Agent of opportunity risk mitigation: people, engineering, and security efficacy.

BACKGROUND: Agents of opportunity (AO) are potentially harmful biological, chemical, radiological, and pharmaceutical substances commonly used for health care delivery and research. AOs are present in all academic medical centers (AMC), creating vulnerability in the health care sector; AO attributes and dissemination methods likely predict risk; and AMCs are inadequately secured against a purposeful AO dissemination, with limited budgets and competing priorities. We explored health care workers' perceptions of AMC security and the impact of those perceptions on AO risk. METHODS: Qualitative methods (survey, interviews, and workshops) were used to collect opinions from staff working in a medical school and 4 AMC-affiliated hospitals concerning AOs and the risk to hospital infrastructure associated with their uncontrolled presence. Secondary to this goal, staff perception concerning security, or opinions about security behaviors of others, were extracted, analyzed, and grouped into themes. RESULTS: We provide a framework for depicting the interaction of staff behavior and access control engineering, including the tendency of staff to "defeat" inconvenient access controls. In addition, 8 security themes emerged: staff security behavior is a significant source of AO risk; the wide range of opinions about "open" front-door policies among AMC staff illustrates a disparity of perceptions about the need for security; interviewees expressed profound skepticism concerning the effectiveness of front-door access controls; an AO risk assessment requires reconsideration of the security levels historically assigned to areas such as the loading dock and central distribution sites, where many AOs are delivered and may remain unattended for substantial periods of time; researchers' view of AMC security is influenced by the ongoing debate within the scientific community about the wisdom of engaging in bioterrorism research; there was no agreement about which areas of the AMC should be subject to stronger access controls; security personnel play dual roles of security and customer service, creating the negative perception that neither role is done well; and budget was described as an important factor in explaining the state of security controls. CONCLUSIONS: We determined that AMCs seeking to reduce AO risk should assess their institutionally unique AO risks, understand staff security perceptions, and install access controls that are responsive to the staff's tendency to defeat them. The development of AO attribute fact sheets is desirable for AO risk assessment; new funding and administrative or legislative tools to improve AMC security are required; and security practices and methods that are convenient and effective should be engineered.

Developing a consensus framework and risk profile for agents of opportunity in academic medical centers: implications for public health preparedness.

Agents of opportunity (AO) in academic medical centers (AMC) are defined as unregulated or lightly regulated substances used for medical research or patient care that can be used as "dual purpose" substances by terrorists to inflict damage upon populations. Most of these agents are used routinely throughout AMC either during research or for general clinical practice. To date, the lack of careful regulations for AOs creates uncertain security conditions and increased malicious potential. Using a consensus-based approach, we collected information and opinions from staff working in an AMC and 4 AMC-affiliated hospitals concerning identification of AO, AO attributes, and AMC risk and preparedness, focusing on AO security and dissemination mechanisms and likely hospital response. The goal was to develop a risk profile and framework for AO in the institution. Agents of opportunity in 4 classes were identified and an AO profile was developed, comprising 16 attributes denoting information critical to preparedness for AO misuse. Agents of opportunity found in AMC present a unique and vital gap in public health preparedness. Findings of this project may provide a foundation for a discussion and consensus efforts to determine a nationally accepted risk profile framework for AO. This foundation may further lead to the implementation of appropriate regulatory policies to improve public health preparedness. Agents of opportunity modeling of dissemination properties should be developed to better predict AO risk.