- Standard tier
- No formal risk assessment required by the Act
- Enhanced tier
- Measures must be assessed and kept under review
- Enhanced document
- Includes an assessment of procedures and measures
- Outside help
- Specialist services are optional
01
Find the right requirement before buying help
Standard tier normally covers qualifying premises expecting 200–799 people at the same time. Enhanced tier normally starts at 800. Include staff, contractors and volunteers in the relevant area, and use predictable peaks rather than average attendance.
Some qualifying premises remain standard tier even at 800 or more: places of worship, schools, childcare settings and further education premises. Universities have no equivalent special treatment. Qualifying events have enhanced duties, subject to all the event criteria and exclusions.
A large attendance figure therefore does not answer the assessment question on its own. Check the premises’ use and the exceptions first, especially if you are preparing for a busy service, school assembly or community booking.
02
Standard tier: consider your venue without a formal assessment
The standard duty is SIA notification and appropriate public protection procedures, so far as reasonably practicable. Those procedures cover evacuation, moving people to a safer place on the premises, lockdown and communication.
The guidance asks you to consider the nature and layout of the premises, staffing and other practical factors when choosing procedures. That preparation does not create a requirement for a formal risk assessment. A written plan is not required by law either.
For a hall, you might discuss different bookings and who is present to give instructions. For a pub, you might look at entrances, the beer garden and shifts. These conversations help you choose procedures that fit daily operation without treating a purchased assessment as a prerequisite.
03
Keep useful notes if they help your team
The guidance recommends documenting standard-tier procedures and reasons for not adopting a procedure. A short record can help trustees, managers or volunteers understand what was decided and why.
Documentation, practice and periodic review are recommended. They should be described as good preparation rather than additional legal duties. There is no statutory training requirement, and paid third-party training is not mandatory.
The Act also does not require CCTV, searches or physical protection measures at standard tier. There is no statutory requirement to buy equipment or alter the building, although small changes may be reasonably practicable. Assess proposed spending against your actual arrangements rather than an assumed list of purchases.
04
Enhanced tier: assess the procedures and measures
Enhanced protection measures cover monitoring, movement of people, physical safety and security, and security of information. They must be assessed and kept under review so far as reasonably practicable.
The compliance document must state procedures and measures in place or proposed and assess how they reduce risk and vulnerability. Calling something a risk assessment does not replace that content. The document needs to explain how your arrangements contribute to the required aims.
Examples of measures include patrols, access control, barriers, anti-shatter film and care with published plans. These are options from the guidance, not requirements for every venue. Weigh objectives and likely effectiveness against cost, time and difficulty.
Where a measure is deferred, document the reasons, plans and interim mitigations. Review measures especially after changes in use, occupancy or layout, and keep training records as described in the guidance.
05
Choose support around the work you need
The Home Office says you do not need to buy specialist services. At standard tier, avoid commissioning a formal assessment simply because someone describes it as compulsory under Martyn’s Law.
Enhanced venues may find outside support useful for assessing measures and preparing the compliance document. If you seek help, ask how the work will explain effectiveness, practical constraints and review arrangements, rather than just supply a list of products.
Wardcote offers hands-on enhanced tier support from an experienced team it works with for enhanced venues and events. Its standard-tier software instead supports procedures, briefings, records and notification preparation. Buying either software or specialist help is optional.
The core duties are not yet enforceable, with commencement expected in spring 2027.
FAQ
Common questions
Is a Martyn’s Law risk assessment mandatory for standard tier?
No. The Act does not require a formal risk assessment at standard tier.
Should I still consider the layout and staffing?
Yes. The guidance uses these practical factors to help you choose appropriate procedures; that does not make a formal risk assessment mandatory.
Does enhanced tier require an assessment?
Yes. Protection measures must be assessed and reviewed, and the compliance document includes an assessment of how procedures and measures reduce risk and vulnerability.
Must a church with 900 people commission an assessment?
A qualifying place of worship remains standard tier where worship is the principal use. Standard tier does not require a formal risk assessment under the Act.
Do I have to hire a security assessor?
No. Specialist services are optional, although an enhanced venue or event may find outside support useful.
Official sources
- SRC-01Home Office statutory guidance
- SRC-02The Act as enacted
- SRC-03Standard duty requirements factsheet
- SRC-04Home Office myth buster
This page explains the law. It is not legal advice. Check the official guidance for your circumstances.