Security Intelligence

Security for Outdoor Music Festivals | CloseProtectionHire

Q: "What is the Purple Guide and what does it require for festival security?"

"The Purple Guide (Health, Safety and Welfare at Music and Other Events) is published by the Event Industry Forum and endorsed by the Health and Safety Executive. It is not a statutory instrument but is the primary reference standard for UK outdoor music event safety and security planning. It covers crowd management, barrier systems, medical provision, stewarding ratios, communications, fire safety, and emergency response. Adherence to Purple Guide recommendations constitutes evidence of a reasonable approach to health and safety under the Health and Safety at Work etc. Act 1974 in the event of a prosecution following an incident."

Q: "How does Martyn's Law 2024 affect outdoor music festivals?"

"The Terrorism (Protection of Premises) Act 2024, known as Martyn's Law, creates a tiered licensing regime. Events and venues with a capacity between 200 and 799 (Standard tier) must implement a documented terrorism preparedness procedure and ensure all staff are trained on it. Events with a capacity of 800 or above (Enhanced tier) must appoint a named Security Lead responsible for a documented security plan, train all staff, and cooperate with the Security Industry Authority. Most outdoor music festivals with multiple stages fall in the Enhanced tier. The Security Lead must hold appropriate qualifications as set by the SIA."

Q: "What crowd management lessons came from the Astroworld festival tragedy in 2021?"

"At the Travis Scott Astroworld festival in Houston on 5 November 2021, a crowd crush resulted in 10 fatalities and hundreds of injuries. The investigation identified failures including: inadequate crowd density monitoring in the pit area, insufficient emergency medical resource deployment relative to expected attendance, failure of the production team to halt the performance when distress signals were visible to stage management, and communications failures between the field security team and the production command. The post-incident litigation (settled 2023) identified crowd management planning and real-time density monitoring as the primary liability exposures."

Q: "What security arrangements are needed for a headlining artist at a major outdoor festival?"

"A headlining artist at a major festival requires a distinct security layer from the general event security. This includes: dedicated close protection detail for the artist from hotel to backstage and return, controlled green room or artist compound access separate from the general backstage credentialed zone, vetted transport to and from the site (separate from artist tour transport which may not be security-optimised), a security briefing with the festival's security director to agree handover points and crowd management plans for the main stage area, and a documented emergency extraction plan including a designated route and vehicle for immediate extraction if required."

Q: "What is the DIM-ICE model for crowd management?"

"The DIM-ICE model (Design, Information, Management -- Ingress, Circulation, Egress) is the principal crowd management framework used in UK event safety planning. It structures crowd management planning around the design of the space, the information provided to attendees, and the active management function, across the three key movement phases: ingress (entry), circulation (movement within the site during the event), and egress (exit, including emergency evacuation). The model is referenced throughout the Purple Guide and in the Fruin and Still crowd science literature that underpins UK event crowd management practice."

Crowd management, headliner close protection, access control, and emergency response planning for outdoor music festivals. Purple Guide compliance, Martyn's Law 2024, and P1 market festival operations.

6 May 2026

Written by James Whitfield

Speak to the Team

Outdoor music festivals present a security challenge that combines the crowd dynamics of a major sports fixture, the artist personal protection requirements of a VIP protection operation, the access control demands of a controlled-credential environment, and the counter-terrorism planning obligations now formalised under the Terrorism (Protection of Premises) Act 2024.

The events with the most complex security requirements are the large multi-stage festivals – Glastonbury (approximately 200,000 attendance), Reading and Leeds, Coachella, Tomorrowland – but the legal obligations introduced by Martyn’s Law apply to any event with a capacity of 200 or above, which includes the vast majority of licensed outdoor music events.

The Regulatory Framework

Health and Safety at Work etc. Act 1974. The overarching legal duty for event organisers and venue operators. The standard against which security and safety planning is assessed in the event of an incident is whether a reasonably practicable approach was taken. Adherence to the Purple Guide establishes a documented basis for claiming a reasonable approach.

The Purple Guide (Health, Safety and Welfare at Music and Other Events). Published by the Event Industry Forum, HSE-endorsed, and updated periodically. The Purple Guide covers stewarding ratios, barrier specifications, crowd management planning, medical provision, communications, fire safety, and emergency response. It is the operative technical reference for UK outdoor event security and safety planning.

Terrorism (Protection of Premises) Act 2024 (Martyn’s Law). In force from 2025 (implementation date to be confirmed by secondary legislation at time of writing). Creates two tiers:

Standard tier (200-799 capacity): documented terrorism preparedness procedure, staff training mandatory.
Enhanced tier (800+ capacity): named SIA-qualified Security Lead, documented security plan addressing terrorism threats including vehicle-borne attack and marauding terrorist attack, staff training, cooperation with SIA.

Most professional outdoor music festivals are Enhanced tier. The requirement for a named Security Lead with specified qualifications, and a documented security plan, represents a step change in professional standards for events that previously operated with a more informal security planning process.

SIA licensing. Security staff operating at public events in the UK must hold SIA licences appropriate to their role – Door Supervisor licence (for access control and physical crowd management), Security Guard licence (for static guarding), or Close Protection licence (for artist and VIP protection).

Crowd Management: The Astroworld and Love Parade Lessons

Love Parade Duisburg, July 2010. Twenty-one fatalities in a crowd crush in the pedestrian tunnel leading to the Love Parade site. The investigation identified the design of the site – a single pedestrian access tunnel creating a bidirectional crowd flow – as the primary physical cause, combined with crowd management failures that did not restrict ingress when the tunnel had already reached dangerous density.

Astroworld, Houston, November 2021. Ten fatalities in a crowd crush in the pit area during Travis Scott’s performance. The post-incident investigation identified: failure of real-time crowd density monitoring in the pit, insufficient emergency medical resource, failure of production management to halt the performance when distress was visible, and communications breakdown between field security and the production command centre.

These two events bookend the core crowd management risk at outdoor festivals: the ingress crush (Love Parade) and the pit-area compressive asphyxia event (Astroworld). Planning against both requires specific design and management responses.

Ingress management. Staggered arrival windows (set-time dependent ticketing), multiple entry lanes, CCTV monitoring of entry queue density, and a documented escalation procedure to halt or redirect ingress if density thresholds are reached.

Pit area density management. Real-time crowd density monitoring in barrier-controlled pit and standing areas, using camera-based density counting calibrated to the specific area geometry. Maximum density thresholds defined in advance and enforced by field stewards with radio authority to open perimeter barriers for relief.

Production integration. A festival’s Security Director must have a direct communication channel to the production command and the authority – agreed in advance in writing – to request or require performance interruption in a crowd safety emergency. This authority must not be located solely with the artist’s management or tour production team.

Artist Close Protection

A headlining artist at a major festival has a personal security requirement that is operationally distinct from the festival’s general event security. The artist arrives from an external location (hotel or tour bus), transits to a backstage area that is separately credentialed from the general public areas, performs for an audience that may include individuals with obsessive fixation, and departs through an artist exit that may be monitored by members of the public.

Key coordination requirements:

Pre-event meeting between the artist’s CPO (or tour security director) and the festival’s Head of Security to agree handover points, shared radio frequency, and the protocol for emergency extraction
Dedicated artist transport to and from the site – physically separate from general VIP transport and with a pre-confirmed route to the nearest exit
A documented emergency extraction route from the stage to the artist vehicle, walked in advance of the performance
Backstage access control managed by the festival’s security team against a pre-agreed credential list provided by artist management

For artists with a significant threat profile – those who have received credible threats, who have significant fixated individual history, or who perform controversial content – the NFTAC (National Fixated Threat Assessment Centre) methodology for threat assessment is applicable regardless of the event setting.

P1 City Festival Security

Lagos. Nigeria’s festival market has grown materially, with AfroNation Lagos, Felabration, and various private events operating in a general Lagos security environment. Event perimeter security must account for the Lagos ambient threat level. VIP and artist security operates at a higher intensity than comparable European events.

Bogota and Medellin (Colombia). Major Colombian festivals including the Rock al Parque series and private electronic music events operate in an improved but still elevated security environment. The transition from the pre-2016 FARC era has not eliminated organised crime proximity to major public events.

Istanbul. The summer festival market in Istanbul operates in a manageable security environment with specific considerations for protest proximity and the changed security posture required since the July 2016 attempted coup, which resulted in significant changes to large public event security requirements under Turkish law.

Manila. Large music events at Manila arenas and outdoor venues operate under IATF (Inter-Agency Task Force) crowd safety guidance. The specific Manila security environment – particularly the approach and departure routes from Entertainment District venues – requires vetted transport planning for artists and VIP attendees.

For close protection and security at touring music productions – where the transport, routing, venue advance work, and artist personal security operate over multiple dates in multiple cities across a tour – see our security for music tours and live event productions guide. For major stadium and sports events where crowd management at fixed-venue capacity events intersects with sporting fixtures security requirements – see our security for stadium and major sports events guide.

Sources

Event Industry Forum: The Purple Guide to Health, Safety and Welfare at Music and Other Events, current edition. Terrorism (Protection of Premises) Act 2024 (c.32), UK. Health and Safety at Work etc. Act 1974 (c.37). Fruin, J.J.: Pedestrian Planning and Design, 1971 (crowd density thresholds). Still, G.K.: Introduction to Crowd Science, 2014 (DIM-ICE model). Astroworld Festival Crowd Crush: Harris County Medical Examiner Reports, November 2021; Houston Fire Department After-Action Review 2022; class action settlement documentation 2023. Love Parade Duisburg: Staatsanwaltschaft Duisburg investigation report summary, 2010; crowd crush causation analysis by Prof. Keith Still. SIA: Licensing and Compliance for Events Security Personnel, 2024. NPSA (National Protective Security Authority): Hostile Vehicle Mitigation for Crowded Places Guidance, 2024. NaCTSO: Counter Terrorism Advisory for Crowded Places, 2023.

For smaller-scale licensed venue security – SIA door supervisor requirements, conflict de-escalation, search policy law, CCTV obligations under ICO guidance, drug-find procedures, and Regulatory Reform (Fire Safety) Order 2005 evacuation requirements – see our nightclub and licensed premises security guide.

James Whitfield is a Senior Security Consultant with 20 years of experience in large-scale event security, VIP artist protection, and crowd safety planning for major music events across the UK and internationally.

Summary

Key takeaways

Crowd density in the pit area is the primary life-safety metric at a concert

The Astroworld tragedy and the Love Parade Duisburg disaster (21 fatalities, July 2010) both involved crowd densities in enclosed or semi-enclosed areas exceeding the threshold at which human crowd physics create compressive asphyxia risk -- typically cited as 6-7 persons per square metre for stationary crowds. Real-time crowd density monitoring in barrier-controlled pit areas, using camera-based crowd counting rather than historical capacity assumptions, is now considered a minimum standard for enhanced-tier festivals.

Martyn's Law Security Lead must be appointed before the licence application

Under the Terrorism (Protection of Premises) Act 2024, Enhanced tier events (800+ capacity) must have a named, SIA-qualified Security Lead as a condition of compliance. This is not a post-event administrative requirement -- the Security Lead should be involved in venue assessment, security plan development, and staff training well before the event date. The SIA will issue guidance on the qualification standard for Security Leads under the Act.

Artist close protection and festival security are distinct operations requiring coordination

A festival's SIA-licensed security function manages crowd control, access control, and site security. An artist's personal close protection detail manages the artist's personal safety from hotel to stage and back. These are different operations with different command chains. Without a pre-agreed coordination protocol -- agreed handover points, shared radio channel, a named contact on each side -- the two operations can create conflicting priorities, particularly during a security incident or emergency extraction.

Vehicle exclusion zones are a Martyn's Law planning requirement

Enhanced tier events must have a documented terrorism preparedness plan that addresses vehicle-based attacks -- the attack vector used at Berlin (2016), Nice (2016), and other mass-gathering targets. A festival site with vehicle perimeter control only at the pedestrian entrance is not compliant with Martyn's Law Enhanced tier requirements. Vehicle exclusion zones using hostile vehicle mitigation (HVM) -- temporary concrete blockers, water-filled barriers, or specialist HVM products -- are required for the pedestrian approach routes to large festival sites.

Medical provision must be planned against crowd density projections, not just ticket count

Astroworld's investigation found medical provision was under-resourced relative to the actual crowd density in the pit area -- not the venue capacity. A festival with 80,000 tickets but a main-stage pit area accommodating 25,000 at peak density has a specific medical risk profile for that area that cannot be read from the headline ticket number. Event Medical Advisers who are engaged on crowd density projections rather than ticket count produce more accurate medical resource planning.

FAQ

Frequently Asked Questions

The Purple Guide (Health, Safety and Welfare at Music and Other Events) is published by the Event Industry Forum and endorsed by the Health and Safety Executive. It is not a statutory instrument but is the primary reference standard for UK outdoor music event safety and security planning. It covers crowd management, barrier systems, medical provision, stewarding ratios, communications, fire safety, and emergency response. Adherence to Purple Guide recommendations constitutes evidence of a reasonable approach to health and safety under the Health and Safety at Work etc. Act 1974 in the event of a prosecution following an incident.

The Terrorism (Protection of Premises) Act 2024, known as Martyn’s Law, creates a tiered licensing regime. Events and venues with a capacity between 200 and 799 (Standard tier) must implement a documented terrorism preparedness procedure and ensure all staff are trained on it. Events with a capacity of 800 or above (Enhanced tier) must appoint a named Security Lead responsible for a documented security plan, train all staff, and cooperate with the Security Industry Authority. Most outdoor music festivals with multiple stages fall in the Enhanced tier. The Security Lead must hold appropriate qualifications as set by the SIA.

At the Travis Scott Astroworld festival in Houston on 5 November 2021, a crowd crush resulted in 10 fatalities and hundreds of injuries. The investigation identified failures including: inadequate crowd density monitoring in the pit area, insufficient emergency medical resource deployment relative to expected attendance, failure of the production team to halt the performance when distress signals were visible to stage management, and communications failures between the field security team and the production command. The post-incident litigation (settled 2023) identified crowd management planning and real-time density monitoring as the primary liability exposures.

A headlining artist at a major festival requires a distinct security layer from the general event security. This includes: dedicated close protection detail for the artist from hotel to backstage and return, controlled green room or artist compound access separate from the general backstage credentialed zone, vetted transport to and from the site (separate from artist tour transport which may not be security-optimised), a security briefing with the festival’s security director to agree handover points and crowd management plans for the main stage area, and a documented emergency extraction plan including a designated route and vehicle for immediate extraction if required.

The DIM-ICE model (Design, Information, Management – Ingress, Circulation, Egress) is the principal crowd management framework used in UK event safety planning. It structures crowd management planning around the design of the space, the information provided to attendees, and the active management function, across the three key movement phases: ingress (entry), circulation (movement within the site during the event), and egress (exit, including emergency evacuation). The model is referenced throughout the Purple Guide and in the Fruin and Still crowd science literature that underpins UK event crowd management practice.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.