Event risk management is the process of identifying what can go wrong at an event, reducing the chance of it happening, and preparing a response for when it does. Organisers in the UK carry a legal duty of care under the Health and Safety at Work etc.
Act 1974, and since April 2025, Martyn’s Law adds specific counter-terrorism obligations for venues and events with a capacity of 200 or more. A written risk assessment sits at the centre of both. This guide walks through the five stages: identifying, mitigating, communicating, monitoring, and reviewing risk.
Identifying Risks
Risk identification starts with three inputs: the site, the audience, and the event type. A greenfield festival site, an exhibition hall, and a hotel conference room each fail in different ways, so walk the site before you plan anything else. Map the entry and exit points, pinch points where crowds compress, vehicle access routes, and anything overhead or underfoot that weather can turn into a hazard.
Then profile the audience. Two thousand trade delegates and two thousand festival-goers are not the same risk. Age range, alcohol availability, expected arrival pattern, and whether tickets are checked at the gate all change the picture. The Purple Guide, the events industry’s standard reference, sets out how to work through crowd risks systematically, and your local Safety Advisory Group will expect to see that thinking in writing for larger events.
Mitigating Risks
Mitigation means reducing the likelihood of an incident first, and its impact second. In practice, that covers a defined set of controls: SIA-licensed security staff at entry points and within the crowd, bag searches proportionate to the threat level, a stewarding plan with radio coverage across the site, marked evacuation routes with assembly points, fire extinguishers positioned to the fire risk assessment, and first aid provision scaled to attendance. For events in scope of Martyn’s Law, the plan also has to show how staff would respond to a terrorist attack, including invacuation as well as evacuation, because moving a crowd outside is sometimes the wrong call.
Capacity is the control organisers most often get wrong. Set the number from the safe capacity of the space and the width of its exits, not from ticket sales targets.
Communicating Risks
A risk assessment that stays in a folder protects nobody. Brief every steward and security officer before gates open, covering their position, their radio channel, the incident reporting route, and the evacuation plan. Attendees get their version through signage, ticket information, and PA announcements. During an incident, one nominated person controls public messaging, because conflicting instructions cause the panic the plan exists to prevent.
Monitoring Risks
Risks move once an event is live. Crowd density shifts as acts change or sessions break, weather changes fast on outdoor sites, and queue build-up at gates creates pressure the plan may not have predicted. Effective monitoring pairs people with process: security staff reporting from fixed points, CCTV where the venue has it, and a control point with the authority to act on what comes in. That last part matters most. Monitoring without the power to slow entry, open a gate, or pause a performance is just watching.
Reviewing Risks
The review after the event is where the next event gets safer. Debrief the security and stewarding team while memories are fresh, log every incident and near miss, and record what the plan got wrong alongside what it got right. Near misses deserve the most attention, since they are incidents that cost nothing this time. Feed the findings into the next risk assessment, and keep the documentation, because insurers, licensing authorities, and the Safety Advisory Group can all ask to see it.
Run properly, this cycle stops event safety being a document you write once and turns it into a system that improves with every event you deliver. Alpha Security Services provides SIA-licensed event security teams, from risk assessment support through to stewarding and crowd management on the day.
