Martyn's Law Enhanced Tier: Requirements for 800+ Capacity Venues

What the Enhanced Tier Requires

The enhanced tier applies to qualifying premises with a maximum capacity of 800 or more people. This includes large entertainment venues, stadiums, arenas, major shopping centres, large hotels, conference centres, universities, and other high-capacity sites. These venues face a higher level of obligation because they represent higher-value targets and the potential consequences of an attack are more severe.

Enhanced tier venues must do everything required of the standard tier, plus significant additional duties. The requirements are more structured, more documented, and more likely to involve physical security measures and professional oversight.

Terrorism Risk Assessment

Enhanced tier venues must carry out a formal risk assessment specifically focused on terrorism. This is not the same as your general health and safety risk assessment or fire risk assessment, though it should complement them. A terrorism risk assessment must consider:

• The types of attack the premises could face (vehicle, blade, firearm, explosive device, chemical/biological agent)
• The vulnerability of the premises to each type of attack
• The likely impact of each attack scenario
• Existing security measures and their effectiveness
• Gaps and weaknesses in current arrangements

This assessment should be conducted by someone with appropriate knowledge and experience. For large, complex venues, that might mean engaging a professional security consultant. For others, an experienced in-house security manager may be sufficient.

The Security Plan

Based on the risk assessment, enhanced tier venues must produce a written security plan. This plan should set out the measures the venue is implementing to reduce the risk of terrorism and to respond effectively if an attack occurs. It should explain why the measures chosen are proportionate to the risks identified.

A good security plan is not a generic template. It should be specific to your venue, your operations, and your risk profile. It should cover physical security (access control, perimeter security, CCTV), procedural security (search policies, mail handling, suspicious package protocols), and people (training, awareness, security staffing).

Reasonably Practicable Measures

The Act requires enhanced tier venues to implement measures that are "reasonably practicable." This phrase has a specific meaning in UK law. It means that the effort and cost of a measure should be weighed against the reduction in risk it provides. You do not need to do everything conceivable, but you do need to do what a reasonable person would consider appropriate given your circumstances.

In practice, reasonably practicable measures for an 800+ venue might include:

• CCTV with active monitoring: Cameras are only useful if someone is watching them. AI behaviour detection systems allow you to monitor more cameras more effectively without proportional increases in security personnel.
• Access control: Controlling who enters the premises and through which points. This might include ticket validation, credential checks, or managed entry points.
• Bag searches and screening: Proportionate searching of bags and personal items at entry points during high-risk events.
• Vehicle mitigation: Bollards, planters, or other measures to prevent vehicle attacks in areas with high pedestrian footfall.
• Hostile reconnaissance awareness: Training staff to recognise when someone is conducting surveillance of the venue as part of attack planning.

What "Proportionate" Looks Like at Scale

A Premier League stadium on match day has different requirements to a large church on a Sunday morning. Both may be in the enhanced tier, but proportionate measures will look very different. The stadium might need extensive search operations, counter-drone capability, and dedicated CCTV monitoring rooms. The church might need trained welcomers at doors, documented emergency procedures, a working CCTV system with recording capability, and regular liaison with local police.

The SIA will take context into account when assessing compliance. The test is whether you have taken steps that a reasonable person would consider appropriate for your venue, your events, and your risk profile.

Documentation and Record-Keeping

Enhanced tier compliance generates documentation. Your risk assessment, security plan, training records, incident logs, and review notes all need to be maintained and accessible. When the SIA conducts an inspection, they will want to see evidence that you are not just compliant on paper but actively managing security.

Keep records organised. Date everything. Note who conducted each review. Record any changes made and why. This is not bureaucracy for the sake of it. Good records protect you and demonstrate that you are taking the duty seriously.

The Role of Technology

For venues in the enhanced tier, technology is a practical necessity rather than a nice-to-have. Monitoring an 800+ capacity venue with human eyes alone is extremely difficult and prohibitively expensive. AI behaviour detection provides continuous monitoring across all cameras simultaneously, flagging potential concerns to human operators for assessment and response. It does not replace people, but it makes the people you have significantly more effective.