The Government considers that the owners and operators of public venues and large organisations should be required to:

• Carry out a Terrorism threat & risk assessment at locations they own or operate

• Take  ‘reasonably practicable’ protective security and organisational preparedness measures to reduce the threat. If you think of this as similar to a Health & Safety risk assessment then you should mitigate the risks. For example staff training,  developing a strategy that ensures you have assessed your site and its uses and include suitable mitigation measures

• Develop a robust plan on how to deal with or act as a result of a terrorist attack.

For smaller organisations and venues, this would involve simple low-cost measures, such as:

• Staff training of threats, identifying hostile reconnaissance, likely attack methods and importantly how they should respond

• Practicing/exercising how you want staff to respond in the event of an attack.​