Skip to main content

GM Group Services

Occupational violence and aggression affects the Australian workforce at a scale that should change how every manager plans a shift. Safe Work Australia reports that 8 million Australians, or 41% of the population, have experienced at least one incident of violence since age 15, with work-related incidents making up at least 13% of those cases. The national analysis also records more than 1 million work-related violence incidents across the reference period, including 176,100 workplace incidents in the last 10 years. Safe Work Australia's national analysis makes the practical point clear: this is a mainstream work health and safety hazard, not an unusual event reserved for extreme workplaces.

This guide sets out 7 proven ways to prevent and respond to occupational violence and aggression across events, hospitality, retail and construction. It focuses on controls that hold up after dark, under crowd pressure and when a person has already crossed the line from frustration into threat.

What Occupational Violence and Aggression Really Means in Australian Workplaces

Safe Work Australia's definition is broad enough to match what frontline workers face. Occupational violence and aggression covers any incident where a person is abused, threatened or assaulted at a workplace or while carrying out work, including conduct in person, over the phone or online. The Safe Work Australia prevention guide also supports treating psychological harm as part of the risk, not as a lesser concern.

In a pub, that might mean a patron threatening a bartender after being refused service. At a festival, it could be a person forcing through a barrier, abusing a gate attendant or striking a crowd controller. In retail, an employee may face threats during a refund dispute. On a construction site, the trigger could be a trespasser, an access dispute or conflict between contractors.

The source can be external or internal. External aggression comes from customers, clients, patients, visitors, contractors or members of the public, and it is the central concern in customer-facing operations. Worker-on-worker aggression includes bullying, intimidation, harassment and physical conflict between colleagues. Both require a risk assessment, reporting pathway and management response.

Recognising more than physical assault

Physical conduct includes spitting, biting, kicking and punching, along with the use of weapons. Non-physical conduct can be just as operationally significant. Threats, sexual harassment, intimidation, sustained verbal abuse and aggressive online or telephone contact can create fear, distraction and psychological injury before anyone throws a punch.

Safe Work Australia recorded 53,139 accepted workers' compensation claims for assault by a person or persons and 12,721 accepted claims for exposure to workplace or occupational violence over the last 10 years. The 2024 national report also notes more than 1 million work-related violence incidents within the ABS Personal Safety Survey reference period. Compensation figures therefore represent only the incidents that enter that system.

Practical rule: If a worker changes their behaviour to avoid a person, location or task because they feel threatened, record the concern and assess it. Waiting for physical contact is poor prevention.

Violence belongs in every WHS meeting because it affects staffing, service delivery, supervision, morale and legal exposure. The most useful question isn't whether a venue has had “a serious incident”. Ask where aggression starts, who first sees it, how quickly help arrives and whether the control works when the site is busy.

Legal Duties and State Rules Across NSW, VIC, QLD and the ACT

The legal standard is consistent in its central demand. A business must eliminate or minimise risks to health and safety so far as is reasonably practicable, while officers must exercise due diligence and workers must take reasonable care and follow reasonable instructions. A licensed security provider can support those duties, but it can't take over the host employer's primary responsibility as a PCBU.

The model WHS framework applies across NSW, Queensland and the ACT in aligned form, while Victoria operates under its own occupational health and safety framework. The practical outcome is similar: identify foreseeable aggression, consult workers, implement controls, provide information and training, and review the controls when conditions change.

JurisdictionWHS Act referencePeak regulatorPsychosocial hazard dutyNotifiable incident trigger
NSWWork Health and Safety Act 2011 (NSW)SafeWork NSWManage psychosocial risks as part of the duty to protect health and safetyDeath, serious injury or illness, or dangerous incident
VICOccupational Health and Safety Act 2004 (Vic)WorkSafe VictoriaControl risks to psychological health under the OHS dutyDeath, serious injury, illness or prescribed dangerous occurrence
QLDWork Health and Safety Act 2011 (Qld)WorkSafe QueenslandIdentify and manage psychosocial hazardsDeath, serious injury or illness, or dangerous incident
ACTWork Health and Safety Act 2011 (ACT)WorkSafe ACTManage psychosocial risks within the WHS frameworkDeath, serious injury or illness, or dangerous incident

What managers should verify locally

Notification thresholds, regulator processes and workers' compensation requirements need jurisdiction-specific checking before an incident occurs. A manager should keep the relevant regulator's contact process in the emergency plan, identify who can notify the regulator, and separate that duty from the internal incident report.

State guidance should also sit beside the venue procedure. In NSW, consult SafeWork NSW material on preventing and responding to workplace bullying. In Victoria, use WorkSafe Victoria's prevention guidance alongside the organisation's risk assessment. Queensland and the ACT require the same disciplined approach under their respective legislation.

Don't write one national policy and assume it answers every question. Put the legal baseline in the policy, then add a state appendix covering notification, compensation and regulator contacts for each operating location.

Where the Risk Is Highest Across Events, Hospitality, Retail and Construction

Exposure isn't determined by the industry label alone. It comes from the combination of customer risk, environment, operations and timing. A quiet daytime retailer and a late-night venue may both serve the public, but their controls, staffing and escalation points are different.

Events generally sit at the highest exposure because several pressures arrive together. Late finishes, alcohol or drug use, dense crowds, gate queues, front-of-stage compression and post-event dispersal create multiple opportunities for conflict. Hospitality follows closely, especially where staff manage intoxication, refused entry, gaming-room disputes and closing-time behaviour.

Retail risk often begins with a commercial interaction. Theft intervention, refund disputes, late trading, lone-worker night fill and service station robbery risk place workers in exposed positions. Construction sites face a different pattern. Trespass, disputed access, subcontractor conflict, fatigue and remote plant yards can produce serious risk even when there are no customers.

SectorCustomer riskEnvironmental riskOperational riskTemporal riskOverall exposure
EventsIntoxicated patrons, queue disputes, refusal of entryCrowds, barriers, pinch points and poor dispersal routesScreening, searching, crowd movement and emergency accessLate finishes, arrival surges and post-event dispersalVery high
HospitalityRefused service, intoxication, disputes and harassmentDark venues, confined bars, gaming areas and exitsRSA decisions, cash handling and closing proceduresEvening trade, closing time and peak nightsHigh
RetailRefund conflict, theft intervention and abusive customersIsolated counters, car parks, service stations and limited sightlinesLoss prevention, lone work and cash exposureLate trading, night fill and opening or closingHigh
ConstructionTrespassers, contractors and access disputesLarge sites, remote yards, plant movement and incomplete lightingGate control, permits, deliveries and subcontractor coordinationShift changes, early starts, night works and fatigueMedium to high

Use the matrix to set priorities

Retail and construction frequently share an underreporting problem. Workers may describe aggression as part of the job, a customer-service nuisance or a contractor disagreement rather than an incident requiring action. That language hides patterns and leaves the next shift exposed.

Start with the location where the first contact happens. For a festival, review the gate, front-of-stage pit and transport route. For a pub, review the entry line, bar, smoking area and closing route. For a retailer, review the front counter, self-checkout, car park and stockroom. On construction sites, begin at the gatehouse, site office and delivery interface.

The highest-priority control is usually the one that gives staff time, distance and assistance before the interaction becomes physical.

A Practical Hierarchy of Prevention Controls That Actually Work

The hierarchy works because it starts with changing the hazard, not telling workers to cope better. A pub that removes a problematic side entrance has reduced an opportunity for conflict. A bottle shop that changes late-night cash handling has reduced the reward for a robbery. These controls are stronger than relying on a worker's confidence in a tense moment.

A five-level hierarchy of prevention controls pyramid for addressing occupational violence and aggression in the workplace.

Start at the top

Elimination and substitution remove or replace the exposure. Close a side door that creates an uncontrolled entry point at a music venue. End bottle service at a defined operational point if it repeatedly creates disputes. Replace physical intervention by ordinary staff with a verbal refusal and licensed security escalation process.

Engineering controls create space and delay. Use clear sightlines, correctly placed CCTV, stronger lighting, fixed barriers, controlled egress, duress buttons and secure staff-only areas. At a supermarket front counter, a clear route behind the counter matters more than another poster telling staff to stay calm. At a construction office, controlled access and a visible gatehouse allow staff to challenge entry from a safer position.

Make the lower layers support the upper ones

Administrative controls translate the design into consistent behaviour:

  • Venue rules: Set capacity, entry, service and removal procedures in writing.
  • Communication: Give staff a radio channel, duress code and named escalation point.
  • Records: Log threats, harassment, near misses, property damage and physical incidents.
  • Supervision: Rotate workers out of high-risk zones and check isolated posts.
  • Recovery: Provide first aid, medical assessment, post-incident support and a structured return-to-work discussion.

Body-worn cameras and communication devices can assist with evidence, accountability and rapid support, but they don't replace lighting, distance or trained supervision. Choose two or three controls for the next risk assessment, then test them during a realistic busy period rather than approving them on paper.

Training, De-Escalation and the Role of Licensed Security Staff

De-escalation is a physical skill as much as a verbal one. A worker who stands squarely in front of an agitated person, blocks the only exit and keeps arguing has reduced their own options. The safer sequence is repeatable.

An infographic titled The 5-Step De-Escalation Sequence outlining professional techniques for managing tense situations in the workplace.

Use the five-step sequence

  1. Calm verbal tone: Use a low, steady voice and short phrases. State what you can do, not just what the person can't do.
  2. Open body language: Keep hands visible, shoulders relaxed and movements deliberate.
  3. Safe positioning: Stand at roughly 45 degrees, not directly face-on. Keep a clear exit and avoid trapping the person or yourself.
  4. Disengage: Step back when tension drops, or withdraw immediately when the person advances, threatens or reaches for an object.
  5. Clear handover: Brief backup with the person's behaviour, location, known risks and action already taken.

Training should be treated as a system. Induction sets the baseline, refresher training reinforces it, scenario drills expose weak points and supervisor debriefs turn incidents into corrections. A bar team needs practice refusing service with an RSA-trained process, while a festival gate team needs practice managing queue compression and calling a supervisor without abandoning the entry point.

RSA requirements differ across NSW, Victoria, Queensland and WA, so managers should confirm the applicable state course, renewal and venue obligations. RSA competence helps staff identify intoxication and make consistent service decisions, but it doesn't authorise ordinary staff to use force.

Licensed security staff add a distinct control through lawful directions, trained intervention, incident witness statements and liaison with police. Their value is greatest when the handover is clear and the officer knows the site plan, duress process and client expectations.

For teams managing remote customer contact, these de escalation strategies for SaaS teams provide useful communication principles that can be adapted to phone and online interactions, although physical workplaces still require positioning, withdrawal and emergency controls.

Incident Response Procedures, Reporting and Recovery

When aggression starts, the first task is not to win the argument. It is to create distance, signal for help and prevent the situation spreading to other workers or customers.

Use this response sequence:

  1. Recognise and signal: Identify the behaviour and activate the agreed radio, duress or verbal alert.
  2. Move to safe cover: Take staff and vulnerable people away from the immediate area.
  3. Call for assistance: State the location, behaviour and whether anyone is injured.
  4. De-escalate or withdraw: Frontline staff should use trained communication only while a safe exit remains available.
  5. Escalate: Licensed security or police intervene according to the risk and lawful authority.
  6. Protect evidence: Isolate witnesses, preserve CCTV and retain relevant radio or access records.
  7. Treat injuries: Provide first aid and arrange medical assessment, including for psychological injury.
  8. Record and review: Complete the internal report, debrief staff and update the risk assessment.
  9. Manage compensation: Give the worker information and support to lodge the applicable workers' compensation notification.

Set internal timeframes that encourage prompt action, such as an initial report within 24 hours and a formal report within 48 hours. Those are internal controls, not substitutes for regulator or insurer requirements. Notifiable incidents involving death, serious injury or illness, or dangerous incidents require the relevant regulator pathway, and each jurisdiction's workers' compensation process should be confirmed before an event.

FieldWhat to Capture
Date and timeWhen the incident began and ended
LocationExact area, entry point, room, counter or site zone
Persons involvedNames, roles and contact details where appropriate
WitnessesNames, positions and separate observations
BehaviourThreats, abuse, intimidation, assault, property damage or weapon involvement
DescriptionA factual sequence, using the person's words where necessary
InjuriesPhysical symptoms, psychological effects, first aid and medical referral
EvidenceCCTV location, body-worn camera reference, radio traffic and photographs
Police referenceEvent number or attending officer details, if police attended
Actions takenEvacuation, removal, service refusal, isolation, follow-up and control changes

Recovery must continue after the person leaves. Offer EAP access, peer check-ins and a return-to-work plan. A supervisor should ask what the worker needs to feel safe on the next shift, then change the system where the answer identifies a control failure.

Partnering With a Security Provider and Your Next Steps

External security works when it connects to the host's existing controls. It shouldn't be a uniformed layer added at the gate while nobody has decided who owns the radio call, who preserves CCTV or who speaks to police.

At an event, a licensed provider can combine front-of-house posts with roving patrols, queue observation and controlled dispersal. In hospitality, RSA-trained crowd controllers can support entry decisions, service refusals and closing procedures. Retail may need duress response and loss-prevention officers, while construction sites often need traffic management, gate control and access verification.

Specify the handover before signing

Ask a provider to show how its service will connect to the risk assessment and incident plan. Useful deliverables include:

  • Site security plan: Post locations, patrol routes, access points and emergency exits.
  • Escalation matrix: Clear thresholds for supervisor, security and police involvement.
  • Incident templates: SafeWork-aligned fields for witnesses, evidence, injuries and actions.
  • Debrief notes: A record of what happened, what worked and what must change.
  • Review process: Scheduled risk reviews, training checks and performance discussions.

GM GROUP Services operates across NSW, Victoria, Queensland and the ACT, with services including static guards, crowd control, vehicle patrols, gatehouse control, loss prevention, emergency response and risk assessments. The relevant selection test is fit for purpose: confirm licensing, training, insurance, supervision, reporting quality and the provider's understanding of your site.

A five-step guide for organizations partnering with professional security providers to ensure a seamless safety handover.

Print this seven-control action plan

  1. Identify exposure: Walk the venue or site across entry, service, exit and isolated areas.
  2. Remove opportunities: Close unsafe access points and change tasks that expose workers unnecessarily.
  3. Improve the environment: Fix lighting, sightlines, barriers, duress access and controlled egress.
  4. Set procedures: Document refusal, reporting, radio, witness and evidence processes.
  5. Train and drill: Practise calm communication, safe positioning, withdrawal and handover.
  6. Deploy licensed support: Match security posts and patrols to the actual risk, not habit.
  7. Recover and review: Support affected workers, complete reports and revise controls after incidents.

Complete the audit, mark the gaps and request a joint walk-through within 30 days. A practical service scope should name the posts, hours, equipment, escalation triggers, reporting outputs and review dates before the first shift begins.


GM GROUP Services provides licensed security for events, venues, hospitality, retail and construction sites, with custom guard deployment, crowd control, patrols, gatehouse support, emergency response and risk assessments across NSW, Victoria, Queensland and the ACT. Visit GM GROUP Services to discuss your occupational violence and aggression controls, request a site review and build a security plan that works under real operating pressure.


Discover more from GM Group Services

Subscribe to get the latest posts sent to your email.

Discover more from GM Group Services

Subscribe now to keep reading and get access to the full archive.

Continue reading