Legal and training guidance reviewed: 15 October 2026.
Whether your venue needs licensed security depends on the applicable law, licence conditions, approved hours and activities. There is no single national midnight, 1 am or patron-capacity trigger.
Start with the venue's current licence and conditions, then check the people and activities needed to carry them out.
When is security required?
Licence conditions and local rules
A licence may specify crowd-controller numbers, deployment times, registers, CCTV or other controls. Check the actual condition rather than infer it from the label pub, restaurant or nightclub.
Useful jurisdiction examples include:
- NSW: Review the licence conditions and authorisations that apply to your premises.
- Victoria: Check the licence and required management arrangements. LCV management-plan guidance covers security numbers, hours and operating procedures where a plan is required.
- Queensland: OLGR security guidance distinguishes Brisbane City Council area requirements from individual licence conditions outside that area, including exemptions.
- Western Australia: The Director's security policy explains conditions for higher-risk premises and events and how the risk assessment affects arrangements.
These examples do not cover every jurisdiction or condition. Check the relevant authority when the proposed operation changes.
Changes to the venue
Review security arrangements when changing hours, capacity, entertainment, licensed areas or event format. Keep the current requirements available to the duty manager and contractor; do not rely on a security roster copied from a different venue.
Crowd controller vs security guard
The permitted activities matter more than a job title. States use different licence structures, and one authority may permit several activities.
In NSW, Police subclass changes merged the former unarmed-guard and crowd-controller subclasses into Class 1A Security Officer on 1 June 2023. That subclass includes guarding and crowd control. Current Class 1C means cash-in-transit, not crowd control.
Elsewhere, check the actual activities endorsed on the person's authority. Do not reject or accept a worker simply because their document uses a generic security label.
Verify current authorisation
- Establish what the person will actually do.
- Match their identity to the authority and check the relevant regulator's register.
- Confirm permitted activities, conditions and current status.
- Check the contractor's business authority where required, as well as the individual worker.
- Record what was checked, by whom and when, including any renewal evidence.
- Revisit the record when duties, status or the engagement changes.
Use the Victoria Police public-register guidance and Queensland crowd-controller requirements for those jurisdictions. Queensland offers one- or three-year terms, but the authority's current status still needs checking.
A printed expiry date is not always the final legal status. Victoria and Queensland describe circumstances in which a timely renewal permits continuation. Confirm the applicable rule and evidence rather than automatically equate every expired card with no licence.
CCTV: a separate requirement
Check the actual CCTV condition: coverage, recording times, retention, access and maintenance. A camera system does not replace required crowd controllers. Equally, merely operating in a state or precinct does not establish that every venue has the same camera or retention requirement.
For example, Queensland ID-scanning guidance has specific permanent-approval and exemption rules. Treat scanning, CCTV and staff authorisation as separate checks.
What happens when things go wrong
Unlicensed activity and breaches of licence conditions may lead to enforcement. The responsible person, offence, jurisdiction and process determine the possible penalty. Insurance and civil-liability outcomes depend on the facts and policy, so a national fine range or blanket coverage prediction is not reliable.
Keep a usable security register
Record identities, authority details, permitted duties, current status, dates and verification history, together with operational records required for the venue. Make sure the manager can distinguish a recorded document from an unresolved authorisation question.
VenueShield helps managers organise credential evidence, recorded dates and configured reminders. Review the underlying evidence and the requirements for the venue and duties. A dashboard or reminder does not certify legal eligibility, guarantee a legal defence or establish that every shift is covered. See how VenueShield can help.