Biological risk assessments must be carried out before starting new activities. Risk assessments must also be carried out whenever there is a change that affects the work environment or in response to an incident in the laboratory.
Risk assessments should be applied to all procedures and activities carried out at the facilities, including routine operations, periodic or infrequent laboratory procedures, and cleaning and maintenance.
Carrying out risk assessments requires comprehensive knowledge of the activities of the laboratory or facility.

All of the following situations would require a new risk assessment to be carried out, or the revision of the existing one:
- The initiation of a new research project and/or experimental procedure or changes in the programming of established activities, including the introduction of new biological agents or alterations in the flow or volume of work.
- Works or modifications both to the laboratories and to the different facilities, the floor or building where it is located, the equipment, etc.
- The introduction of unplanned changes in staff organization (including external research staff, visits and other non-essential staff).
- Significant alterations in standard operating procedures (SOPs) or in daily working procedures and practices (e.g. disinfection or waste management methods, use of PPE, entry and exit protocols, etc.).
- When unexpected events are observed that are relevant to biological risk management; such as accidents, incidents or any security threat.
- With the introduction of new legislation or in the updating of emergency or contingency plans to consider their requirements.
- As part of the periodic review process in the line of continuous improvement.