Concert Security Planning: Staffing Ratios, Zones, and Command Structure

A security plan is not a headcount on a staffing invoice. It is a written document that explains who is posted where, what each post is responsible for, how those people talk to each other, and who has authority to make decisions when conditions change. This guide walks through how promoters and production managers build that plan for a typical ticketed concert, from the risk assessment that drives it to the radio channels that run it.

Start with a risk assessment, not a ratio

Every staffing number you will see quoted in the industry is a starting point. The real number comes from a risk assessment that considers the specific show. Before you call a security contractor, document the following:

• Audience profile: age range, expected alcohol consumption, genre history (moshing, crowd surfing, stage diving), and whether the artist's previous shows had incidents.
• Venue layout: general admission versus seated, number of entrances, floor levels, balconies, and pinch points.
• Timing: doors time, number of acts, curfew, and whether egress coincides with nearby events or public transit closures.
• External factors: neighborhood, outdoor exposure, weather, and any credible threat information.
• Sell-through: a sold-out show behaves differently from one at 60% capacity, especially at the barricade.

The output is a short list of hazards ranked by likelihood and severity, each with a control measure. Staffing levels, barricade design, and medical coverage all flow from this document. If you have not yet chosen a room, the venue's own security history and layout should be part of your evaluation; see Choosing a Concert Venue.

Staffing ratios as a planning baseline

A commonly used baseline for low-to-moderate-risk ticketed events is roughly one security staff member per 100 attendees, adjusted upward for higher-risk factors. Guidance documents such as the UK Purple Guide describe risk-based approaches rather than fixed ratios, and US jurisdictions vary widely, so treat any ratio as an opening estimate that your licensed security provider and the local authority having jurisdiction (AHJ) will refine.

Adjust upward when you have:

• General admission floors with an active crowd.
• Heavy alcohol sales or a late curfew.
• Multiple stages, outdoor perimeters, or large footprints with few natural barriers.
• High-profile artists with fan rush risk at arrival or departure.

Worked example: a 2,000-capacity GA show

Consider a sold-out 2,000-capacity general admission room, rock bill, full bar, two entrances, one balcony. Rather than dividing 2,000 by 100 and stopping, build the number post by post:

1. Entry and search: two entrances, each with four search lanes staffed by one searcher per lane plus a lane supervisor: 10.
2. Ticket scanning support and queue management: 2 per entrance: 4.
3. Pit crew at the front-of-stage barricade: 6 (enough to rotate and handle crowd surfers across a 40-foot barricade).
4. Floor rovers: 4.
5. Balcony: 2 at the rail, 1 at the stairs: 3.
6. Bars: 1 per bar across 3 bars: 3.
7. Stage door, backstage, and dressing rooms: 3.
8. FOH (front-of-house) mix position: 1.
9. Emergency exits and fire doors: 4.
10. Supervisors: 2 sector supervisors plus 1 head of security: 3.

That totals 41, roughly 1 per 49 attendees, which is well above the 1:100 baseline. That is normal for a high-energy GA show. The key point is that the number is defensible because every body is attached to a post with a written responsibility.

Divide the site into zones

Zone-based planning gives each area an owner and makes radio traffic intelligible. A typical concert breaks down into:

• Zone 1, exterior: queue lines, sidewalks, parking, rideshare pickup. Concerns include line crushing, scalpers, and intoxicated patrons refused entry.
• Zone 2, ingress: search lanes, ticket scanning, ID checks, and wristbanding. This is where prohibited items are stopped; see Access Control and Entry Operations for throughput math.
• Zone 3, public interior: concourses, bars, restrooms, merch, and the audience floor.
• Zone 4, front of stage: the barricade and the pit between barricade and stage.
• Zone 5, back of house: stage, wings, dressing rooms, production office, loading dock.

Each zone gets a supervisor, a posted staff list, and a credential matrix that defines which wristbands or laminates are accepted there. Print the matrix and post it at every checkpoint.

Build the command structure

Most professional events borrow from the Incident Command System (ICS; FEMA's free IS-100 course is a good introduction), which gives a single point of command and a clear chain of escalation. You do not need a full ICS org chart for a 2,000-cap show, but you do need these roles named in writing:

• Event controller or incident commander: usually the promoter's production manager or the venue's operations manager. Has authority to pause or stop the show.
• Head of security: runs all security posts and supervisors.
• Medical lead: runs first aid and liaises with EMS.
• Venue or facility lead: HVAC, power, doors, lighting, and building systems.
• Stage manager: relays show-stop and announcements to the artist's team.
• Law enforcement and fire liaisons: if police or fire watch are on site, define who they report to.

The command post

Designate a physical command post with sightlines or camera feeds of the floor, a printed site map, the staffing plan, the emergency action plan, and a log. Every significant incident gets a time-stamped log entry: time, location, description, action, and outcome. That log is your best friend when an insurer or attorney asks what happened months later.

Rule: one person has authority to stop the show, one backup is named, and both are reachable by radio at all times.

Radio channels and communication protocol

Radio discipline separates competent teams from chaotic ones. A typical channel plan:

• Channel 1, security: all security staff.
• Channel 2, command: department heads only.
• Channel 3, production: stage manager, FOH, monitors, lighting.
• Channel 4, medical.
• Channel 5, venue operations and box office.

Agree on code words for incidents that should not alarm patrons who overhear a radio, for example a code for a medical call, a lost child, a fight, a suspicious package, and a show stop. Publish them on a laminated card. Require staff to identify themselves by post ("Barricade 2 to Floor Supervisor"), not by name.

Briefings, credentials, and post orders

Every staff member should receive a pre-shift briefing that covers the show schedule, artist-specific requests (for example, an artist who invites crowd surfing), the prohibited items list, the evacuation routes, code words, and the location of the command post and first aid. Pair the verbal brief with written post orders: a one-page sheet per post that states the post's location, duties, what to do on a code call, and who to report to.

Credentials should be distinct by color and design for each access level, with a sample board at every checkpoint. Count credentials issued and returned; lost laminates are a common back-of-house breach.

Contracting your security provider

Use a licensed, insured security contractor, and verify licensing requirements in your state, as many states license guards individually. Your contract should specify:

• Staff count by post and call times.
• Supervision ratio and named head of security.
• Use-of-force and ejection policies consistent with the venue's.
• Certificate of insurance naming the promoter and venue as additional insureds.
• Training standards: crowd management, de-escalation, and first aid awareness.

Confirm the final plan with the venue, your insurer, and the AHJ. This article describes common practice, not legal requirements for your jurisdiction.

Putting it into practice

Write the risk assessment first, build headcount post by post, name your command roles, and rehearse the show-stop procedure before doors. Pair this plan with a crowd management strategy from Crowd Management: Density, Barricades, and Egress. You can compare rooms on Avenue Mine venues and find security and production providers among our vendors.