Public protection measures

Enhanced Tier premises and qualifying events require a more detailed consideration of public protection measures. Where procedures are about what people do, measures are about what is in place — and the assessment is as much about recording your reasoning as about the measures themselves.

Proportionate is the whole point

It is worth being blunt about this, because a lot of security material implies otherwise: the Enhanced Tier assessment does not require every possible measure. It requires you to consider what may be appropriate to your particular premises, circumstances and risks — and to be able to say why you concluded what you concluded.

A decision not to install something, with clear reasoning behind it, is a legitimate outcome of an assessment. A decision not to install something because nobody thought about it is not.

Monitoring

How the premises and its surroundings are watched, and — more importantly — what happens to what is noticed.

• Staff awareness — what are people actually asked to look out for, in plain terms?
• Reporting — who does someone tell, how, and what happens next? Most monitoring fails at this step, not at the noticing step.
• CCTV — coverage, whether anyone watches it live, how long it is retained, who can review it, and whether it works at night and in the rain.
• Patrolling — floor-walking, door supervision, external checks, and when they happen.
• The perimeter — approaches, car parks, service yards, and the spaces just outside your boundary.

Movement of people

How people arrive, queue, enter, move around and leave. This is often the highest-value area to work on, because crowd flow affects both everyday operation and incident response.

• Where crowds build up — entry queues, bars, toilets, cloakrooms, transport links, the pavement outside.
• Queueing — where it forms, whether it is on your land, and whether it can be moved or split.
• Entry and search arrangements, if any, and their effect on the queue behind.
• Access control to non-public areas — back of house, plant rooms, roof access, loading bays.
• Peak moments — doors opening, interval, closing time, changeover between audiences.
• Egress — where everyone goes at the end, and whether that conflicts with an assembly point.

Physical protection

The building and its fabric. The temptation here is to reach for a catalogue; resist it until you have worked out what you are protecting against and where you are actually exposed.

• Doors and access points — what they are, whether they can be secured, and by whom.
• Glazing — where large areas of glass sit relative to where people gather, and whether film or replacement is proportionate.
• Vehicle access — how close a vehicle can get to a crowd, at what speed, and what already stands in the way.
• Barriers and street furniture — including what is already there and doing the job.
• Maintenance and testing — a measure that is not tested is a measure you are guessing about. Record when it was last checked.

Information security

Protecting the information that would help someone plan an attack. This is the area organisations most often skip entirely, and it costs nothing to think about.

• Plans and layouts — who holds your site plans, evacuation routes and safer-area locations?
• Staffing patterns — rotas, security shift times, when the site is thinly staffed.
• Event details — attendance figures, VIP movements, load-in schedules.
• Contractors and suppliers — what they hold, and what happens to it when the contract ends.
• Public-facing material — what your website, social media and job adverts reveal about the site.
• Access — who inside the organisation can see all of this, and does that list still make sense?

A useful test: if a printed copy of your protective response plan were left on a train, what would it tell a stranger, and does that change how you store and share it?

Turning measures into a live picture

Measures decay. CCTV cameras drift out of focus, barriers get moved for a delivery and not put back, a door that used to lock stops locking, the person who checked things leaves.

So each measure needs three things attached to it: who owns it, when it was last verified, and when it is next due for review. Without those, an Enhanced Tier assessment becomes a snapshot of one afternoon in 2026.

How this sits alongside procedures

Measures and procedures are not alternatives. Measures buy time and reduce exposure; procedures determine what people do with the time they have. An assessment that lists impressive measures and cannot say who decides to evacuate has the balance wrong.