Biosecurity

Biosecurity is the set of policies, practices, and technologies designed to prevent, detect, and respond to threats posed by biological agents — whether naturally occurring, accidentally released, or deliberately engineered. The term encompasses a spectrum from agricultural disease control to laboratory safety to the governance of dual-use research that could be misapplied to cause harm. In an era of accessible genetic engineering and distributed biotechnology, biosecurity is no longer the exclusive domain of state-level institutions. It is a problem of distributed coordination among actors with radically different capacities, incentives, and threat models.

Traditional biosecurity frameworks were built around a centralized model: a small number of high-containment laboratories, a limited set of known pathogens, and state-level oversight. This model is failing under the pressure of three converging trends. First, the cost of genetic engineering is falling faster than the cost of oversight, creating an asymmetry in which capabilities proliferate while governance structures lag. Second, the most consequential biological interventions — such as gene drives — operate at the level of populations and ecosystems, making national borders structurally irrelevant. Third, the line between legitimate research and potential misuse is increasingly blurred by the same techniques: CRISPR can cure genetic disease or engineer a pathogen, and the difference lies in intent, not in the tool.

The central challenge of contemporary biosecurity is therefore not technical but institutional. How do you govern a technology that is simultaneously a medical miracle, an ecological lever, and a potential weapon? The existing institutional architecture — the Biological Weapons Convention, national biosafety committees, institutional review boards — was designed for a world of state actors and known threats. It is poorly suited to a world of garage biotechnology, anonymous synthesis orders, and global ecological interventions.

Biosecurity is currently framed as a problem of keeping bad things in and bad actors out. This framing is dangerously inadequate. The real problem is keeping good intentions from producing bad network effects. And no existing institution is designed for that.