Major events are usually judged by what the public can see: secure venues, efficient transport, orderly crowds, reliable services, and an atmosphere that allows visitors to focus on the event itself. Behind that visible success, however, lies a less visible requirement. Security, transport, emergency medicine, telecommunications, utilities, venue operations and public information must be able to understand the same developing situation and act before a local disruption becomes a system-wide problem.
That challenge is particularly relevant as Morocco prepares for an extraordinary period of international visibility on the road to 2030. The operational question is larger than whether individual venues can be secured. It is whether the wider ecosystem around a major event can absorb disruption while preserving safe movement, essential services, and public confidence.
Traditional event security tends to organize risk by function. Police manage security. Transport operators manage mobility. Medical services manage casualties. Venue teams manage spectators. Utilities maintain power and water. Cyber teams protect networks. Communications teams inform the public. Each function may be highly capable, yet the event can still become vulnerable in the space between them.
Consider a disruption at a transport hub shortly before a major match. The initial event may be small, but its consequences can move rapidly: passenger flows change, road congestion increases, crowds arrive through different access points, emergency routes become busier, mobile networks experience pressure, social media fills with incomplete information and venue managers must decide whether to alter entry procedures. No single control room owns the entire consequence chain.
An interconnected operating environment
This is why mega-event preparation needs what can be called an Event Resilience Architecture. It is not another command center and not a replacement for existing agencies. It is a framework for ensuring that separate operational centers can create a shared picture, agree on priorities, identify who owns each decision, and coordinate action when conditions change quickly.
A practical sequence is: Detection → Shared Operational Picture → Cross-Agency Prioritisation → Decision Ownership → Coordinated Action → Recovery. The value of this model is that it treats the event as an interconnected operating environment rather than a collection of separate security plans.
Detection is already becoming faster. Cameras, sensors, access-control systems, cyber monitoring, transport platforms, and field teams can generate enormous quantities of information. The next challenge is not simply obtaining more data. It is ensuring that the right information reaches the right operational functions with enough context to support a decision.
That leads to the shared operational picture. The phrase is often used loosely, as if putting several data feeds on one screen automatically creates common understanding. It does not. A genuine shared picture must answer operational questions: What has been confirmed? What remains uncertain? Which services are affected? What may be affected next? Which agency is acting? What decision is waiting for authority?
The distinction matters because different control rooms naturally see different versions of the same event. A transport operator may see a capacity problem. Police may see a crowd-management issue. A venue may see an access problem. Emergency services may see an obstacle to response routes. None of these interpretations is necessarily wrong. Resilience depends on combining them before separate local decisions create conflicting system-wide consequences.
Decision ownership across interdependent agencies
Cross-agency prioritization is therefore the next requirement. Every organization has legitimate priorities during a complex event, but not every priority can be maximized simultaneously. Keeping one road open may support emergency access while reducing spectator transport capacity. Closing an entrance may improve security while increasing crowd density elsewhere. The control-room architecture must make such trade-offs visible early enough for leaders to manage them.
Decision ownership is equally important. Coordination can fail when everybody receives the information but nobody is clearly responsible for the next action. For each major scenario, plans should identify not only who must be informed but who owns the decision, who can act if that authority is unavailable and when responsibility moves from one organisation to another.
Artificial intelligence can strengthen this architecture by correlating signals, identifying anomalies, forecasting crowd movement, and summarizing fast-changing information. But AI should reduce cognitive burden, not obscure accountability. A prediction is not a decision, and a high-confidence recommendation does not remove the need to understand operational consequences. Human authority remains particularly important when safety, public movement and multiple agencies intersect.
The strongest preparation will therefore test relationships between systems, not only systems themselves. An exercise should not stop after confirming that a cyber backup works or that an evacuation route is available. It should ask what happens if a transport disruption coincides with degraded communications, conflicting reports circulate online and a venue is approaching peak arrival time. Can the operational picture remain coherent? Can priorities be agreed quickly? Does every critical decision have a clear owner?
Recovery should also be part of the exercise. Major-event resilience is not only the ability to respond dramatically to a crisis. Often the harder task is restoring normal flows without creating a second disruption. When should a closed route reopen? When can temporary crowd controls be removed? Who confirms that digital systems are trustworthy again? How is the public told that normal operations have resumed?
Beyond event security
This is where the meaning of success changes. The best outcome is not necessarily that nothing unexpected happens. At events of enormous scale, disruptions are inevitable. Operational success is the ability to prevent a local problem from cascading across transport, venues, public safety, communications, and essential services.
Morocco’s preparations for 2030 create an opportunity to think beyond event security toward event resilience. Investments in venues and infrastructure will be visible long after the final match, but the less visible legacy can be equally valuable: stronger coordination between control rooms, clearer decision authority, better information-sharing practices and institutions trained to manage complex events together.
Those capabilities are not useful only for sport. They can strengthen the response to natural hazards, major public gatherings, infrastructure failures, and other national emergencies. A well-designed event can therefore function as a laboratory for institutional resilience.
The defining control room of a future mega-event may not be the room with the largest wall of screens. It will be the network of rooms that can see different parts of the problem yet still reach a common understanding quickly enough to act as one system. Security protects the event from threats. Resilience protects the event from the consequences of surprise.
