Threat Levels and Their Meaning

1. UK threat levels and what they indicate

The UK government uses a tiered system of threat levels to assess and communicate the likelihood of a terrorist attack. These levels provide essential information for security officers, law enforcement, and the general public, helping to determine necessary precautionary and protective measures.

Current UK Threat Levels

Threat levels in the UK are set by MI5 and the Joint Terrorism Analysis Centre (JTAC) based on intelligence reports. They indicate the probability of a terrorist attack and are classified as follows:

Threat LevelMeaning
CRITICALAn attack is highly likely in the near future. Immediate action is required.
SEVEREAn attack is highly likely. Security vigilance must be at its highest.
SUBSTANTIALAn attack is likely. Extra security precautions should be taken.
MODERATEAn attack is possible but not likely. General awareness is recommended.
LOWAn attack is highly unlikely. Standard security measures apply.

Why Threat Levels Matter for Security Officers

Security personnel must understand the implications of each threat level and take appropriate action based on the venue’s risk assessment and security protocols. While these levels do not dictate specific responses, they serve as a guideline for risk management, preparedness, and situational awareness.

How Security Officers Should Respond

  • Stay Informed: Always be aware of the current threat level in your region by checking official sources such as MI5 (www.mi5.gov.uk).
  • Enhance Vigilance: At higher threat levels (SEVERE or CRITICAL), security personnel should increase patrol frequency, access control, and CCTV monitoring.
  • Report Suspicious Activity: Any unusual behaviour, unattended items, or security breaches should be immediately reported to supervisors or the Anti-Terrorism Hotline (0800 789 321).
  • Know Emergency Procedures: Be well-versed in evacuation, invacuation (lockdown), and emergency response protocols in case of an attack.
  • Collaborate with Law Enforcement: Security teams should maintain open communication with police and counterterrorism agencies to ensure a coordinated response.

2. How security officers should respond at different threat levels

Security officers play a vital role in preventing and responding to potential terror threats. Understanding the UK’s threat level system helps security professionals take appropriate actions based on the current risk. The following guide outlines how security officers should respond at different threat levels, ensuring maximum public safety and asset protection.

1. CRITICAL (An Attack is Highly Likely in the Near Future)

  • Increase Patrols: Conduct frequent, visible patrols to deter threats and reassure the public.
  • Reinforce Security Checks: Strictly enforce access control procedures, ID verification, and bag searches.
  • Monitor CCTV Constantly: Real-time monitoring should be continuous with immediate reporting of any suspicious activities.
  • Prepare for Emergency Evacuations: Ensure all staff and security teams are fully briefed on lockdown and evacuation protocols.
  • Collaborate with Law Enforcement: Maintain direct communication with local police, counterterrorism agencies, and intelligence services.
  • Report All Suspicious Activity Immediately: Contact 999 for urgent concerns and 0800 789 321 (Anti-Terrorism Hotline) for intelligence-based threats.

2. SEVERE (An Attack is Highly Likely)

  • Maintain a High Level of Vigilance: Be extra observant of unusual behaviors, unattended bags, or hostile reconnaissance attempts.
  • Enforce Strict Security Procedures: Limit entry points, conduct random searches, and verify visitor credentials thoroughly.
  • Restrict Non-Essential Access: Reduce unnecessary movement in high-risk zones to minimize vulnerabilities.
  • Review and Update Emergency Plans: Ensure that security teams and staff understand evacuation, invacuation (lockdown), and shelter-in-place protocols.
  • Encourage the Public to Report Concerns: Promote awareness through signs and verbal communication, urging the public to report suspicious activity.

3. SUBSTANTIAL (An Attack is Likely)

  • Enhance Perimeter Security: Ensure all fences, barriers, and access points are secure and actively monitored.
  • Increase Presence in Vulnerable Areas: Assign security personnel to key locations, such as entrances, exits, and high-footfall areas.
  • Strengthen Awareness & Training: Conduct counterterrorism training for security teams to identify, disrupt, and report potential threats.
  • Review Emergency Communication Plans: Ensure all staff members know who to contact and what information to provide in case of an emergency.

4. MODERATE (An Attack is Possible, but Not Likely)

  • Maintain Standard Security Measures: Continue regular patrols, CCTV surveillance, and access control.
  • Check and Maintain Security Equipment: Ensure alarms, locks, and surveillance cameras are fully functional.
  • Observe and Document Unusual Activity: Record any suspicious incidents in a security log and report them if necessary.
  • Promote Public Awareness: Encourage staff, visitors, and customers to stay vigilant and report anything unusual.

5. LOW (An Attack is Highly Unlikely)

  • Continue Routine Security Practices: Maintain basic security procedures including site patrols, ID checks, and incident reporting.
  • Monitor Threat Updates: Stay informed about any changes in threat levels through official sources (MI5, NaCTSO).
  • Train for Future Threats: Use this period to conduct staff training, emergency drills, and counterterrorism awareness sessions.
  • Ensure Compliance with Safety Regulations: Conduct security audits to confirm adherence to industry and government security guidelines.