Biosafety Guidelines: What Every Research Organization Needs to Know

What is biosafety?

Biosafety is the systematic application of containment principles, safety practices, and institutional controls designed to prevent exposure to hazardous biological agents in laboratory and research environments. It encompasses facility design, engineered equipment, work protocols, risk assessment, personal protective equipment, training, and the organizational infrastructure needed to ensure these protections are maintained consistently across every lab, every team, and every site.

Biomedical research is critical to advancing healthcare and understanding biological processes, but it often involves handling potentially hazardous biological agents, including bacteria, viruses, fungi, parasites, prions, and recombinant DNA. Without proper biosafety controls, these materials pose risks not only to researchers but to the broader community and environment.

What makes biosafety particularly challenging for growing organizations is that it requires coordination across multiple disciplines: facility operations, environmental health and safety (EHS), research leadership, regulatory affairs, and institutional administration. When any of these functions operate in isolation, or when biosafety documentation is scattered across paper records, spreadsheets, and disconnected systems, compliance gaps emerge that can take months or years to surface, often during an audit or after an incident.

Understanding the four biosafety levels

The Centers for Disease Control and Prevention (CDC), in collaboration with the National Institutes of Health (NIH), defines biosafety levels through the Biosafety in Microbiological and Biomedical Laboratories (BMBL) guidelines. This framework categorizes laboratories based on the risk posed by the biological agents they handle, establishing four levels (BSL-1 through BSL-4) with progressively stricter containment measures.

BSL comparison table

How BSL classification drives safety decisions

The biosafety level assigned to a laboratory determines nearly every operational decision that follows: what containment equipment is required, how waste is handled, what training researchers must complete, who can access the space, and how incidents are reported and investigated.

For organizations operating labs at multiple BSL levels, maintaining clear separation between containment zones while ensuring consistent safety documentation across all levels is an institutional challenge. When training records, risk assessments, and inspection results live in different systems for different BSL levels, the organization loses the unified visibility it needs to manage biosafety effectively.

Key components of an effective biosafety program

Biosafety is not a single control. It is a layered system where each component reinforces the others. When any layer is missing or inconsistent, the entire program is weakened.

1. Facility design and engineering controls

The physical design of a laboratory is the first line of defense. Well-designed facilities incorporate physical barriers and environmental controls that prevent the escape of biological agents before any human behavior or PPE comes into play.

Key facility design elements include:

• Self-closing, lockable doors that control access and maintain containment
• Directional airflow systems that move air from clean to contaminated areas, preventing backflow
• HEPA-filtered ventilation that removes biological aerosols from exhaust air (required at BSL-3 and BSL-4)
• Sealed walls, floors, and ceilings that can be decontaminated after spills or exposures
• Separation of containment zones with airlocks, anterooms, or buffer zones at higher BSL levels
• Eyewash stations and safety showers accessible within the containment area

Facility design decisions are often made years before a lab is operational, but their adequacy must be reassessed whenever new agents, new procedures, or new regulatory requirements are introduced.

2. Engineered safety equipment

Primary barriers are physical containment devices that protect laboratory personnel and the environment from direct exposure to biological agents. These are the first line of defense against splashes, spills, and aerosols.

3. Safe work practices and documented procedures

Engineering controls reduce risk, but they only work if researchers follow established protocols consistently. Documented standard operating procedures (SOPs) should cover:

• Aseptic techniques for handling biological materials
• Decontamination procedures for work surfaces, equipment, and spills
• Proper disposal of biohazardous waste (sharps, liquids, solid waste)
• Transport protocols for moving biological materials between labs or buildings
• Procedures for working with specific agent categories (select agents, recombinant DNA, human blood and OPIM)

Documentation is not just a compliance exercise. It is the mechanism by which institutional knowledge is preserved, onboarding is standardized, and accountability is maintained. When SOPs exist only as paper documents in individual labs, they drift over time, creating inconsistencies that are invisible until an audit or incident reveals them.

4. Risk assessment

A biosafety risk assessment is a systematic process for identifying, evaluating, and mitigating risks associated with the use of biological agents. It is the foundation of every biosafety decision, from BSL classification to PPE selection to emergency response planning.

A comprehensive biosafety risk assessment should:

• Identify hazardous characteristics of the biological agents being handled, including infectivity, virulence, pathogenicity, and environmental stability
• Classify agents into risk groups based on their potential to cause disease, availability of preventive measures, and effectiveness of treatments
• Determine the appropriate BSL and specify the containment measures required
• Evaluate procedural hazards specific to the work being performed (aerosol generation, sharps use, large-volume culture)
• Consider biosecurity requirements for preventing theft, loss, or misuse of hazardous agents, toxins, and sensitive research information
• Identify and implement controls to minimize exposure risk for workers, the environment, and the community
• Ensure regulatory compliance with institutional, local, national, and international biosafety regulations

Risk assessments are not one-time events. They should be reviewed and updated whenever new agents are introduced, procedures change, personnel change, or regulatory requirements evolve.

5. Personal protective equipment (PPE)

PPE is the last line of defense, not the first. It provides an additional layer of protection when engineering controls and work practices alone are insufficient to eliminate exposure risk.

PPE requirements escalate with biosafety level:

• BSL-1: Lab coat, gloves, eye protection
• BSL-2: Lab coat, gloves, face protection (splash risk), respiratory protection if aerosol risk exists outside a BSC
• BSL-3: Lab coat, gloves, respiratory protection (N95 or PAPR), additional protection as risk assessment dictates
• BSL-4: Full positive-pressure protective suit with dedicated air supply, or work conducted entirely within Class III biological safety cabinets

PPE selection should always be driven by the risk assessment, not by convenience or habit. Organizations should document PPE requirements by agent, procedure, and BSL level, and ensure that training includes proper donning, doffing, and disposal procedures.

Building a biosafety program that scales across the organization

The five components above protect individual researchers. But for organizations managing multiple labs, multiple BSL levels, and dozens or hundreds of personnel, biosafety must operate as institutional infrastructure.

Establish a biosafety committee

A dedicated biosafety committee (IBC or equivalent) with expertise in biosafety, laboratory operations, and regulatory compliance should oversee all aspects of biosafety within the organization. Committee responsibilities include:

• Reviewing proposed research activities for EHS concerns before work begins
• Approving the use of biological agents and establishing containment requirements
• Reviewing and approving risk assessments
• Ensuring compliance with institutional, CDC, NIH, and WHO biosafety requirements
• Investigating incidents and recommending corrective actions

The committee should include laboratory personnel, EHS professionals, institutional administration, and, where required, community representatives. For organizations with labs across multiple sites, the committee must have visibility into safety operations at every location, not just headquarters.

Conduct regular risk assessments across all sites

Risk assessments should not be isolated events conducted lab by lab. Organizations need a systematic process for conducting, reviewing, and updating risk assessments across every facility, with centralized documentation that allows leadership to identify patterns, compare risk profiles, and allocate resources based on actual exposure data.

When risk assessment records are scattered across paper forms, local drives, or individual departments, the organization lacks the visibility to make informed decisions about where its biosafety program is strong and where gaps exist.

Develop and maintain emergency response plans

Emergency preparedness must cover:

• Spill response procedures for biological agents at each BSL level
• Exposure response protocols including post-exposure prophylaxis, medical evaluation, and reporting
• Exposure control plans for facilities handling human blood, bloodborne pathogens (BBP), or other potentially infectious materials (OPIM), as required by OSHA's Bloodborne Pathogens Standard (29 CFR 1910.1030)
• Incident reporting workflows that capture what happened, who was involved, what corrective actions were taken, and how recurrence will be prevented
• Emergency contact procedures and communication protocols for notifying institutional leadership, EHS, and public health authorities when required

Emergency plans must be documented, accessible, and regularly practiced. For multi-site organizations, response plans should be consistent in structure but tailored to facility-specific conditions.

Build continuous training infrastructure

Biosafety training is not a one-time onboarding task. It requires ongoing investment in education, competency verification, and refresher training, particularly in organizations with high personnel turnover from students, postdocs, and rotating staff.

Effective training programs should:

• Communicate containment measures associated with biological risk groups and biosafety levels
• Educate personnel on safe practices for handling biological materials and prevention of laboratory-acquired infections
• Ensure compliance with institutional and regulatory requirements
• Verify competency through practical assessments, not just attendance records

San Diego State University illustrates what becomes possible when training management is centralized. Before digitizing their EHS workflows, the university had no reliable way to connect researchers to the labs they worked in or the training they required. After implementation, they expanded from 8 courses with 500 completion records per year to 16 courses with over 4,600 records, while increasing training compliance from 56% to over 80%.

For organizations managing biosafety training across multiple departments and BSL levels, this kind of centralized visibility is not a convenience. It is a compliance requirement.

Connect biosafety to chemical and research operations

In many organizations, biosafety management operates in a separate system from chemical safety, research documentation, and lab operations. Biological agent inventories live in one tool, chemical inventories in another, training records in a third, and incident reports in email threads or paper forms.

This fragmentation creates blind spots. An EHS officer reviewing a lab's biosafety posture should be able to see not just the biological agents present, but the chemicals stored alongside them, the training status of every person with access, the most recent inspection results, and any open corrective actions, all in one place.

The Engine, MIT's Tough Tech accelerator, faced this exact challenge as it grew from 10 to 50 resident laboratory companies. By centralizing their safety infrastructure, they reduced the time needed to identify hazard information for any resident company, location, or individual from several hours to less than five minutes, while increasing their confidence in regulatory audit readiness.

SciSure's Scientific Management Platform connects EHS workflows, training, inspections, and chemical/biological inventory management with ELN, LIMS, and sample tracking in a single environment. This means biosafety is not a separate administrative layer. It is embedded in how research organizations operate.

Biosafety regulatory bodies and international standards

Organizations conducting research with biological agents must comply with guidelines established by several key regulatory bodies.

These frameworks are not mutually exclusive. Organizations operating across international boundaries, or receiving funding from multiple agencies, may need to satisfy overlapping requirements. A centralized compliance system that maps regulatory obligations to specific labs, agents, and personnel makes this manageable. Disconnected documentation makes it a constant source of risk.

Challenges and how to address them

Keeping up with emerging threats

New and emerging infectious diseases can pose unforeseen risks that existing protocols may not cover. Organizations must design biosafety programs with adaptability built in:

• Conduct regular biosafety program reviews and update risk assessments to address evolving threats
• Encourage collaboration and information sharing between researchers, institutions, and public health agencies
• Maintain relationships with regulatory bodies to stay informed about changes to biosafety classification and containment requirements

Resource limitations

Implementing and maintaining biosafety measures is resource-intensive, particularly for smaller or growing organizations:

• Explore grant opportunities and public-private partnerships to fund safety infrastructure
• Focus resources on areas with the highest risk profiles identified through risk assessment
• Use digital platforms to streamline compliance tracking, reduce manual documentation burden, and eliminate the cost of maintaining parallel paper and spreadsheet systems

Maintaining training consistency as organizations grow

Personnel turnover, multi-site operations, and the constant influx of students and trainees make training consistency one of the hardest parts of biosafety management:

• Implement centralized training management that automatically assigns required courses based on lab access and BSL level
• Conduct regular competency assessments, not just attendance tracking
• Standardize training content across sites to prevent the local variations that create compliance inconsistency

Biosafety is organizational infrastructure

Biosafety controls are essential during the design, construction, and operational stages of any laboratory working with biological agents. Engineering controls, safe work practices, risk assessments, institutional governance, and PPE work together as a layered system to reduce risk to as low as reasonably achievable.

But for growing research organizations, the greatest biosafety risk is not a single failure at the bench. It is the cumulative effect of fragmented systems, inconsistent documentation, and siloed safety operations that make it impossible to see the full picture. When biosafety, chemical safety, training, and research operations are connected in a single platform, organizations gain the visibility, consistency, and accountability they need to scale safely.

Ready to strengthen your organization's biosafety infrastructure? Talk to a specialist about how SciSure connects EHS, training, biological and chemical inventory management, and research operations in one platform.

‍