Skip to content
Vigil Logo

The Standard tier: what venues with 200 to 799 capacity must do

By Vigil compliance teamPublished Updated 5 min read

Aligned to NaCTSO guidance, every claim cited to a primary source

The standard tier is where most qualifying premises under Martyn's Law will sit: pubs, restaurants, community halls, smaller theatres, churches, gyms, shops and visitor attractions where between 200 and 799 individuals, including staff, are reasonably expected to be present at the same time.[1]

Parliament designed the standard tier to be deliberately light touch. The Home Office describes the requirements as simple, low-cost activities centred on procedures rather than equipment.[3] This article sets out exactly what the duty involves, what it does not involve, and how to get ready before the Act comes into force. If you are not yet sure which tier applies to you, start with our eligibility checker or our guide to whether Martyn's Law applies to your venue.

Duty one: notify the SIA

The responsible person for standard duty premises must notify the regulator, the Security Industry Authority (SIA), that they are responsible for qualifying premises.[2] The notification process will be set up during the implementation period, and the SIA will publish details of how and when to register.

Before you can notify, you need to know who the responsible person is. That is the individual, organisation or company in control of the premises in connection with its qualifying use, which for most standard tier venues means the operating business rather than the landlord.[2]

Duty two: the four public protection procedures

The core of the standard duty is having public protection procedures in place, so far as reasonably practicable. These are procedures to be followed by people working at the premises if an act of terrorism were to occur there or nearby, and they cover four areas:[1]

  • Evacuation: how you would move people out of the premises and away from danger.
  • Invacuation: how you would bring people into, or move them within, the premises to a place of relative safety, for example away from glazing or entrances during an incident outside.
  • Lockdown: how you would secure the premises to prevent people entering or leaving, such as locking doors and moving people away from access points.
  • Communication: how you would alert the people on site, tell them what to do, and direct them, for example a code word over a radio or a PA announcement.

What reasonably practicable means for a small venue

The phrase so far as reasonably practicable does a lot of work in the Act, and it works in your favour. It means the procedures appropriate for your premises are weighed against what they would cost in time, money and effort.[2] A 250-capacity pub is not expected to produce a stadium-grade security plan. It is expected to have thought through, for its own building and its own staff, how people would get out, where they would shelter, how the doors would be secured and how the message would be passed.

Procedures should be site specific to be any use. A generic template that does not name your exits, your assembly direction or your staff roles will neither protect anyone nor satisfy a regulator asking how it works in practice.

What the standard tier does not require

It is worth being clear about what is not in the standard duty, because early commentary on Martyn's Law often overstated it:[3]

  • No requirement to make physical alterations to the premises.
  • No requirement to buy safety or security equipment.
  • No requirement to hire security staff.
  • No requirement to produce a formal risk assessment document for the SIA (that documentation duty sits in the enhanced tier).

Staff need to know the procedures

Procedures only count if the people expected to carry them out know about them. The statutory guidance expects workers with a role in the procedures to be made aware of what they need to do.[2] For most standard tier venues that means covering the four procedures in induction and refreshing them periodically, especially where staff turnover is high. A short walkthrough of your own building beats an hour of generic e-learning.

Practical advice on drafting and briefing is in our guide to writing your Martyn's Law procedures.

Penalties for getting it wrong

The SIA's stated approach is to support and guide first, with enforcement reserved for serious or persistent non-compliance.[3] Where enforcement is needed, the SIA will be able to issue compliance notices and monetary penalties of up to £10,000 for standard duty premises, with daily penalties of up to £500 where non-compliance continues after a penalty becomes payable.[3] More detail is in our article on preparing for SIA enforcement.

Getting ready now

The duties are not yet in force, and commencement is expected from 2027.[3] That makes this a good moment to prepare without pressure:

  • Confirm your tier with a documented capacity assessment.
  • Identify the responsible person.
  • Draft the four procedures for your specific site.
  • Brief your staff and record that you have done so.
  • Diarise a review so the procedures stay current as your layout and staffing change.

Vigil's Standard plan generates site-specific procedures, tracks staff briefings and keeps your evidence in one place. See pricing for what is included.

Frequently asked questions

Does the standard tier require a written risk assessment?

No. The documentation duty under Martyn's Law sits in the enhanced tier. Standard duty premises must notify the SIA and have the four public protection procedures in place so far as reasonably practicable. Writing the procedures down is still strongly advisable, because it is the practical way to brief staff and show what you have done.

Do I need to install CCTV, barriers or alarms?

No. The standard tier requires procedures, not equipment or physical alterations. The Home Office factsheet is explicit that there is no requirement for standard duty premises to purchase equipment or make physical changes.

How much will standard tier compliance cost?

The duties were designed to be low cost: a capacity assessment, four written procedures, staff briefing and an SIA notification. The main cost for most venues is staff time. Software like Vigil reduces that time by generating the procedures and tracking the briefings.

What is the maximum fine for a standard tier venue?

The SIA will be able to issue non-compliance penalties of up to £10,000 for standard duty premises, with daily penalties of up to £500 where non-compliance continues after a penalty becomes payable.

Sources

  1. Terrorism (Protection of Premises) Act 2025, legislation.gov.uk
  2. Terrorism (Protection of Premises) Act 2025: statutory guidance, Home Office (April 2026)
  3. Terrorism (Protection of Premises) Act 2025: overarching factsheet, Home Office
  4. Martyn's Law overview, ProtectUK (NaCTSO)

This guide is general information, not legal advice. Confirm your position against the official sources above or take professional advice.

Find out where your venue stands

Use our free eligibility checker to see whether Martyn’s Law applies to you and which tier you are likely to fall in, then see plans matched to each tier.

Martyn's Law updates, straight to your inbox

Get notified about new guidance, enforcement updates and free resources. We send occasional emails and nothing else. You’ll also get our free Martyn’s Law readiness checklist.

Related guides