Crowd Management

Crowd management is the overall strategy and control framework for keeping people safe at a music festival. It encompasses the systematic planning, monitoring, and guidance of crowd dynamics across all spaces and movement phases.

Universal Application: Every event requires a crowd management plan, regardless of event size or whether attendance is public, private, or restricted.

Scalable Risk Framework: While a plan is always required, the scale and complexity of the formal documentation is proportionate to risk rather than a fixed capacity threshold.

Professional Competence: Guidance in this chapter provides an operational framework and does not replace specialised expertise. Crowd management planning and risk modelling should be undertaken by a competent professional.

This chapter covers the planning and operational systems required to safely guide crowd movement and enhance the patron experience across the full event lifecycle. It applies to all event organisers, production managers, site safety leads, crowd managers, security and operational staff.

Key Areas Covered

• Crowd planning and risk modelling: Applying structured planning tools, calculating spatial capacities, and setting safe density limits.
• Phase-based movement: Managing arrival queues during ingress, internal pedestrian flow between stages and amenities during circulation, and mass dispersal during egress.
• Site layout and physical barrier design: Designing queue lanes, front-of-stage barrier systems, and mosh pit extraction corridors from a crowd movement perspective.
• Roles and specialist engagement: Defining operational responsibilities, vetting prospective crowd managers, and avoiding late-planning risks.
• Live monitoring and communication: Using status codes, crowd spotters, central control rooms, and radio protocols to manage density in real time.

For chapters that work alongside this one, see: Section 2.4 Integration with Other Chapters.

Good crowd management starts with identifying what can go wrong. Use the ISO 31000 risk management process — identify, assess, control, review — as your framework. Apply RAMP and DIM-ICE (Prof. G. Keith Still) to analyse crowd-specific hazards at your site (see: Section 4.1).

Most crowd disasters are not caused by a single failure. They happen when multiple layers of protection break down at the same time — poor planning, undertrained staff, inadequate infrastructure, and slow response all combining. The Swiss Cheese Model of crowd safety reflects this: plan for overlapping protections, not a single line of defence. Successful crowd management creates a seamless, enjoyable experience for attendees while keeping everyone safe.

Primary crowd risk categories:

• Density and flow: Crowd crush, compressive asphyxia, shock-wave propagation in high-density zones; bottlenecks at entry, exit, and stage-front
• Demographic and behavioural: High-energy crowd types (mosh/dance genres); intoxicated patrons; youth audiences; mobility-impaired attendees; variable responses to authority
• Environmental and temporal: Heat stress compounding alcohol and drug effects; adverse weather impacting crowd movement; event phase transitions (ingress surge, post-headliner egress)
• Infrastructure: Inadequate egress capacity; barrier placement creating crush points; not fit for purpose infrastructure; temporary structure failure under dynamic crowd load
• Operational: Security performing crowd management without a competent crowd movement specialist; generic CMPs not adapted to site; crowd specialist not engaged; communications failure in high-noise environments. Organisers and senior management insufficiently trained or lacking in active oversight.
• Scalability: Risk profile increases non-linearly with attendance. A medium event at a constrained site may carry higher density risk than a large event on an open site. Assessment must be site- and genre-specific, not attendance-number only.

See: YOUROPE — Crowd Management: The need of a systematic approach

Budget for these categories:

• Crowd Management Plan development — Your WHS duty of care requires a documented, evidence-based plan. This can be developed internally or commissioned from a crowd specialist.
• Crowd specialist engagement — For complex sites or high-energy events, crowd managers work closely with your security provider (some security providers may provide both services). They need crowd management competency, not just a security licence.
• Density modelling — Static (spreadsheet-based) modelling is the minimum for medium and large events. Dynamic modelling software is required for complex sites. Budget for iterations as your site design evolves — final modelling cannot happen until the site plan is confirmed.
• Barrier systems — Front-of-stage barriers and queue infrastructure must be load-rated to an engineering standard. Standard site fencing is not a substitute.
• Security and stewarding — All staff performing crowd control functions must be licensed under the Security Industry Act 1997 (NSW). Budget accordingly — you cannot use unlicensed staff for these roles.
• Monitoring systems — CCTV, spotters, and at large-scale events, real-time density monitoring. Camera placement must cover potential blind spots in your crowd management areas.
• Signage and wayfinding — Ingress, egress, and emergency signage must be readable under low light and in high-density conditions where sightlines are obstructed.

Do not cut costs here:

• Crowd specialist on high-risk events: Cutting the crowd specialist is the single most commonly cited cause of preventable crowd incidents. It is not a cost saving — it is a liability.
• Front-of-stage barrier engineering: A standard crowd barrier will fail under FOS density loads. The engineering consequence is catastrophic. This is not a place to use cheaper alternatives.
• Egress capacity: Exit widths and gate counts determine how quickly everyone can leave in an emergency. You cannot add more gates on the day. Get this right in planning.
• Licensed security: Using unlicensed staff for crowd control is a direct regulatory breach under the Security Industry Act 1997 (NSW). The organiser carries that liability personally.

Likelihood/Consequence scoring: Using the AS/NZS ISO 31000:2018 scale, crowd density risks at music festivals typically sit at high likelihood and catastrophic consequence — the combination that demands your highest priority controls.

Scaling your Crowd Management Plan to the actual risk profile of your event requires weighing several factors — from site configuration and crowd type to environmental conditions and historical data.

Primary frameworks referenced: RAMP analysis and DIM-ICE evaluation. See: Section 4.1.

Weighted factors for CMP scaling decisions:

• Attendance and site capacity: The more people you have relative to your available space, the higher the density — and density is the primary driver of crush risk.
• Genre and crowd energy: A metal or electronic dance event generates very different crowd behaviour to a family festival — moshing, surging, and sudden movement are predictable features, not exceptions. Standard crowd management assumptions do not apply; specialist input is often required.
• Site configuration and flow vs capacity: Overall site capacity depends on the ability to move crowds through the layout at different times. Constrained entry points, narrow paths, or sloped ground restrict movement flow, creating high-density risks during peak moments like gate opening, stage changeovers, and post-headliner departure.
• Audience demographics: A crowd that includes young children, elderly patrons, first-time festival-goers, or people with mobility needs moves differently and responds differently in emergencies. Your planning must account for this.
• Environmental conditions: Extreme heat combined with alcohol or drug use creates unpredictable crowd behaviour. Adverse weather drives people to covered areas, creating sudden density spikes at pinch points you may not have planned for.
• Phase transitions: The period immediately after your headline act ends is consistently the highest-risk moment of the event — everyone moves at once, intoxication is at its peak, and lighting is often reduced. A single hard finish time is significantly riskier than a staggered programme.
• Historical data: If your event has run before, review your incident register, near-miss records, and post-event debriefs. Patterns from previous years are the most reliable indicators of where risk will emerge again.

Document your reasoning: Record why you made the decisions you did — especially if you chose not to engage a specialist or commission modelling. This is part of your WHS Act due diligence record and demonstrates you considered the risks and made a reasoned judgement.

Legislative or regulatory requirement. Non-compliance carries legal risk.

🔴 Duty of care to everyone on site: You must take all reasonably practicable steps to protect the health and safety of workers and patrons — including managing crowd risks. This obligation applies at every event scale, with no size threshold. WHS Act 2011 (NSW), s.19.

🔴 Safe site and workplace: As the person in control of the festival site, you must ensure the site itself does not put people at risk — including how crowd movement is planned and managed. WHS Act 2011 (NSW), s.20.

🔴 Officer due diligence: If you are a director or senior manager, you must actively ensure your organisation meets its WHS obligations — not just delegate them. WHS Act 2011 (NSW), s.27.

🔴 Emergency plan: You must have a written emergency plan covering evacuation procedures, roles, and responsibilities. It must be maintained and implemented. WHS Regulation 2011 (NSW), s.43.

🔴 Risk controls in priority order: You must address crowd risks by working through the hierarchy of controls — starting with eliminating the hazard before resorting to administrative measures or PPE. WHS Regulation 2025 (NSW), Reg. 36.

🔴 Notifiable incidents: If a patron, worker, or visitor dies, is seriously injured, or is involved in a dangerous incident, you must notify SafeWork NSW immediately. Do not disturb the site until an inspector attends, unless required to assist an injured person. WHS Act 2011 (NSW), ss.35–39.

🔴 Shared responsibility across contractors: If multiple businesses operate on your site — security firms, caterers, staging crews — each has its own WHS duty. You cannot contract your way out of responsibility. WHS Act 2011 (NSW), s.16.

• See Music Festivals Act (NSW) for full coverage of all requirements and deadlines before you begin planning.

🔴 Security licensing: Anyone performing crowd control functions — physical management of patron behaviour, searching at entry, removing patrons — must hold a valid licence under the Security Industry Act 1997 (NSW), s.4.

These are the standards that government agencies and the sector expect operators to meet. Regulators, courts, and insurers reference them when assessing your practice.

🟡 Emergency planning framework: Your emergency plan should meet AS 3745-2010, which sets out minimum requirements for Emergency Planning Committees, warden roles, and evacuation procedures. Many councils and development approvals require it.

• See: AS 3745-2010

🟡 Crowd density thresholds: Use the AIDR Safe & Healthy Crowded Places Handbook as your baseline for calculating safe site capacity — covering free flow, minimum standing density, and critical danger thresholds.

• See: AIDR Safe & Healthy Crowded Places Handbook

🟡 Risk management process: Apply a systematic risk management process — identify, assess, control, review — across your entire crowd management planning cycle.

• See: AS/NZS ISO 31000:2018 for the recognised framework.

🟡 Crowd management & crowd control: Crowd management takes a proactive approach to planning for crowd movement and attendee experience, while crowd control uses measures to manage access and maintain public order. Your plan must address both. See AIDR Handbook 15: Managing Crowds Safely for guidance on these principles.

🟡 Dynamic crowd modelling: For complex, high-risk, or multi-stage sites, dynamic simulation software (such as MassMotion or Legion) serves as a valuable tool to map merging flows, calculate queuing wait times, and identify density hotspots. The decision to model should be proportionate to site complexity and risk rather than a fixed attendance threshold. Operators must account for software accuracy variations (noted in the Green Guide, chapter 6.7), ensuring computer predictions are always peer-reviewed by a qualified crowd specialist.

🟡 Testing your emergency plan: An emergency plan is not a static document. Test it through exercises and drills, including communication systems under high-noise conditions. AS 3745-2010 sets out testing requirements.

🟡 Personal Emergency Evacuation Plans (PEEPs): For patrons with disabilities, you should have individual evacuation plans in place to ensure they can be safely assisted in an emergency. AS 3745-2010.

Practices that distinguish leading festival operators. They go beyond what regulators require or expect, representing genuine opportunities to improve patron experience, reduce harm, and demonstrate sector leadership.

🟢 RAMP and DIM-ICE analysis: Use RAMP (Routes, Areas, Movement, Profile) and DIM-ICE (Design, Information, Management × Ingress, Circulation, Egress) to systematically assess your site under normal conditions and emergency scenarios. These are crowd science frameworks developed by Prof. G. Keith Still, used by leading operators and specialists to develop CMPs.

• See: DIM-ICE risk model, Crowd modelling, YOUROPE — Crowd Management: The need of a systematic approach

🟢 Swiss Cheese understanding of crowd safety: Plan for multiple overlapping layers of protection — regulatory compliance, risk planning, operational controls, staff training, and incident response. Crowd disasters happen when layers fail simultaneously, not from a single cause.

🟢 Real-time density monitoring: For large events (5,000+ patrons), leading operators use AI-based camera systems to track crowd density in real time — identifying dangerous buildups before they become emergencies.

🟢 Engage a crowd specialist: For complex sites, high-energy genres, or large events, engage a dedicated crowd movement specialist — working closely with your security provider — to develop and review your CMP.

🟢 Stage and bar timing to manage egress: Stagger stage finish times and begin closing bars 30–60 minutes before the final act. This spreads egress load and reduces peak intoxication at the point of departure — two of the most effective operational tools for managing post-event risk.

🟢 ANSI ES1.9-2020 Crowd Management Standard: The Event Safety Alliance standard distinguishes crowd management from crowd control and defines theoretical crowd risks for live events. Used by leading NSW operators as an international benchmark.

• See: ANSI ES1.9-2020

🟢 LPA Audience & Crowd Management Hazard Guide: Live Performance Australia's guide covers crowd hazard identification and management plan development for live entertainment — practical and industry-specific.

• See: LPA Audience & Crowd Management Hazard Guide

🟢 Hostile Vehicle Mitigation: For events assessed as potential targets, use bollards, concrete barriers, and vehicle checkpoints at high-density entry zones. Apply Australia's Strategy for Protecting Crowded Places from Terrorism as your planning reference.

• See: Australia's Strategy for Protecting Crowded Places from Terrorism

RACI key: R = Responsible | A = Accountable | C = Consulted | I = Informed | — = No direct role

Conflict resolution: Where roles conflict or accountability is unclear, escalate to the Event Organiser or Event Controller. Final authority for crowd management decisions rests with the Event Organiser. Document disputed decisions in writing.

Australia currently has no dedicated national accreditation pathway specifically for crowd management specialists separate from state security licensing frameworks. Event organisers must carefully vet prospective crowd management suppliers using clear competency criteria.

Disqualifying red flags — crowd management specialist:

• Security master licence alone: a security licence under the Security Industry Act 1997 (NSW) qualifies a person to perform crowd control functions — physical deployment and patron removal. It does not qualify them to author or review a CMP. Suppliers who conflate the two should be disqualified.
• No empirical methodology: disqualify suppliers who cannot demonstrate use of RAMP and DIM-ICE frameworks or who cannot show how they conduct static flow rate and capacity calculations
• Generic or template-only CMPs: disqualify suppliers whose plans are not site-specific and demonstrably adapted to the event's genre, audience profile, and site configuration

A late start significantly reduces the ability to proactively manage crowd risks:

Safety:

• Design-phase risks become permanent: Crowd modelling and frameworks such as DIM-ICE identify hazards (pinch points, poor sightlines, constrained egress routes) that can only be resolved during site design. Once bump-in has commenced, these hazards are effectively “locked in”.
  
• Increased likelihood of unsafe crowd conditions: Without early modelling, risks such as Front-of-stage compression, Ingress/egress congestion, Crossflow conflicts may not be adequately mitigated.
  
• No opportunity for validation and testing: Tabletop exercises, scenario testing, and multi-agency briefings cannot be meaningfully conducted late in the program. Critical elements such as Show Stop procedures, Emergency evacuation coordination, ECC communication protocols (C4) remain unproven under realistic conditions.
  
• Reduced staff preparedness: Crowd management teams arrive operationally underprepared, with Limited understanding of site-specific risks, No rehearsal of emergency roles, Reduced confidence in escalation protocols.

Legal exposure:

Late Crowd Manager engagement creates a direct gap in WHS due diligence:

• Under the Work Health and Safety Act 2011, duty holders must demonstrate they have taken “all reasonably practicable steps” to eliminate or minimise risks.
  
• A late-developed Crowd Management Plan (CMP) Lacks documented crowd modelling and analysis, Reduces evidence of competent specialist input, Weakens the audit trail of risk identification and control implementation.
  
• In the event of an incident, this creates Increased liability exposure for organisers and venues, Difficulty demonstrating compliance to regulators, including Safe Work and Police, Potential reputational and contractual consequences.

Cost:

Late planning has direct operational and financial consequences:

• NSW Police (User Pays) require advance notice to roster officers for your event. Late engagement reduces availability, costing and affects your crowd dispersal planning directly.
  
• Escalating infrastructure costs:
  • During design: changes are low cost / high impact.
  • During bump-in: changes become expensive and disruptive.
  • Post build: changes are often not feasible.
    
• Inefficient resource allocation: Without early modelling, Overstaffing may occur in low-risk areas. Understaffing may occur in critical zones (e.g. FoS, ingress points) leading to both cost inefficiency and increased risk.

• Monitoring tools: Use CCTV, manual crowd spotters, and drones where permitted to track crowd density in real time.
• Observation protocols: Use standardised radio call hierarchy and escalation language. Green, Amber, Red status codes give your team a shared language for communicating crowd conditions quickly and clearly.
• Security deployment tracking: Your central control room should monitor all team positions and be able to redirect deployment in response to what spotters and cameras are reporting.

• Debriefs: Daily operational debriefs during multi-day events; comprehensive inter-agency debrief with police, health, and emergency services post-event
• Data review: Incident Register, medical presentation data, and ejection and arrest data reviewed against CMP outcomes
• Lessons learned: Pinch points, near-misses, and areas for improvement documented and fed into the next planning cycle

During the event:

• Density: Track real-time density in key zones against your safe capacity thresholds. Refer to AIDR and Green Guide benchmarks for reference values.
• Flow rates: Monitor entry and exit throughput (persons per minute per metre width) to catch queue build-up before it becomes a crowd management problem.
• Queue lengths: Track wait times at screening, turnstiles, and Zone Ex transport hubs against the safety thresholds set in your CMP.

After the event:

• Flow effectiveness: No unexpected pinch points, dangerous surges, or sustained congestion during ingress or egress.
• Clearance targets: Time-based clearance targets met during normal egress and any emergency evacuation drills.

• MFA statutory reporting obligations (Incident Register, post-event report): See: Music Festivals Act (NSW) for all MFA reporting obligations including the Incident Register and post-event medical report requirements
• WHS Act notifiable incidents (ss.35–39): Immediate notification to SafeWork NSW for deaths, serious injuries, or dangerous incidents
• Post-event report to agencies: Summary of crowd management outcomes provided to NSW Police and NSW Health as required under agreed HMP conditions
• Internal incident log: All crowd management incidents, ejections, and escalations documented during the event regardless of MFA applicability

• Post-event debrief findings documented and assigned to the next planning cycle — not filed and forgotten
• Incident register data and near-miss records reviewed when developing the CMP for the next iteration of the event
• See Planning, Management & Risk for organisational improvement framework

All event staff and volunteers — orientation level:

• Site familiarisation, basic situational awareness, hazard reporting, and emergency evacuation routes

FOH staff, ushers, and marshals (unlicensed):

• Proactive customer service and information provision; disability and accessibility awareness; safe facilitation of crowd flow; basic radio etiquette

Licensed security and crowd controllers:

• De-escalation and dispute resolution; identifying critical crowd density thresholds; crowd surge prevention awareness; safe physical extraction including front-of-stage and mosh pit rescues

Supervisors, event control, and crowd managers — high priority:

• Application of crowd management frameworks (RAMP/DIM-ICE); CCTV interpretation; delivering cascaded safety briefings; multi-agency escalation protocols; dynamic decision-making for show-stops and emergency scenarios

Best Practice:

A crowd safety understanding should be inserted within each departmental induction and be reviewed by the crowd manager - not just the Security Induction.

• Internal radio protocols: Use strict radio etiquette with clear call hierarchies and dedicated command channels. All staff in high-noise environments must use headsets or earpieces.
  
• Escalation language: Use standardised Green, Amber, Red status codes across all teams. Prohibit panic-inducing words such as "fire" or "bomb" on public and radio channels. Everyone must know the codes before the event opens.
  
• Dynamic public messaging: Use digital signage, PA systems, and mobile push notifications to redirect crowd movement in real time when pinch points develop.
  
• Emergency broadcasting: Pre-script and multi-agency approve all emergency announcements before the event. Event Control must have direct PA system override capability at all times.
  
• Screening and ingress communications: Assess contraband search and screening methods for their impact on queue build-up and patron flow before the event. Entry staff must have a direct radio channel to Event Control to manage throughput and flag emerging density risks at gates in real time.
  
• System redundancy: Have backup communication methods ready. Landlines, digital pagers, and physical runners cover network failure and mobile tower congestion. All systems must have independent power supplies

• Late engagement of crowd specialists: Appointing crowd management personnel after site layouts are fixed and tickets are already on sale. Crowd specialists should be involved from the early design phases to evaluate flow capacities and sign off on site maps and ticket limits prior to public release.
  
• Relying on generic or copied plans: Reusing a CMP from a previous event without adapting it to the current venue, audience demographics, or changed site conditions
  
• Conflating control with management: Treating proactive crowd management as interchangeable with reactive crowd control — resulting in reliance on security guards alone rather than qualified crowd specialists
  
• Budget cuts on crowd science: Eliminating density modelling, flow-rate calculation, and specialist engagement from the planning budget
  
• Security theatre: Deploying security personnel who are poorly briefed, lack situational awareness, and are disconnected from the central radio network
  
• Under-planning egress and Zone Ex: Over-investing in ingress and performance planning while failing to model egress capacity, evacuation routes, and the last-mile transport interface
• Unassessed site overlay: Placing temporary structures, vendor stalls, or screens in circulation areas without reassessing safe capacity and bottleneck risk
• Ignoring dynamic environmental shifts: Failing to adjust crowd management in response to real-time weather changes, extreme heat, or the effects of alcohol and drug use on crowd behaviour

Government Guidelines

Australian Standards

International Standards

Industry Resources

In the case of a life threatening or time critical emergency, please call Triple Zero (000).