Public Realm + Critical Sites as One Discipline: NPSA, Martyn's Law, AMP8, the Grid Upgrade, and the Concordat Case

§ THE FINDING

The UK has invested heavily in safe-by-design across two parallel worlds — the public realm (streets, parks, town centres, crowded places) and critical sites (substations, data centres, water assets, civils sites, BESS facilities) — but the professions, regulators, qualifications and cheque-books remain structurally separated. Two events in 2025 made the gap visible: the 20 March 2025 North Hyde 275kV substation fire in Hayes, west London (NESO Final Report 30 June 2025 identifying moisture ingress in a transformer bushing as most likely root cause), which closed Heathrow Airport for a day; and the 2 October 2025 attack outside a Manchester synagogue. The political and investment moment converges three forces: the Casey Review aftermath + post-Sarah Everard women's safety agenda turning the public realm into contested space; the Manchester Arena Inquiry recommendations becoming law as Martyn's Law (Terrorism Protection of Premises Act 2025, Royal Assent 3 April 2025) landing a counter-terror design duty on a population of premises that has never had one; and the UK's biggest infrastructure pipeline in a generation (£104bn under Ofwat PR24 AMP8, up to £60bn for the Great Grid Upgrade, ~£36bn data-centre development under new CNI designation). Bridges exist — NPSA's *Public Realm Design Guide for Hostile Vehicle Mitigation* (endorsed across RIBA, RTPI, DfT, Mayor of London), the Security Overlay to the RIBA Plan of Work (NPSA + RIBA + Police Crime Prevention Initiatives), Project Servator across UK forces + CNI estates, the LLDC handbook with Arup (first UK planning-authority gender-informed design guidance), ISO 22343:2023 hostile-vehicle-mitigation standards — but these are voluntary, non-statutory, and concentrated in a small number of leading institutions. The strategic implication for boards is that safe-by-design across public realm + critical sites should be treated as one integrated discipline — and a UK Safe by Design Concordat between Home Office + MHCLG + Defra + DESNZ + HSE + SIA represents the structural policy mechanism, requiring no primary legislation, to formalise the integration through 2026-2030.

§ COMMERCIAL IMPLICATIONS

• Martyn's Law operational implementation through 2027 is a structural cost-of-business event for UK premises operators. Standard tier (200-799 capacity) requires reasonably practicable public protection procedures (evacuation, invacuation, lockdown, communication); Enhanced tier (800+ capacity) requires additional physical security + monitoring + staff training + planning documentation. Implementation period at least 24 months from Royal Assent; enforcement begins no earlier than spring 2027. SIA confirmed as regulator; section 12 statutory guidance consultation April 2026; SIA building 100+ dedicated operational posts. Named UK Martyn's Law engagement framework (Security Industry Authority Martyn's Law team, Home Office Protect duty policy, Counter Terrorism Policing UK, ProtectUK national platform, named UK security consultancy cohort: BB7, Buro Happold Security + Resilience, Arup Security Consulting, WSP Security Risk Management, Stantec Security Consulting, AECOM Security Consulting, Atkins Security, Cundall Security Engineering) operates the regulatory framework.
• The £104bn AMP8 ring-fence for security creates structural water sector commercial framework. £747m ring-fenced for physical security of critical sites + emergency water; £455m for cyber-security resilience. Cross-sectoral interaction with PR24 framework (Gap 35 cross-ref). Named UK water sector security framework (water company security teams, NPSA water sector engagement, NCSC water sector engagement, named UK security framework contractors: Mitie Security, G4S UK, Securitas UK, Allied Universal UK, ABM Security, OCS Security) operates the water sector security architecture.
• £60bn Great Grid Upgrade + ASTI + EGL substation programme creates structural critical-site security framework. SSEN Transmission's Skye + Argyll and Kintyre + Orkney projects backed by £800m National Wealth Fund guarantee. Named UK transmission security framework (NPSA transmission sector engagement, NESO security framework, NGT + SSEN Transmission + SP Transmission security teams, named UK transmission security framework contractors) operates the critical-site security architecture. North Hyde fire investigation reframes substation fire prevention + safer design framework.
• Data centres as CNI (September 2024) creates structural DC security commercial framework. First new CNI sector designation in over a decade. Pipeline ~£36bn across nearly 100 developments. Blackstone £10bn Blyth campus largest single project. Five AI Growth Zones January 2025 with £28.2bn planned investment (Gap 18 cross-ref). Named UK DC security framework (NPSA DC sector engagement, hyperscale operator DC security teams, named UK DC security framework contractors) operates the CNI security architecture.
• Joint chartered competence framework across eight professional bodies is the structural workforce integration opportunity. Police Crime Prevention Academy + RIBA + RTPI + RICS + Landscape Institute + CIHT + IOSH + Security Institute mutual CPD recognition + joint chartered route. Named professional body engagement framework operates the workforce framework. Sponsors of UK safe-by-design capital should treat joint chartered competence as a structural workforce variable through 2026-2030.
• Inclusive design integration into NPPF + Operational Requirements + Martyn's Law section 12 statutory guidance defines structural design framework. NPPF Section 8 explicit naming of women and girls; inclusive-design test inside NPSA Operational Requirements for sites with public-facing perimeter; inclusive design integration into Martyn's Law guidance. Named UK inclusive design engagement framework (LLDC + Arup gender-informed design legacy, Inclusive Design Overlay framework, Make Space for Girls, Plan International UK, Living Streets) operates the structural framework.

§ THREE QUESTIONS FOR YOUR NEXT BOARD MEETING

1. 01What is our positioning across Martyn's Law operational implementation through 2027? Standard tier + Enhanced tier compliance is structural cost-of-business event. Engagement during SIA section 12 statutory guidance consultation captures structural influence.
2. 02Have we modelled cross-sectoral safe-by-design integration across our public realm + critical site exposure? Integrated discipline operating across both worlds is the structural commercial opportunity. Joint chartered competence + integrated guidance framework operationalises structural integration.
3. 03What is our positioning for the UK Safe by Design Concordat framework development? Concordat between Home Office + MHCLG + Defra + DESNZ + HSE + SIA operationalises structural integration without primary legislation. Engagement during framework development captures structural influence.

§ PROCUREMENT + TENDER SIGNPOSTS

• SIA Martyn's Law section 12 statutory guidance consultation — April 2026 launch; enforcement no earlier than spring 2027.
• DESNZ Energy Resilience Strategy implementation — post-North Hyde commissioned framework.
• NPSA Public Realm Design Guide updates — continuous framework.
• RIBA Security Overlay + Inclusive Design Overlay — continuous framework adoption.
• Project Servator continued operation — UK forces + CNI estates.
• NPPF Section 8 amendment consultation — MHCLG framework opportunity.
• CDM 2015 ACOP integration framework — HSE engagement opportunity.
• Ofwat PR24 + RIIO-ED3 security extension framework — beyond-perimeter integration.
• Police Crime Prevention Academy Level 5 Diploma — cross-discipline opening.
• Eight professional body joint chartered route — RIBA + RTPI + RICS + Landscape Institute + CIHT + IOSH + Security Institute + Police Crime Prevention Academy coordination.

§ CROSS-SECTOR PRECEDENTS

• The Dutch coordinated public realm + critical site safety precedent. Netherlands' integrated approach combining national crime prevention design framework + critical infrastructure protection + inclusive design framework provides the European structural template. The Dutch lesson: coordinated cross-sectoral safe-by-design framework operates effectively when paired with sustained federal-level coordination + professional integration + customer engagement.
• The Australian CPTED + counter-terror integration precedent. Australia's National Strategy for Disaster Resilience + Australian Government Crime Prevention Framework + Australian Security Intelligence Organisation critical infrastructure protection together compose the structural Australian cross-sectoral framework. The Australian lesson: federal-state coordination unlocks structural integration; UK Safe by Design Concordat operationalises a comparable framework.
• The Singapore Safe City Framework precedent. Singapore's coordinated cross-sectoral safe-by-design framework — integrating Singapore Civil Defence Force + Singapore Police Force + Urban Redevelopment Authority + Building and Construction Authority — provides the global structural template for highly integrated cross-sectoral framework. The Singapore lesson: highly integrated cross-sectoral framework operates effectively at city-state scale; UK framework should reference Singapore as the structural integration aspirational reference.
• The Israeli Safe Cities + Counter-Terror framework precedent. Israel's Shin Bet + Israel Police + Israel Defense Forces + municipal coordinated framework provides the international structural reference for extreme-threat-environment safe-by-design framework. The Israeli lesson: extreme threat environment operationalises structural integration at depth; UK framework operates at materially different threat profile but should reference Israeli framework for structural integration depth.

§ RELATED READING

• Gap 03 — UK DNO Capacity Headroom: electricity distribution security framework.
• Gap 04 — UK Data Centre Build-out: DC CNI security framework.
• Gap 05 — RIIO-ED3 Business Plan Decode: electricity DNO security ring-fence.
• Gap 11 — Eastern Green Link + ASTI: transmission security framework.
• Gap 15 — NESO Connections Reform Year 1: connections security framework.
• Gap 18 — AI Growth Zones: AIGZ security framework.
• Gap 19 — Hyperscale Cooling: DC physical security interaction.
• Gap 20 — London Headroom Cliff: West London distribution + planning interaction.
• Gap 21 — UK DC Planning Reform: planning + security framework.
• Gap 26 — UK Infrastructure Skills Gap: safe-by-design workforce framework.
• Gap 35 — PR24 Final Determinations: AMP8 security ring-fence.
• Gap 38 — Storm Overflows: wastewater asset security.
• Gap 43 — Gas Networks RIIO-GT3/GD3: gas network security framework.
• **Consent to Adapt (Cross-Sector Quarterly Sector Report) — companion volume on climate adaptation community engagement.

§ FOR YOUR SPECIFIC SITUATION

If the implications of UK safe-by-design integration for your business need bespoke application — Martyn's Law operational implementation positioning, cross-sectoral integrated discipline analysis, joint chartered competence framework engagement, Concordat framework development positioning, or inclusive design integration strategy — GridteamAI's Custom Intelligence Reports apply the same editorial standard to a defined client question. Standard £1,500 · Deep £3,500 · Strategic £5,000+, delivered against a defined client brief in writing, no calls.

For ongoing engagement against UK Safe by Design Cross-Sectoral Framework, the Strategic Advisory Retainer runs at £5,000 / £10,000 / £15,000 per month across three tiers, entirely written and asynchronous. Editorial independence is non-negotiable; same standard as the published catalogue, applied to your business in private.

Send a brief to book@gridteamai.com.