Five event security lessons from the World Cup so far by Lloyd Major, CEO, Halo Solutions
The World Cup is still in its early stages, but it has already offered a clear reminder for anyone responsible for major event safety: the real operational challenge doesn’t stop at the stadium perimeter.
Recent reports have highlighted concerns around ticket checks, drone activity, severe weather disruption, heat risk and transport pressure. Each one is different, but they all point to the same challenge: major tournaments have to be managed as one connected operation.
This World Cup spans three countries, 16 host cities, 48 teams and 104 matches, making it an unprecedented event for security. At that scale, the venue is not just the stadium. It is the station, the shuttle queue, the walking route, the fan zone, the public square, the training ground, the team hotel and the journey home. It’s everything that comes with going to watch the football. That wider footprint is where some of the most important lessons are already emerging.
Lesson one: security starts long before the seat
Reports from England’s opening match in Dallas raised questions about ticket checks, turnstiles and whether people without tickets were able to get inside the stadium. FIFA has said there was no indication of unauthorised entry, but the wider takeaway still stands. Access control is not just a gate issue. It is a live operational issue.
At a tournament of this size, entry points have to be connected to crowd flow, stewarding, CCTV, police support, perimeter management and live decision making. If one part of that chain becomes unclear, pressure can build quickly. It only takes one broken barrier gate or confused ticket holder to create a gap that people exploit.
The answer to that is not simply more barriers or more staff. It is better shared visibility. Control rooms need to know where queues are forming, which gates are under pressure, where checks are slowing down and who owns the next action. A report from a steward should not sit separately from CCTV, police updates or gate data. It should form part of the same live picture.
Lesson two: drones are not just a stadium threat
The threat of drones is now very real for live tournament operations and it’s one that has already reared its head at this World Cup, with reports stating that Mexican military forces brought down an unregistered drone near South Korea’s training camp in Guadalajara.
That matters because it shows how quickly the security footprint expands. A drone incident may not begin above a packed stadium. It could appear near a training site, a fan zone, a team hotel, a media facility or, even worse, a transport route.
For organisers, that means drone response has to be coordinated across the whole event environment. Detection, reporting, escalation and response cannot sit in one team’s inbox or one venue’s incident log. The relevant people need to see the same information at the same time, whether they are in security, police, event control, venue management or team operations.
The technology used to detect drones is important, but it is only as strong as the incident management operation around it. Once a concern is identified, the organisation still needs to know who was alerted, what decision was made, what action followed and whether the risk was closed.
Lesson three: fan zones benefit from similar operational discipline as stadiums
The weather has been front and centre at this World Cup, which we’ve seen not only with the hydration breaks introduced throughout the game. But it’s not just the heat wreaking havoc. A fan park in Atlanta reportedly closed several hours early because of severe weather concerns linked to heavy rain, flash flooding and storm risk. That is exactly the kind of decision major event organisers have to make quickly and clearly.
Fan zones are often treated as the softer side of major tournaments. In reality, they are major spectator environments in their own right. They bring together large crowds, and that in turn brings alcohol. Organisers therefore need temporary infrastructure to facilitate this, as well as stewarding teams and emergency services.
If a fan zone has to close early, either because of the weather, some type of fault or even if it’s just reached capacity, the operational challenge does not end with that decision. Organisers need to communicate with the public, redirect crowds, update transport partners, manage welfare risk, brief stewards, protect vulnerable attendees and record the rationale behind each decision. There is also the inevitable friction or disorder if a viewing screen fails, or people outside cannot get in because it’s full.
This requires the same standard of coordination expected inside the stadium. A fan zone may not have a pitch, but it still has crowd risk, welfare risk, security risk and reputational risk. Even worse, who owns that risk can often be unclear. Whose responsibility is it to move fans on from outside if they can’t get in? How was this pressure tested pre-event?
Lesson four: heat and welfare have to be managed in real time
On the flip side of flash floods, extreme heat has been a recurring concern, in particular for people working at the World Cup, like stewards, in hot southern U.S. host cities. Reports have warned about the risks facing security staff and others working long shifts in high temperatures.
This is an important reminder that public safety includes staff welfare as well as spectator safety.
Any sign of a problem must be captured early. If messages are communicated across the radio or via WhatsApp and other separate contractor systems, the pattern may only become clear once the issue has escalated. A connected control room can spot those trends sooner and assign action before welfare pressure becomes a larger incident or legal claim.
Lesson five: transport is part of the event, not an afterthought
Reports of transport disruption after a match at MetLife underline another familiar truth for fans: the event does not end at full-time.
A stadium can operate well internally and everything can run as planned. But if thousands of people are left waiting to get home after the match, the role of security and operations teams isn’t over. Transport pressure can create crowding, frustration, welfare issues and security concerns. It also affects public confidence in the whole event.
That is why transport partners, local authorities, police, event control and venue teams need shared situational awareness. Shuttle queues, road closures, rail delays and crowd movement all need to feed into the same operational view as incidents inside the venue. The public experiences the event as one journey. Safety planning should reflect that.
Unified risk management
A modern control room should be able to see what is happening at an event, understand what matters, task the right people and record not only what decisions were made, but what options were available and what happened next. That applies whether the issue is a drone, a blocked gate, a welfare concern, severe weather, a transport delay or a public report from a fan.
Major events need their own version of a black box: clear, time-stamped records that show what was known, who acted, when decisions were made, what options were available, the rationale for those decisions and how incidents were resolved. Because when the pressure rises, fragmented information slows everyone down. Connected operations give teams the best chance to act early, protect people, ensure the right protocols are followed and log an accurate record of events for analysis afterwards.