Most in-scope premises sit in the standard tier — 200 to 799 people. The good news is that the standard-tier duties are deliberately light and procedural: there is no requirement to install physical security or spend money on equipment. Here's exactly what's expected.
- · Capacity band: 200–799 people (including staff).
- · No requirement to buy or install physical security measures.
- · Core duties: notify the SIA and have appropriate public protection procedures. Making staff aware of them is how they work in practice — the guidance expects it.
- · Keep a record you can show — documentation isn't strictly required but is hard to evidence without.
1. Notify the regulator (SIA)
The person responsible for the premises will need to notify the Security Industry Authority (SIA) that the premises is in scope. The notification process opens before commencement; you should have your premises details and responsible person ready so you can complete it promptly when it goes live.
2. Put public protection procedures in place
You must have in place — so far as is reasonably practicable — appropriate public protection procedures: the things the people working at your premises would do if an attack happened at or near the premises, to reduce the risk of physical harm. There are four to consider: evacuation, invacuation (moving people to a safer place, often inside), lockdown, and communication.
These should be realistic for your premises and your people. A village hall's procedures will look different from a leisure centre's — and that's fine.
3. Make staff aware
Your staff and volunteers should understand the procedures and their part in them. This is about simple, repeatable awareness — a briefing, not a training course. Free awareness materials (such as the ACT e-learning on ProtectUK) can help.
4. Keep a record
The guidance notes that standard-tier documentation is not strictly required — but it is hard to evidence that you've done the right things without it. Keeping a tidy record of your scope decision, your procedures, who's been briefed, and your review date is the sensible, low-effort way to be ready if the regulator asks. This is exactly what PremiseReady produces.
Common questions
Do we need to buy security equipment for the standard tier?
No. The standard tier is about procedures and awareness. Physical measures are part of the enhanced (800+) tier, not the standard tier.
Is documentation legally required at standard tier?
Documentation isn't strictly mandated, but the guidance acknowledges it's hard to evidence compliance without it. Keeping records is strongly advisable.
Who completes the SIA notification?
The responsible person — the person or body with control of the premises. Have your premises details ready for when the process opens.
See where your premises stands
A two-minute scope check gives you a clear in/out decision to keep on record.
Check my premises