Enhanced tier requirements apply to larger premises that reasonably expect 800 or more individuals to be present at the same time, from time to time and to qualifying events, which would also have a reasonable expectation of 800 of more individuals to be present at the same time, at any point.
Enhanced tier premises and qualifying events must comply with all of the same requirements as standard tier premises. These are to:
- notify the Security Industry Authority (SIA) that they are the responsible person for these premises or this event; and
- ensure that appropriate public protection procedures are in place, so far as reasonably practicable.
Public protection procedures
As with standard tier premises, those responsible for enhanced tier premises and qualifying events must ensure that appropriate public protection procedures are in place, so far as is reasonably practicable. The four procedures outlined in the Act are:
- Evacuation: the process of getting people safely out of the premises
- Invacuation: The process of moving people away from danger to a place at the premises or event where there is less risk of physical harm being caused to them
- Lockdown: the process of securing the premises to prevent individuals entering or leaving the premises, e.g. to restrict or prevent entry by an attacker by locking doors, closing shutters or using available barriers
- Communication: The process of ensuring information is provided to individuals at the premises or event (for example, alerting people to danger as quickly as possible and providing instructions to remain in place or move away, where it is safe to do so)
The person responsible for enhanced tier premises and qualifying events is also required to:
- have in place, so far as reasonably practicable, appropriate public protection measures that could be expected to reduce both the vulnerability of the premises or event to an act of terrorism, and the risk of physical harm being caused to individuals if an attack were to occur there or nearby;
- document the public protection procedures and measures in place, or proposed to be put in place, and provide this document to the SIA. This document should include an assessment of how the public protection procedures and measures reduce vulnerability and/or the risk of harm; and
- where the responsible person for enhanced tier premises or a qualifying event is an organisation or company, a senior individual must be designated to ensure compliance with the Act. The senior individual is someone who is involved in the management or control of the responsible person.
Public protection measures
In addition to the public protection procedures, those responsible for enhanced tier premises and qualifying events must ensure that appropriate public protection measures are in place, so far as is reasonably practicable. The responsible person must assess and keep under review the public protection measures to ensure they are appropriate to reduce the vulnerability of the premises or event to acts of terrorism, and to reduce the risk of physical harm caused by an attack.
The public protection measures are measures relating to the categories set out below:
- Measures in relation to monitoring the premises or event, and their immediate vicinity:
Monitoring measures are intended to enable the detection and identification of suspicious activities and items that may be indicators of a terrorist attack. Some examples of monitoring measures may include security patrols, searches of the individual, or CCTV
- Measures in relation to controlling the movement of individuals into, out of and within the premises or event:
Movement measures are intended to control, prohibit, restrict or reduce the movement of people into, out of and within premises and events. Examples include doors, shutters, zoned access, or screening of individuals
- Measures in relation to the physical safety and security of the premises or event:
These measures are intended to strengthen the physical safety and security of premises and events to mitigate the potential impacts of attacks and/or deter or hinder attackers. Some examples of measures relating to physical safety and security could include vehicle security barriers and other types of hostile vehicle mitigation.
Measures in relation to the security of information:
Security of information measures are necessary to keep information secure and out of reach of those with hostile intent who may be looking for information to assist in the planning, preparation or execution of acts of terrorism.
Measures for the security of information are required to ensure that information about the premises, its operation, design, usage or internal workings are not widely available and accessible to those who want to cause harm. Sharing relevant information with staff, third parties or the public may be helpful and necessary but providing excessive details could create vulnerabilities.