Martyn’s Law: why protective security is becoming a board level FM issue
What has happened?
Martyn’s Law is moving from general awareness into practical preparation.
The Security Industry Authority has published a new update explaining its future role as regulator for the Terrorism Protection of Premises Act 2025, widely known as Martyn’s Law. The law is intended to improve protective security and organisational preparedness at qualifying premises and events across the UK.
The SIA says its new regulatory function is expected to be ready by early spring 2027. When the law comes into force, responsible organisations will be able to notify the SIA and submit compliance documents through an online portal, although that portal is not yet live.
This matters because Martyn’s Law is not only a security issue.
It is a facilities management, mobilisation, front of house, operations and governance issue.
Why this matters for TPMG FM’s audience
Many buildings and sites rely on several teams working together every day.
Security officers, reception teams, cleaning teams, catering teams, waste operatives, landscaping contractors, site managers and building users all shape how safe and prepared a premises is.
Martyn’s Law is designed to improve how organisations think about protective security and how they would respond if a terrorist attack happened. The Home Office has explained that qualifying premises will need to consider how they respond to such an incident, and larger premises and events may also need to consider appropriate steps to reduce vulnerability.
For FM teams, this connects directly to:
Security Services
Front of House & Concierge
Mobilisation
Contract management
Emergency procedures
Visitor management
Access control
Incident reporting
Staff awareness
Public facing site operations
The key point is that protective security is not just about guards, doors and cameras.
It is about people, roles, procedures and readiness.
What different organisations should take from this
For small businesses, the message is not to panic or overbuy. The Government’s own myth busting guidance says organisations do not need to comply immediately and may wish to start considering what they need to do before the Act comes into force. It also makes clear that specialist products or services are not automatically required for compliance.
For medium-sized businesses, especially those with busy customer-facing premises, now is the right time to review basic protective security arrangements. This could include visitor flows, staff awareness, evacuation routes, lockdown procedures, communication plans and who is responsible for decisions during an incident.
For large organisations and multinationals, the challenge is consistency. A single strong site is not enough if other locations have unclear roles, outdated procedures or weak mobilisation records. Larger estates should be looking at governance, training, audit trails and how protective security is embedded across FM contracts.
For public sector buyers, Martyn’s Law is likely to reinforce the need for suppliers that understand operational risk, safeguarding, public access, front of house behaviour and emergency preparedness. Schools, healthcare sites, civic buildings, leisure centres, libraries and transport linked sites may all need a more joined up approach.
For contractors and subcontractors, this is a reminder that site safety is shared. Cleaning, catering, landscaping, pest control, waste and reception teams may not be security teams, but they are often the people who notice unusual behaviour, blocked routes, unattended items, damaged doors, access issues or changes in normal site activity.
What premises and FM teams should check now
The most useful first step is a calm, practical review.
Organisations should ask:
Who is responsible for protective security at each site?
Do front of house, security and FM teams understand what to do in an incident?
Are visitor routes, delivery routes and contractor access points controlled properly?
Are emergency procedures clear, current and easy to follow?
Are staff trained to report concerns quickly?
Are mobilisation documents updated when a new contract or site goes live?
Can the organisation evidence its planning, training and review activity?
These checks are valuable even before formal legal duties start.
The SIA has also pointed premises and events towards free protective security guidance from the National Protective Security Authority and ProtectUK while preparation continues.
Where TPMG FM fits
This is where a structured FM partner can add real value.
TPMG FM’s services connect directly with the practical side of protective security, including Security Services, Front of House & Concierge, Mobilisation, site operations, contractor coordination and day to day reporting.
Good FM is not only about keeping a building clean, staffed and operational.
It is about helping people feel safe, making responsibilities clear and ensuring that sites can respond properly when something unusual happens.
Martyn’s Law is a reminder that resilience starts with preparation.
