A security manager is told to review an unfamiliar report, make a decision about an emerging concern and brief senior colleagues within minutes. In that moment, a certificate on the wall has little value. Counter terrorism courses are useful only when they improve the person’s ability to notice what matters, assess it properly and take proportionate action.

That is the standard organisations should use when choosing development for security teams, managers and responsible persons. The question is not whether a course covers the right terminology or satisfies an internal training matrix. It is whether people will make better decisions when information is incomplete, time is short and the consequences of getting it wrong are real.

Why many counter terrorism courses fall short

There is no shortage of awareness material. Most people working in public facing environments can access basic information about suspicious behaviour, reporting routes and emergency response. That baseline has value. It gives staff a shared language and may prompt an early report that would otherwise have been missed.

The problem begins when awareness is treated as capability. Recognising a poster, completing a multiple choice assessment or watching a short presentation does not prove that someone can assess risk in their own setting. It does not show that they understand how security, operations, customer experience and safety affect one another. It certainly does not show how they will perform when a senior manager wants an immediate answer.

This matters particularly as organisations prepare for stronger protective security expectations, including Martyn’s Law. Compliance activity can create useful structure, but it can also encourage a tick box mindset. Policies may be current. Training records may be complete. Yet the people expected to make decisions may still lack confidence, judgement or a clear understanding of their role.

A course that leaves participants able to repeat definitions but unable to apply them has not reduced much real world risk.

What effective counter terrorism courses should develop

Good learning changes how people think before it changes what they can recite. It helps a practitioner separate relevant information from noise, question assumptions and understand the limits of their authority and expertise.

For a security professional, this means more than knowing the broad threat picture. They need to understand how threats interact with site vulnerabilities, routines, physical design, staffing patterns and business activity. A transport hub, corporate office, crowded venue and construction project do not need identical answers. The principles may be similar, but the risk decisions will be different.

For managers outside security, the requirement is often different again. They may not need to design security measures, but they do need to recognise when a concern requires escalation, support sensible controls and avoid decisions that unintentionally weaken protective arrangements. Removing a reception function, changing access arrangements or prioritising speed of entry over observation can have consequences that are not obvious in a board paper.

Effective courses also develop behavioural capability. People under pressure can become fixated on one explanation, defer to confidence rather than evidence, or delay action because they are concerned about being wrong. These are normal human responses. They are also areas where organisations can improve through practice, feedback and clear decision processes.

The difference between information and assessment

A useful course should ask participants to apply knowledge, not merely receive it. This is where assessment matters, provided it tests judgement rather than memory alone.

A credible capability assessment can reveal whether someone understands the relationship between threat, vulnerability and risk. It can show gaps in protective security knowledge, planning discipline, incident decision making or project oversight. Crucially, it gives the learner and their organisation a starting point for improvement rather than a vague assurance that training has been completed.

Immediate feedback has a practical role here. A learner who receives an explanation while the decision is fresh can identify the assumption behind an incorrect answer. That is more valuable than simply being told they scored 70 per cent. It turns an assessment into a learning intervention.

This approach is particularly useful for experienced practitioners. Experience is valuable, but it can also produce habits that go unchallenged. A capable manager may be strong in operational delivery yet less confident in risk assessment, security design or formal decision making. Identifying that gap is not a criticism. It is how professional development becomes targeted rather than generic.

Mildot Group’s capability evaluation approach is built around this principle: diagnose what a person or team understands, provide meaningful educational feedback and use the result to guide further development. That is a more honest measure of readiness than attendance alone.

Choosing the right level of learning

Not everyone needs the same counter terrorism training. Buying the most detailed course available can be as wasteful as providing only a short awareness module to people with significant responsibility. The right level depends on the role, operating environment and decisions the person is expected to make.

Frontline colleagues need clarity about reporting, personal safety, observation and their immediate responsibilities. Their learning should be short, relevant and easy to recall during a busy shift. They should not be burdened with technical detail that has no bearing on their actions.

Security officers, supervisors and control room staff need a deeper understanding of threat indicators, response arrangements, reporting quality and escalation. They also need the confidence to challenge unusual activity professionally and to record information in a way that supports sound decisions.

Security managers and risk leaders need more. Their role involves assessing vulnerabilities, prioritising investment, advising senior leaders and testing whether security arrangements work as intended. For them, a course should connect protective security to operational reality, governance and resilience. It should deal with difficult trade offs, not present security as a set of isolated controls.

Senior decision makers may need only a concise programme, but it must be well designed. They should understand their accountabilities, the implications of poor risk decisions and the questions they need to ask their teams. A director who understands the difference between a policy and demonstrated capability is better placed to provide effective oversight.

Make learning part of operational practice

The strongest organisations do not treat training as an annual event. They connect learning to exercises, reviews, incident debriefs, site changes and routine management conversations.

For example, after changing public access arrangements at a venue, the responsible team should ask whether staff understand the revised approach, whether observations can still be made effectively and whether escalation routes remain clear. A course may provide the principles, but a local discussion tests whether those principles survive contact with the operating environment.

Similarly, an incident or near miss should not end with a report filed away. It should prompt useful questions. What was noticed? What was missed? Did people have enough information? Did hierarchy delay a decision? Was the response proportionate? These questions improve capability without turning every event into blame.

There is a trade off. Scenario work, exercises and meaningful assessment take more time than simple online completion. They also require managers who are prepared to discuss uncertainty rather than demand easy reassurance. But that investment is where learning becomes performance.

Questions to ask before enrolling

Before selecting a programme, ask what the learner needs to be able to do differently afterwards. If the answer is unclear, the course objective is unclear too.

Look for learning that is relevant to the environment and role. Check whether assessment examines application, whether feedback explains the reasoning, and whether the provider understands protective security beyond classroom theory. Consider how results will be used. If nobody reviews capability gaps or supports further development, assessment becomes another administrative exercise.

Be wary of claims that a short course will make an organisation fully prepared. Readiness is built through competent people, sensible plans, appropriate physical and technical measures, leadership and practice. Learning is an essential part of that system, not a substitute for it.

The right counter terrorism course should leave people more alert to weak assumptions in their own environment and more able to act when those assumptions are tested. That is a far better outcome than another completed module on a training record.