Security for Pilgrimages and Mass Gatherings: Managing Crowd Risk at Scale

On 24 September 2015, a crowd crush in the Mina valley near Mecca during the Hajj pilgrimage killed an estimated 2,000 people – the deadliest incident in Hajj history by a significant margin. The conditions that produced it – converging crowd flows, insufficient crowd density monitoring, and inadequate route separation – were not unusual. They are the structural characteristics of mass gatherings that kill people every decade, across every continent, at events ranging from religious pilgrimages to music festivals to sports stadium exits.

Mass gatherings are not inherently dangerous. They become dangerous when the density and movement of crowds exceed the management capacity of the infrastructure and the security and safety teams responsible for them. Understanding this distinction is fundamental to effective planning.

Defining Mass Gatherings and Their Risks

The World Health Organization defines a mass gathering as an event that concentrates people at a specific location for a defined period, straining the planning and response resources of the community hosting it. Practically, the threshold at which standard event management gives way to mass gathering protocols is typically around 50,000 attendees, though some authorities apply it from 25,000.

The primary risks at mass gatherings are distinct from standard event security concerns:

Crowd crush and trampling. The dominant cause of mass casualty events at gatherings. Crowd crush does not require aggression or panic – it emerges from the physics of crowd movement in confined or channelled spaces at high density. The Seoul Itaewon crush (October 2022) killed 159 people in a narrow alley during Halloween celebrations. No attack, no fire, no structural failure – just crowd density in an inadequately managed space.

Mass medical events. Heat illness, cardiac events, infectious disease transmission, and the cumulative effects of physical exertion and dehydration create medical demand at mass gatherings that vastly exceeds what standard event first aid provision can manage. At major pilgrimages, ambient temperatures above 40 degrees Celsius generate significant heatstroke caseloads. The WHO estimates that during peak Hajj periods, medical teams respond to hundreds of thousands of cases requiring assessment or treatment.

Terrorism. Mass gatherings – particularly those with religious, political, or cultural significance – are established targets for terrorist attacks. The 2017 Manchester Arena bombing (22 killed), the 2016 Nice truck attack (86 killed), and the 2015 Paris attacks (130 killed, partly at the Bataclan concert venue) all targeted mass gathering events. The Islamic State has explicitly designated religious and public gatherings as priority targets in its operational guidance.

Communications breakdown. Mobile networks at mass gatherings are routinely overwhelmed by simultaneous use. Emergency communication systems must be planned independently of standard mobile infrastructure. Security and medical teams at Hajj and similar events operate on dedicated radio networks precisely because mobile connectivity cannot be relied on during peak attendance periods.

Counterfeit credentials and access fraud. High-profile gatherings generate significant demand for counterfeit tickets, passes, and accreditation. Access control failures create both crowd management problems (overcrowding in secured areas) and security vulnerabilities (unvetted individuals in restricted zones).

Close Protection in Mass Gatherings

Standard close protection protocols – vehicle-based movement, formation walking, fixed residential security – are not directly applicable to dense mass gathering environments. The close protection team planning a principal’s attendance at a major pilgrimage or large-scale public event must adapt its approach significantly.

Pre-event advance work. The advance phase is more critical, not less, for mass events. The protection team must understand the venue or route layout in detail before arrival, identify all access and egress points, locate pre-positioned medical teams, establish communication protocols that do not rely on mobile networks, and map the principal’s intended movements against predicted crowd density at each point. For pilgrimages with defined ritual routes (Hajj, Kumbh Mela), the schedule is known in advance – the advance team can walk the route and identify potential crush points, crowd flow restrictions, and extraction options.

Team configuration for crowd environments. In high-density crowd conditions, a large close protection formation is counterproductive. A team of four operators in close formation creates a physical obstacle in a dense crowd – generating the kind of lateral pressure that contributes to crush conditions. For crowd environments, reduce the formation to two or three operators, in casual clothing, maintaining proximity without imposing physical barriers on crowd flow.

Crowd navigation skills. Operators working in dense crowd environments require specific training in crowd navigation – reading crowd flow patterns, identifying and avoiding developing crush conditions, and moving through or around crowd bottlenecks without contributing to dangerous density. This is a distinct skill from standard bodyguard formation work.

Principal extraction from a crush. If a crowd crush begins to develop, the extraction protocol must be immediate and decisive. The principal cannot wait for conditions to stabilise. Operators need to know their extraction routes in advance, maintain the principal’s ability to move, and have a designated assembly point outside the crush zone. Extraction from a developing crush requires controlled, assertive movement – not force that increases crowd agitation.

Communication in high-noise environments. Radio communication is difficult in the ambient noise of a mass gathering. Bone conduction earpieces, pre-agreed visual signals, and designated check-in intervals are practical alternatives to constant radio communication.

Medical Planning at Scale

Medical planning for a principal attending a mass gathering must be independent of the event’s medical provision. The event’s medical teams will be occupied with the mass casualty load from the general crowd. The close protection team cannot rely on event first aid to respond promptly to a principal medical emergency.

Minimum requirements:

• At least one operator on the team with TCCC (Tactical Combat Casualty Care) or equivalent trauma qualification
• A medical kit appropriate to the environment – heat illness treatment in high-temperature environments, AED for cardiac risk, trauma kit for violence or crush scenarios
• Pre-identified hospital with GPS route, pre-visited so the team knows the emergency entrance and can communicate directly with the relevant department
• A vehicle accessible near (not in) the crowd area capable of emergency extraction

For principals with known medical conditions, the attending physician should brief the protection team in advance on specific emergency protocols.

Religious Pilgrimage: Specific Considerations

The major pilgrimage events – Hajj and Umrah in Saudi Arabia, Kumbh Mela in India, Arba’een in Iraq, and Camino pilgrimages in Europe – each have distinct security environments.

Hajj and Umrah. Security is provided by Saudi state forces and is comprehensive. The Saudi Presidency for the Grand Mosque manages crowd flow with real-time monitoring systems that include AI-based density analysis and predictive flow modelling developed after the 2015 disaster. Private security operators accompanying principals are required to register with Saudi authorities and operate within the defined security framework. Firearms are not permitted for private operators. The primary security role for a close protection team in this environment is crowd management, medical support, and logistics – not threat neutralisation.

Kumbh Mela (India). The world’s largest human gathering, with attendance at major Prayagraj events exceeding 100 million over six weeks. Security is managed by Uttar Pradesh Police with central government support. Private close protection is permissible with coordination. The primary crowd crush risk is at the main bathing ghats during peak auspicious dates (Shahi Snans). The protection team must understand the pilgrimage calendar and plan principal movements around peak density periods.

Arba’een (Iraq). The annual pilgrimage to Karbala, which in recent years has attracted an estimated 20 million pilgrims, takes place in southern Iraq – a region with an active security environment including ongoing militia activity and historical terrorist targeting of pilgrimage routes. The security environment here is materially more complex than Hajj or Kumbh Mela. Close protection teams require specialist Iraq experience, armed capability where lawfully permitted, and coordination with Iraqi security forces managing the pilgrimage route.

Coordination with Host Authorities

Private security operators at mass gatherings operate within a security framework set by host authorities – police, military, event management, civil defence. Attempting to operate independently of this framework is both impractical and potentially illegal.

Effective coordination means:

• Registering the security team and providing operator details to the relevant authority before the event
• Attending coordination briefings where available
• Understanding the incident escalation and communication protocols used by host authorities
• Having a direct communication channel to the relevant authority’s command post
• Knowing when to hand off responsibility for an incident to host authorities and when to manage it internally

The relationship between a private close protection team and host security forces is collaborative, not competitive. A team that attempts to override or circumvent host authority security protocols in a mass gathering environment creates problems for themselves and for the principal they are protecting.

Planning for the Unexpected

Mass gathering security planning must explicitly address scenarios that are statistically unlikely but operationally significant: terrorist attack during the event, major crowd crush, severe weather event, fire in the venue, and breakdown of the event cancellation protocol. Each scenario requires a distinct response, and the team must rehearse the decision-making process before arrival.

The most common planning failure is assuming that the general event management plan provides sufficient cover for principal-specific emergencies. It does not. The principal’s team must have their own emergency protocols, tested in advance, that function independently of the general event response.

Summary

Mass gatherings and pilgrimages are among the most demanding environments in security operations. The scale, density, and complexity of crowd dynamics require specialist planning across crowd navigation, medical provision, communications, and coordination with host authorities.

The starting point is the advance phase: a thorough assessment of the specific event environment, the principal’s intended movements, the crowd density profile at key times, and the extraction options available. Teams that arrive without this preparation find themselves making decisions under pressure that should have been resolved in advance.

For related reading, see our articles on VIP protection at conferences and corporate events and event security planning. For corporate travellers who need a working foundation in terrorism awareness – covering the ACT programme, Run-Hide-Tell, suspicious packages, and the hotel incident response framework – see our terrorism awareness guide for corporate travellers.

James Whitfield is a Senior Security Consultant with 20 years of experience in close protection, mass gathering security, and risk management across high-risk environments globally.