
Two decades since 7/7: What’s changed, and why it matters
On 7 July 2005, four suicide bombers carried out a coordinated attack on London’s transport network — killing 52 people and injuring over 700 others. It was the UK’s deadliest terrorist attack since the Lockerbie bombing and marked a new era of threat.
The pain and memory remain for so many, especially the families whose lives were irreversibly changed. The trauma of that day still resonates. But so too does the extraordinary bravery shown – not just by the emergency responders who rushed into danger, but by everyday people who stepped up in unimaginable moments. Strangers became carers. Chaos became coordinated. And a city found strength in its darkest hour.
A recent BBC retrospective casts a stark light on that day and the intelligence failures that preceded it. MI5 had, in fact, tracked the ringleader Mohammad Sidique Khan in both 2001 and 2004 — attending an al-Qaeda-linked training camp and associating with known suspects — yet he was never prioritised for investigation.
The tragedy revealed a fractured counter-terrorism approach, still shaped by the IRA era: one that was heavily centralised, slow to triage risk, and siloed in its information sharing. Senior leaders, from Sir Tony Blair to former MI5 heads, have since acknowledged it as a failure — albeit one that catalysed enormous change.
7/7 didn’t just trigger grief — it triggered transformation.
Key changes in the years that followed included:
The effectiveness of these changes was demonstrated in Operation Overt (2006), the foiled liquid bomb plot, where real-time intelligence sharing and fast collaboration led to the arrest of suspects before the bombs were even completed. The new model worked.
The emergence of the Islamic State changed everything. Inspired lone actors began to carry out so-called DIY attacks, often without any direct link to terror networks. In some cases, their motivations were ideological. In others, they were not, just violent individuals radicalised online.
This was compounded by the rise of far-right and revenge-inspired extremism, culminating in attacks like the murder of MP Jo Cox and violent plots by banned groups such as National Action. These individuals were often younger, digitally native, and acting alone.
The tragic 2017 Manchester Arena bombing exposed further vulnerabilities, this time not in intelligence, but in venue preparedness and physical security. This, sadly but essentially, galvanised efforts behind Martyn’s Law, new legislation that will mandate all public venues to have a basic counter-terrorism plan.
The lesson over 20 years has been clear: resilience isn’t just a government responsibility. It’s everyone’s.
While the UK’s counter-terror network has matured into a globally respected machine — with 43 late-stage plots disrupted since 2017 — the scale and variety of threats now require greater responsibility from the private sector, particularly those managing public spaces, venues, and critical infrastructure.
Over time, this mindset shift — from centralised control to distributed responsibility — has filtered into every part of the built environment. Today, commercial landlords, estate managers, and building operators aren’t just participants in security; they’re strategic partners in resilience. The modern Commercial Real Estate (CRE) sector is stepping up with technology, intelligence, and integrated systems that rival public infrastructure. In many cases, they’re leading the way.
One of the most advanced examples of this collaboration is the City Security Council (CSC) — bringing together major security providers and the City of London Police to coordinate intelligence and response across the Square Mile.
CityINTEL, the CSC’s threat-sharing and comms platform, is powered by our system. Whether it’s a protest, a suspicious individual, or a rising threat level, the system ensures no one is in the dark. It’s a collaboration and a partnership that we are immensely proud of.
In the past, CRE operators were seen as passive stakeholders, reliant on public policy or contracted security to manage risk. That’s no longer the case. The same principles that reshaped MI5 and the counter-terror network, integrated systems, faster intelligence, decentralised response, are now core to how leading CRE teams protect their spaces.
From retail hubs to skyscrapers, commercial teams are building resilience into their operations. Not just with more guards or more cameras, but with smarter control rooms, connected platforms, and risk-led governance. They’re digitising emergency plans. Streamlining communications. And using data to anticipate and prevent disruption before it spreads.
The smartest CRE teams are building their security stacks like national operations centres, lean, digital, and intelligent.
Here’s what that looks like:
Twenty years on from 7/7, the UK has transformed its approach to security, evolving from reactive, siloed systems to a far more agile and intelligence-led model. This same evolution is now playing out across Commercial Real Estate. The most forward-thinking CRE organisations have learned the key lesson: that real resilience is proactive, not reactive. It’s built on data, collaboration, and a clear-eyed view of risk.
Modern threats, from lone actors to climate disruption to public disorder, demand modern solutions. Simply adding more guards or equipment isn’t enough. CRE teams must continue investing in smarter systems, integrated platforms, and real-time decision-making capabilities. That means embedding resilience into every layer of operations: from control rooms to cleaning staff, from boardrooms to building entrances.
The challenge now isn’t whether we’ve learned from 7/7, we have. The challenge is keeping pace with what comes next. And in the complex landscape of 2025 and beyond, it’s those who harness intelligence, innovation, and collaboration who will lead the way in keeping our cities, people, and public spaces safer.