BMBL 6th Edition: What Changed, How to Use It

Most labs already own a copy of the Biosafety in Microbiological and Biomedical Laboratories (BMBL), 6th edition — and most of them have never read it as a document with a structure. Treated as a PDF to search when a question comes up, it works fine. Treated as something to read cover to cover, it doesn’t: BMBL runs to more than 550 pages, and most of that length is Section VIII, the agent-by-agent summary statements, which nobody reads sequentially. This page does two things: it identifies what the 6th edition (2020) actually changed relative to the 5th (2009), quoting BMBL’s own introduction rather than paraphrasing a secondary summary, and it lays out how to use the document as a working reference — which section answers which question — instead of a book.

What actually changed in the 6th edition

BMBL’s own Section I introduction states the changes directly. Four are substantive enough to affect how you use the document day to day:

1. The risk assessment section was substantially revised

BMBL states it plainly: “The sixth edition includes a substantially revised section on risk assessment that emphasizes the critical importance of this process in selecting the appropriate practices and level of containment. That section intentionally follows this introduction because risk assessment is the core principle that supports a code of practice for safe handling of infectious agents.” That placement is deliberate — Section II, Biological Risk Assessment, now comes before the biosafety-level criteria in Section IV, on the theory that a lab should assess risk first and let the level follow, not pick a level and retrofit a justification. See the six-step framework below.

2. Agent summary statements were reviewed and updated, not just carried forward

Again in BMBL’s own words: “The agent summary statements in the fifth edition of BMBL were reviewed in the course of preparing the sixth edition. There are new and updated agent summary statements including those for agents classified as Select Agents. For example, there is an updated section on arboviruses and related zoonotic viruses including new agent summary statements as well as statements for recently emerged agents such as Middle East Respiratory Syndrome coronavirus (MERS-CoV).” If your lab’s biosafety manual was written off an older BMBL edition and cites an agent that predates 2020, don’t assume the statement is unchanged — check Section VIII directly.

3. Laboratory biosecurity (Section VI) was updated

BMBL notes that “[s]ince the publication of the fifth edition of BMBL, laboratory biosecurity was better defined by biorisk management documents including the International Standard Organization (ISO) 35001, Biorisk Management for Laboratories and Other Related Organizations,” alongside newer pre-access suitability and personnel-reliability approaches. Section VI reflects that. It remains advisory outside of Select Agent regulations and the relevant executive orders — BMBL is explicit that it does not itself impose a federal biosecurity requirement.

4. Four new appendices were added

The 6th edition adds Appendix K (Inactivation and Verification), Appendix L (Sustainability), Appendix M (Large-Scale Biosafety), and Appendix N (Clinical Laboratories) — none existed in the 5th edition. BMBL explains why each was added: Appendix K, because “recent events have demonstrated that it may be insufficient to follow a published inactivation procedure and assume that it is capable of providing complete inactivation of all pathogenic organisms present in a sample”; Appendix M, in recognition of biopharmaceutical production at scale; Appendix N, because risk assessment for a clinical specimen with an unconfirmed but suspected high-risk agent differs meaningfully from the assessment a research microbiology lab would run. If your lab does any of large-scale production, clinical/diagnostic work, or formal inactivation validation, these four are the parts of the 6th edition you’re most likely to be missing if you’re still working from an older printout.

The six-step risk assessment framework (Section II)

This is the substantive core of what changed, not a formality. BMBL Section II describes it directly: “This section describes a six-step approach that gives structure to the risk management process.” In source order:

Identify hazardous characteristics of the agent and assess its inherent risk — the risk absent any mitigations.
Identify laboratory procedure hazards. BMBL names agent concentration, suspension volume, aerosol- and droplet-generating equipment and procedures, and sharps specifically — the procedure, not the organism alone, is what generates most of the actual risk.
Determine the appropriate biosafety level and select additional precautions beyond the baseline for that level where the assessment calls for it.
Review the assessment and safeguards with a biosafety professional, a subject-matter expert, and the Institutional Biosafety Committee (IBC) before implementing controls — not after. This step is where a lab most often skips a beat: writing the risk assessment and starting work on the same afternoon, before anyone outside the immediate lab has actually looked at it.
Evaluate staff proficiency and safety-equipment integrity on an ongoing basis, not just at the point the assessment is signed off.
Revisit regularly — verify the assessment still holds and adjust it as the protocol, the agent, or the evidence base changes.

Two things follow directly from the framework as BMBL states it. First, a biosafety level is an output of the assessment, not an input chosen up front — see the CASRAI guide on BSL-1 to BSL-4 containment requirements for how the same organism can legitimately sit at two different levels in two different labs depending on procedure. Second, Risk Group and Biosafety Level are not the same thing, and BMBL is explicit about it: Risk Groups “correlate with, but do not equate to, Biosafety Levels,” and “just because a biological agent is listed as a Risk Group 3 agent, it does not mean the activities conducted with that biological agent must occur in a BSL-3 laboratory.” Risk Group is a property of the agent (the NIH Guidelines’ Appendix B list, cross-referenced against the ABSA International risk group database, which BMBL itself cites); Biosafety Level is a property of the specific work being done with it, arrived at through the six steps above.

How to use BMBL as a working reference, not a book

BMBL says this about itself, and it’s worth taking literally: “The BMBL should not be used as a single source of biosafety information; it provides the basis for a rational risk assessment to be developed and reviewed by the competent stakeholders at an institution” — explicitly naming the biosafety office or officer, animal care staff, facilities staff, management, and the Institutional Biosafety Committee as the people who need to weigh in, not just the lab director. In practice that means reading BMBL by question, not by page order:

“What level does this work belong at, and why?” — Section II (risk assessment) first, then Section IV (laboratory biosafety level criteria) to check the practices/equipment/facility baseline for the level the assessment lands on.
“What does BMBL say about this specific agent?” — Section VIII, organized by agent class (bacterial, fungal, parasitic, rickettsial, viral, arboviral, prion). Read the agent summary statement, then treat it as a floor, not a ceiling — see the limits below.
“Do we need a formal security plan, and does it overlap with biosafety?” — Section VI (laboratory biosecurity), cross-referenced against Appendix F if any Select Agent is involved. See the CASRAI guide on DURC, Select Agents, and biosafety oversight for how these regimes interact.
“What does this mean for the people doing the work, not just the space?” — Section VII (occupational health support).
“We do large-scale production / clinical specimen handling / need to validate an inactivation step” — go straight to the relevant new appendix (M, N, or K respectively) rather than trying to extrapolate from the general Section II/IV guidance, which wasn’t written with those specific situations in mind.
“How do we actually build or certify the containment equipment BMBL is describing?” — BMBL sets the requirement; it isn’t a procurement or certification manual. For a biosafety cabinet specifically, see the CASRAI biosafety cabinet certification and NSF/ANSI 49 testing guide.

This is also why BMBL keeps a dedicated dictionary entry on CASRAI separate from this guide: the term entry is the fast definitional lookup, this guide is the navigation layer for actually working the document.

Agent summary statements: what they establish and what they don’t

BMBL sets out three criteria for including an agent summary statement in Section VIII: the agent is a proven laboratory hazard; it’s suspected of high potential for causing laboratory-associated infections even without documented cases; or it causes grave disease or presents a significant public health hazard. That’s a deliberately narrow list, and BMBL is explicit about what it does not imply: “No one should conclude that the absence of an agent summary statement for a human pathogen means that the agent is safe to handle at BSL-1 or without a risk assessment to determine the appropriate level of containment.” An agent summary statement is a starting point prepared by scientists, clinicians, and biosafety professionals assessing standard protocols — BMBL still expects an independent risk assessment for any agent or procedure new to a given lab, statement or no statement, and explicitly directs labs to seek guidance from institutional safety committees, IBCs, biosafety officers, and professional associations when doing so.

Frequently asked questions

Is BMBL a regulation?

No. BMBL’s own foreword states it directly: it “remains an advisory document” and is “not intended to be a regulatory document although we recognize that some may use it in that way.” Federal Select Agent biosafety planning (9 CFR 121 / 42 CFR 73) has its own regulatory requirement that a plan rest on an agent-specific risk assessment; BMBL is the reference most institutions use to build that assessment, but the regulatory force comes from the Select Agent regulations themselves, not from BMBL.

Is there a 7th edition?

Not as of this writing. The 6th edition (2020) remains current.

What actually changed in the risk assessment approach, beyond just being “revised”?

The section was restructured around the explicit six-step process above, moved to precede the biosafety-level criteria in the document’s own ordering, and reframed risk assessment as the determinant of level rather than a justification written after the level is chosen.

If our biosafety manual still cites the 5th edition, what should we actually go check?

In priority order: any agent summary statement your lab relies on (checked for a 6th-edition update, particularly arboviruses/zoonotic viral agents), your risk assessment documentation against the six-step structure, and whether Appendix K/L/M/N apply to anything your lab does that wasn’t covered when the manual was written.

Does an agent summary statement replace a lab-specific risk assessment?

No — BMBL is explicit that it doesn’t, regardless of how established the agent is. See above.

Related CASRAI resources

Source note: this guide is drawn directly from the BMBL 6th edition primary text (CDC/NIH/HHS, revised June 2020), not from secondary summaries, with quotations pulled from Section I (Introduction), Section II (Biological Risk Assessment), and Section VIII (Agent Summary Statements) as indicated above.

BMBL 6th Edition: What Changed and How to Use It

Ask about BMBL 6th Edition: What Changed and How to Use It