A review should be conducted yearly and every time there is a terrorist attack to assess how well the legislation has worked in protecting against, preparing for and dealing with the attack. Research should also be undertaken on the threat of terrorism to small and micro-sized businesses. Should that research suggest there is sufficient benefit of extending the legislation to standard tier premises, then provision should be made to introduce the duties to those premises at the earliest opportunity.