Before hiring licensed security services, check if a risk management plan is required. Here’s how to understand the process, what form is needed to complete the plan, and next steps.
Risk management plan guidelines
The Private Security Act 2004 requires that a risk management plan be completed before a security activity takes place for:
- a client who employs or engages a private security licence holder to carry on a security activity, or,
- a client who employs or engages a private security licence holder to provide the services of other persons to carry on a security activity.
Your responsibilities under the Private Security Act 2004
Under section 136A and 136B of the Private Security Act 2004, if you hire security services, you must:
- prepare a risk management plan, and,
- provide a copy to each person who is performing the security activity at least one day before the activity occurs.
As the client, you must also provide the security licence holder with:
- any required equipment, and,
- written information about the licence holder’s role and responsibilities.
Penalties may apply for non-compliance.
You do not need to provide a copy of your completed risk management plan to Victoria Police. However, we encourage clients to keep a copy of the plan for their records.
If you have engaged a security business for security services
If you have engaged a security business, you must provide a copy of your completed risk management plan to a representative of the business.
That representative will pass copies to the relevant individual licence holders.
If you have engaged an individual licence holder(s) for security services
If you have engaged an individual licence holder(s), the client must provide a copy of the completed plan to each individual licence holder.
Questions asked during the risk assessment plan process
As you complete the risk management plan, you will need to ask yourself questions about the security activity that will be performed, specifically about what risks there could be.
Some of the main risks that need to be considered may include:
- Is the premises/location licensed?
- Are there premises/interior risks like stairs or poorly lit areas?
- Are there area/exterior risks like main roads, railway lines, waterways etc.?
- Have there been any antisocial behaviour issues in the location within the last 12 months?
- Are there known individuals of concern and related incidents in the last 12 months?
You must also review the roles and responsibilities you have engaged any security licence holder(s) to perform. This includes:
- whether there are potential risks that are outside the role and responsibilities of the security licence holder(s), and,
- how these risks will be handled.
For further guidance, WorkSafe Victoria has a guide to risk and hazard assessment for crowd control at venues and events.
Risk management plan consultation
The risk management plan template is intended to aid discussion about risks between you and the security licence holder(s) you have hired.
We encourage you to make sure that the security licence holder(s) that you engage:
- clearly understand their role and responsibilities
- are provided the opportunity to raise any further risks or concerns that they may identify before the security activity is carried out.
Prepare for a risk management plan
As of 1 December 2026, you need to have completed a risk management plan when employing or engaging licence holders to perform:
- crowd controller/unarmed security guard activities
- unarmed bodyguard activities.
You must prepare a risk management plan before this security activity is performed.
Under the Private Security Act 2004, the risk management plan template used must be approved by the Chief Commissioner of Victoria Police.
Find the appropriate plan template required when employing or engaging licence holders below.
Crowd controller/security guard (unarmed) activities risk management plan
Download the crowd controller/security guard (unarmed) activities risk management plan form below.
Bodyguard activities (unarmed) risk management plan
Download the bodyguard activities (unarmed) risk management plan form below.
Security activities that do not require a risk management plan
If the security activities you need are not listed above, you do not need to complete a risk management plan at this stage. Templates for other security activities will be available soon.
However, we encourage anyone engaging a licence holder to provide a security service to:
- conduct a risk assessment of the activity to be performed, and,
- discuss any risks identified with the security licence holder(s) before the activity is performed.
Commonly asked questions about risk management plans
Find the answers to frequently asked questions about private security activities that require a risk management plan.
Updated