Strategic Report  ·  2026-08-19

Building a Defense-in-Depth Biosecurity Strategy for the AI Era

Strategic ReportHigh impactGlobal
RAND's Center on AI, Security, and Technology maps the full bioweapon-development pathway — from ideation to weaponization — and assesses how AI is lowering the technical, operational, and motivational barriers to creating biological weapons. The report proposes a defense-in-depth strategy built on nine interventions spanning three categories: three that restrict access to dangerous information and AI tools (safeguards for open-source models, managed access programs for sensitive AI systems), one expanding screening of biological precursors, three aimed at deterrence (early warning, attribution, rapid outbreak response), and two focused on detecting misuse via real-time monitoring and cross-organization warning-sign sharing. Lead author Steph Guerra states: "today's safeguards are fragmented across companies, governments and countries and are not designed to work together" — the report argues layered, mutually reinforcing safeguards are needed because no single intervention can stop a determined, well-resourced actor. It further finds several mitigations lose effectiveness if the U.S. acts alone, making international coordination and government-industry collaboration essential.
This gives boards, national-security policymakers, and AI lab safety teams a structured framework for evaluating and prioritizing biosecurity investments against AI-enabled bioweapon risk, rather than relying on ad hoc or single-point safeguards that fail against sophisticated actors.
Map existing AI biosecurity safeguards (model access controls, precursor screening, monitoring) against RAND's nine-mitigation framework to identify coverage gaps and coordination requirements with government and industry partners.
RAND — Building a Defense-in-Depth Biosecurity Strategy for the AI EraRAND press release: RAND Outlines Layered Defense Strategy to Mitigate AI-Enabled Bioweapon Risk
See this in the live feed Explore related AI security and governance findings — updated every morning.
Open the feed →