Guide

What are the 4 types of security?

Published 13 October 2026

Shoreditch Security cover graphic titled 'What are the 4 types of security?'

Ask three security people to name the four types of security and you may get three lists. One will talk about guards, CCTV and locks. One will talk about firewalls. The third will tell you it depends. For an event organiser trying to work out what to buy, that is not much help.

In short: the UK’s protective security guidance, published by the police through ProtectUK, describes four key forms of protective security: physical, personnel, cyber and personal. Physical security controls who and what gets in. Personnel security makes sure the people working your event are vetted, briefed and alert. Cyber security protects your ticketing, guest lists and payment data. Personal security protects a specific individual, which at an event means close protection. Most events need the first two in depth, the third in a basic form, and the fourth only when someone on the bill attracts attention.

This is general guidance, not legal advice. Your venue, your risk assessment and your own guest list decide what applies to you.

What are the 4 types of security?

The list comes from the people who wrote the national guidance. ProtectUK, the police-run counter-terrorism advice service, says its venues and public spaces guidance covers the key forms of protective security: physical, personnel, cyber and personal. It adds that to deliver protective security effectively, a security plan is essential along with a full risk assessment. That second sentence is the one most organisers skip, and it is the one that tells you how much of each type you need.

Here is the plain-English version. Physical security is everything that stops an unauthorised person or vehicle reaching your guests: fences, barriers, searches, officers on the doors, CCTV. Personnel security is about the people on your side: who they are, how they were vetted, what they were briefed and whether they would notice something wrong. Cyber security protects the data behind the event, from the ticket scanner to the guest list on someone’s phone. Personal security protects one named person rather than a place. The rest of this guide takes each in turn and says what it looks like on an event day.

What is physical security at an event?

Layers, not a single line of guards. ProtectUK’s guidance says effective physical security is best achieved by multi-layering different measures, and that the core principles for protecting an asset are deter, detect, delay and initiate an effective response. At an event those four words translate into a perimeter that is obviously watched, a search point that finds what it should, a layout that slows anyone who should not be there, and officers who know what to do when something happens.

This is the part of security that is licensable. Government guidance on SIA licensing defines manned guarding as including guarding premises against unauthorised access or occupation, against outbreaks of disorder or against damage. Anyone doing that under contract at your event needs a front-line SIA licence. Picture a hypothetical: a ticketed outdoor party for 800 in a park in south London, with a fenced perimeter, two entrances and a bar. Physical security there means event security guards on each entrance checking tickets and bags, a patrol on the fence line, and a plan for the last hour.

What is personnel security, and why does it matter at events?

Because the people on the inside see everything first. ProtectUK describes personnel security as a system of policies and procedures aimed at the objective of vigilant staff and an effective security culture, and at disrupting hostile reconnaissance and insider threats. For an event that means three things: knowing who is working for you, briefing them properly, and giving them a way to report something odd without feeling foolish.

It also means knowing which of your people need a licence. Government guidance is precise. You do not need an SIA licence to check people have paid for entry or have an invitation, or to perform stewarding duties such as directing people to their seats, toilets or first-aid facilities. But if a steward then refuses someone entry or makes them leave, that person needs a licence. The practical rule for organisers: stewards steward, officers decide. Every officer we deploy is SIA-licensed, and a good briefing before doors open covers the layout, the licence conditions, the people to look out for and who to call.

What does cyber security mean for an event organiser?

Less than a data centre and more than nothing. ProtectUK notes that the National Cyber Security Centre’s role is to reduce the cyber security risk to the UK by improving its cyber security and cyber resilience, and its advice is the place to start for the systems behind an event. The event-day version is practical: who holds the guest list, where the ticketing login lives, whether the accreditation laptop is locked when the desk is empty, and what happens if the scanner app goes down and the queue is 200 deep.

We are a physical security company, so we do not provide cyber security, and we say so plainly. What we do is make sure the physical handling of your data does not undo the digital protection. A printed guest list that leaves the desk is a personnel problem and a physical one. Agree before the event who owns each list, where it is kept and how it is destroyed afterwards.

What is personal security, and when does an event need close protection?

Personal security protects a person rather than a place, and in the UK it has its own licence. Government guidance on SIA licensing lists guarding one or more individuals against assault or against injuries that might be suffered in consequence of the unlawful conduct of others as a licensable activity, and the licence for it is close protection, which is different from the licence for guarding premises. If a speaker, performer or executive at your event needs someone beside them, that person should hold it.

Most events do not need it. The ones that do usually know: a public figure on stage, a guest who attracts protest, a keynote speaker with a profile beyond the room. Our close protection service plans the route from car to green room to stage and back and works alongside the wider event team so the cover is seamless rather than bolted on. It is quiet by design. The point is that nobody in the photographs can tell it was there.

Which types of security does Martyn’s Law expect?

Mostly personnel and physical, in that order. The government’s overarching factsheet on the Terrorism (Protection of Premises) Act 2025 explains that where the number of individuals, including staff, reasonably expected to be present at the same time is between 200 and 799, the premises will be in the standard tier, and where 800 or more individuals, including staff, may be reasonably expected at the premises, they will be enhanced tier premises. The standard tier is about procedures that are expected to be simple and low cost, and the factsheet is clear that the Act does not require physical alterations to premises or the purchase of equipment for the purpose of having these procedures in place.

That is personnel security in all but name: staff who know the procedures and can follow them. The enhanced tier adds physical measures. The Security Industry Authority will discharge the regulatory functions under the Act, which is one more reason to work with an SIA-licensed team that understands it. Our Martyn’s Law readiness check walks through the questions for your venue.

How do you decide which types your event needs, and how do you book?

Start with the risk assessment, then buy to it. For most events in London and the Home Counties the answer is a layered physical plan and a well-briefed team, with close protection added only where a named person needs it and cyber handled by whoever runs your ticketing. On the practical side: our minimum booking is four hours per guard, we accept bookings with as little as 24 hours’ notice, all our officers are SIA-licensed, we carry £5 million of public liability cover, and we work across all areas of London plus the six Home Counties.

The most useful first conversation is about your layout, your guest list and anything that worries you. Get a quote and we will size the team to the risk rather than the head count, or read our hire event security page for how booking works.

Take the next step

Frequently asked questions

What are the 4 types of security?

UK protective security guidance from ProtectUK describes four key forms: physical, personnel, cyber and personal. Physical security controls access to a place, personnel security covers the vetting and briefing of the people working there, cyber security protects data and systems, and personal security protects a named individual.

Which types of security does an event need?

Almost every event needs physical security (controlled entrances, searches where the risk calls for it, a watched perimeter) and personnel security (vetted, briefed, licensed staff). Cyber security is usually handled by whoever runs your ticketing and guest list. Personal security, or close protection, is only needed when a specific person at the event is at risk.

Do event stewards need an SIA licence?

Not for stewarding. Government guidance says you do not need a licence to check tickets or invitations or to direct people to seats, toilets or first-aid facilities. Refusing entry or removing someone is licensable, so those decisions sit with SIA-licensed officers.

Does Martyn's Law require physical security equipment?

Not in the standard tier. The government's factsheet says the Act does not require physical alterations to premises or the purchase of equipment for standard tier procedures, which apply where 200 to 799 people including staff may be present. Enhanced tier premises and qualifying events, at 800 or more, must also have public protection measures in place.

Ready to secure your event?

Tell us about your event and we’ll send a clear, all-inclusive quote — usually within a few hours.