For estimating purposes, always use your most common “tough day” – your highest patron quantity, shortest ingress requirements, and most secure threat profile. While you don’t need to imagine the absolute worst case, your security should prepare for scenarios you can reasonably expect, given the compromises you would expect to make in that circumstance (such as extended ingress tolerances due to a known peak traffic scenario or elevated security profile).
United States
