC). But the 2001 anthrax attacks (insider threat with legitimate access) justified strict oversight.
Best practices balance access for legitimate research, thorough vetting of personnel, physical security measures, and security culture promoting reporting of concerns (Biosecurity Central).
In 2025, NIH launched its Biosafety Modernization Initiative to overhaul U.S. laboratory oversight. The initiative proposes shifting from a technique-based to a risk-based biosafety framework, updating the NIH Guidelines for Research Involving Recombinant or Synthetic Nucleic Acid Molecules, and elevating Institutional Biosafety Committees (IBCs) to operate with oversight authority comparable to IRBs and IACUCs.
Six national listening sessions ran from September 2025 through February 2026 to gather expert and public input. NIH also implemented a new transparency rule requiring that IBC meeting minutes for sessions held on or after June 1, 2025, be posted publicly on institutional websites (NIH Office of Science Policy).
Internationally, the World Health Assembly adopted resolution WHA77.7 in June 2024, calling on Member States to strengthen national laboratory biosafety and biosecurity strategies, incident-management systems, training, and legal frameworks for high-consequence biological agents. The resolution is notable because it explicitly extends biological risk management to genetic engineering, synthetic biology, and the data and information associated with high-consequence materials, not just physical samples.
A second recent shift is toward structured transparency for high-containment research itself. A 2026 Nature Methods proposal for the MIHCLE reporting standard and a 2026 PLOS Biology perspective argue that funders and journals should require standardized reporting for BSL-3 and BSL-4 experiments. The core idea is simple: better reporting and gatekeeping are now being treated as biosafety and biosecurity controls, not just publication hygiene.
Biosecurity concepts extend beyond select agent oversight into questions about publication, information hazards, and scientific openness (see Dual-Use Research of Concern).
What are the four Biosafety Levels (BSL-1 through BSL-4)?
BSL-1 handles minimal-risk agents not known to cause disease in healthy adults (e.g., lab strains of E. coli). BSL-2 works with moderate-risk pathogens causing human disease, typically not airborne (e.g., HIV, Hepatitis B). BSL-3 handles serious or potentially lethal agents with respiratory transmission potential (e.g., Mycobacterium tuberculosis, SARS-CoV-2). BSL-4 is reserved for agents requiring maximum containment because of high individual and community risk (e.g., Ebola, Marburg). Each level builds upon previous containment practices with increased stringency, and the specific assignment depends on the activity and risk assessment.
What work requires BSL-3 versus BSL-2 containment?
BSL-2 is appropriate for moderate-risk agents that can cause human disease but are typically not transmitted via airborne route, with procedures producing aerosols conducted in biological safety cabinets. BSL-3 is required for indigenous or exotic agents with potential for respiratory transmission that can cause serious and potentially lethal infection. BSL-3 requires all manipulations within BSCs, sealed facilities with directional airflow, negative pressure, and strict access controls.
What are primary and secondary barriers in laboratory biosafety?
Primary barriers directly protect personnel and the immediate laboratory environment, including biological safety cabinets (BSCs), sealed equipment, and PPE such as gloves, protective clothing, face and eye protection, and respirators. Secondary barriers are facility design features that protect the wider environment, including airlocks, HEPA-filtered air systems, directional airflow, negative pressure, and sealed construction. BSL-3 and BSL-4 labs rely heavily on both barrier types.
What are the biosecurity requirements for select agents and Tier 1 agents?
Select agents require FBI-conducted Security Risk Assessments (SRAs) for all personnel with access, physical security measures, inventory tracking, and written security plans. Tier 1 agents (subset posing greatest risk of deliberate misuse) require minimum three distinct physical security barriers, intrusion detection systems, pre-access suitability assessments, and ongoing personnel monitoring. Violations can result in civil and criminal penalties.
What is cyberbiosecurity for a connected laboratory?
Cyberbiosecurity integrates cybersecurity with biosafety and biosecurity. It protects connected instruments, laboratory information systems, automation, genomic-data pipelines, identities, and recovery processes according to the biological and safety consequences of compromise. It is not a separate IT checklist. It is part of the laboratory biorisk-management system.
This chapter is part of The Biosecurity Handbook.