Event security question

One of the European events journals is publishing an article on security and asked me the following question:

"What would you say are the security issues you find most commonly overlooked by meeting planners?"

At first I answered as follows:

"If I was to have a heart attack, I would of course prefer to be already in the intensive care unit of a hospital and my probability of survival would be more than 90%. For every minute before I am given first aid by the use of a defibrillator, my chances of survival drop by 10%, after 4 minutes, my chances are 50/50. If I am not in a hospital, I would prefer to be at O'Hare airport in Chicago where there is a defibrillator every 50 meters and all staff know how to use it. The average survival rate is 80%. Where is your defibrillator, and who knows how to use it?"

Then I got a reply from the editor suggesting that probably none of the readers had ever heard about a defibrillator, could I please answer something else.... so I wrote instead:

"The most overlooked security issue is the most fundamental one; they don't have an emergency response plan, they don't check or review the plans of the venue and they don't make sure that the event is covered by the coordinated emergency response plans of the organiser and the venue. And since they have no plan, they have not done even a basic risk analysis; a) what can happen, b) what is the probability, c) what are the consequences, and d) how can we reduce either the probability or the consequences. All meeting planners who organise events without doing a risk analysis and without an emergency response plan are irresponsible amateurs."

Maybe a bit harsh... but I am serious, I spent most of my career in the offshore oil and gas industry where you would not lift a spanner without a risk analysis.

The risk analysis does not only apply to illness, accidents, acts of terrorism and the like. What is the probability of one of your speakers not turning up, or a hotel room not being booked, or a dietary requirement not being communicated, or a microphone not working, or anything else that you don't want to happen, what is the probability, the consequence, and what should you do to mitigate either or both. This is elementary quality assurance, I presume you all do it.