Section one
A risk assessment is only as good as its occupancy figure
Quantified Tree Risk Assessment works by combining three things: how likely a part of a tree is to fail, what it would hit, and how often somebody is there to be hit. The first two are matters for an arboriculturist standing under the tree. The third is a question about people, and on an estate with beach, parkland, woodland, a hall, a village, farmland and an events programme, the honest answer at the outset was that nobody knew.
The usual response is to pick a figure. Apply a single occupancy assumption across the whole property and one of two things follows. Set it high and the estate inspects remote woodland at the same frequency as the main approach to the Hall, which spends money where there is no exposure and eventually erodes confidence in the whole programme. Set it low and the busiest places are inspected as though they were quiet, which is the failure mode that matters.
Splitting the estate into zones by eye is better, and it is what most large properties do. It is also difficult to defend: the boundaries are wherever somebody drew them, they cannot be recalculated when the events programme changes, and if the zoning is ever tested the reasoning exists only in the assessor's head.
What was wanted instead was a continuous estimate of relative use at every point on the estate, built from data the Estate already held, reproducible by a third party, and capable of being re-run when something changed.
A note on the numbers. Holkham Estate's visitor figures are commercially confidential and are not published here. Everything on this page that governs how the model behaves, the formulae, the decay constant, the friction values, the calibration logic, is given in full; the visitor counts that those formulae are applied to are not. This page has been prepared with, and is published with, the Estate's agreement.
What this model is not. It is not a footfall count and it does not estimate how many people stand at any particular spot. It produces a relative index of use across the estate: values are proportional to intensity of visiting and are meaningful in comparison with one another, not as headcounts. It does not assess any tree, and it does not categorise trees. It sets the occupancy input that a QTRA assessment then uses, and nothing beyond that. Note also the direction of the QTRA scales: in all three inputs a lower number is the more serious one.
Section two
The model in five stages
The sequence below is the non-technical account that accompanies the policy itself. Each stage is then opened up in the sections that follow, with the arithmetic shown.
What is known about visitors
Car park ticket sales over a five year period, converted to visitor numbers using the Estate's own vehicle occupancy figure. Every path, track, field and woodland block mapped and scored for how hard it is to walk through, with slope taken from a LiDAR survey.
How far everyday visitors travel
From each car park, the easiest walking route to every point on the estate is calculated. The harder and longer the walk, the fewer visitors are estimated to get there. The four car parks are modelled separately and combined, so places reachable from several show higher pressure.
What draws people off the obvious routes
The beach, the Hall, the lake, the monument, the walled garden and others act as magnets. Each is rated for how strongly it pulls and how far its influence carries, and the result is applied on top of the everyday pressure.
Adding event visitors
Races and organised walks follow known routes, so their numbers are mapped straight onto those routes. Temporary event car parks are handled differently again, by modelling the walking corridor between the car park and the event field.
The usage overview
Everything is combined into a single surface, classified into six inspection zones, and applied to the areas that trees can actually affect, so the number of trees in each zone can be counted and inspection planned against it.
Section three
Cost surface and terrain
The model's foundation is the observation that people are governed by effort rather than by distance. A surfaced drive invites a long walk; two hundred metres of bramble does not. The estate is therefore represented as a friction surface: a grid at five metre resolution in which every cell carries a value for how costly it is to cross.
Those values were assigned by hand across the whole estate, informed by walk-over reassessments carried out in autumn and winter 2025 in which the physical signatures of use, undergrowth density, path wear and compaction, clearance around gateways, were recorded directly, and the mapped path network was supplemented with major desire lines plotted by GPS. Open water and dense woodland carry obstacle values; unclassified open ground carries a background cost several times that of a made path.
Show the working: how a path's cost is set, and how slope modifies it
Within the path network, cost is set by surface type and then adjusted for width, on the basis that a narrow path is slower and less inviting than a broad one of the same construction:
Slope is then applied as a multiplier, derived from a LiDAR digital terrain model:
The completed polygon layer is rasterised to the same five metre grid used throughout, on the British National Grid.
Show the working: accumulated cost, and what a cost unit means
From each car park's pedestrian exit, accumulated walking cost to every cell is calculated by a least-cost path algorithm, which finds the cheapest route through the friction surface rather than measuring straight-line distance. The output is a surface of accumulated cost, not metres, and the relationship between the two depends on what has been crossed to get there.
Cost accumulates per cell traversed, not per metre. A diagonal step carries the same friction scaled by the square root of two, and covers the square root of two times the ground distance, so the cost per metre is unchanged either way. For a walk of length L:
That relationship was checked against the model rather than assumed: querying the accumulated cost surface at points about 2,500 m by path from a car park returned values consistent with the prediction, carrying a representational overhead of eight to ten per cent because a raster least-cost path is restricted to eight directions of travel. That sits comfortably inside the calibration assumption and does not change the constant derived from it.
What the friction values do
The panel below applies the two formulae above to a single stretch of ground. It shows how far a visitor gets for a given amount of walking effort, and, using the decay function set out in the next section, what proportion of a car park's visitors are modelled as getting there.
Why the width term matters more than it looks. Narrowing a path does not halve the number of people who use it, but it does raise its friction, and friction compounds along a route. A pinch point early in a walk suppresses everything beyond it, which is the mechanism by which one narrow crossing can leave a large area modelled as lightly used. Where the model disagrees with what the Estate observes on the ground, a pinch point is usually the first place to look.
Section four
The decay function, and the one number everything rests on
With accumulated cost calculated, the model applies a gravity decay framework: the proportion of a car park's visitors reaching any point falls off exponentially with the walking effort required to get there. This is the standard form used in recreational visit modelling, and it matches the consistent finding that visit frequency declines approximately exponentially with distance from an access point.
Everything else in the model is measurement or arithmetic. Lambda is a judgement, and it is the number most worth interrogating, so it is set explicitly rather than tuned until the map looked right. It is calibrated so that roughly one per cent of a car park's visitors are modelled as reaching the far end of a typical long walk, taken as 2,500 m along paths.
What different values of lambda would mean
Move the control below to see how the choice of decay constant changes the proportion of visitors modelled as reaching a given distance. The value adopted for the Estate is marked.
Show the working: why this is a relative index and not a headcount
Each car park's decay surface is multiplied by that car park's annual visitor total and the four are summed. It is tempting to read the resulting cell values as numbers of people, and that would be wrong. A single visitor's propensity is spread across many cells along their possible routes, so the totals are not conserved: the surface is proportional to intensity of use, but it does not add up to the number of visitors who came.
That is sufficient for the purpose. Zoning is a comparative exercise, and what the policy needs is a reliable ordering of places from busiest to quietest, together with a defensible basis for drawing thresholds between them. Where the surface is used to set those thresholds, the calibration is deliberately cautious, so the model is more likely to place an area in a busier zone than a quieter one.
Section five
What draws people off the direct route
Walking cost alone assumes people wander outwards from a car park with no particular destination in mind. In practice they head for things: the beach, the Hall, the lake, the monument, the walled garden, the cafe. Twenty two such features were identified across the estate, each given an interest rating on a scale of one to twenty and an effect radius describing how far its influence carries.
These ratings are professional judgement informed by site knowledge, not measurements, and they are the second place in the model, after lambda, where a reviewer should focus attention. They are published in the policy appendix so that the Estate's own staff can disagree with them.
Show the working: the attractor surface
Each attractor is given its own decay constant, set so that its influence has fallen to five per cent of peak at the stated effect radius:
Its influence surface is then generated with the same least-cost and decay process used for the car parks, so pull travels along the path network rather than radiating through hedges and water:
The individual surfaces are summed and a floor of 1.0 applied, so that cells outside every attractor's reach are left unchanged rather than suppressed. Because the surfaces are summed rather than capped, influence is additive where zones overlap, and a place served by several features can exceed the single-attractor maximum. That is intended: the area between the Hall, the cafe and the lake really is busier than any one of them would make it.
How an attractor behaves
Move the interest rating and the effect radius to see the multiplier a single feature applies at increasing walking distance from it. Adding a second feature nearby shows the additive behaviour, and the floor of 1.0 that keeps the rest of the estate neutral.
Section six
Events, and why they needed a different model
The gravity decay framework describes people who arrived with a vague intention to walk somewhere pleasant. It does not describe somebody who has paid to run a ten kilometre race on a set course, or who has parked in a field and is walking to a marquee. Those people have a destination they will reach with near-certainty, and modelling them probabilistically would put most of them in the wrong place.
Fixed-route events
Races, organised walks and similar structured activities follow known courses, so their anticipated annual numbers are assigned directly to the route. The lines are cleaned, buffered to a corridor width appropriate to the event type, and burnt onto the same five metre grid, with overlapping routes accumulating rather than overwriting one another. These are added after the attractor weighting, so a race does not get amplified for passing a viewpoint.
Temporary event car parks: the corridor model
Twelve events each year bring visitors to temporary car parks in fields, from which they walk to an event area. Neither end can be modelled by decay from a car park: essentially everybody who parks will reach the event, and the pressure between the two is concentrated along whichever route is easiest, not spread evenly in all directions.
The approach taken is a bidirectional cost deviation model, which is structurally the same device used for functional corridors in landscape connectivity analysis, where the question is how far an animal moving between two habitat patches is likely to stray from the optimal route. Two accumulated cost surfaces are calculated, one from the car park and one from the event area. Added together, they give, for every cell on the estate, the total cost of a journey between the two that passes through that cell. Subtract the cost of the best possible route and what remains is the extra effort of detouring through that cell. Along the ideal route the extra effort is zero; a hundred metres off to one side it is small; over the far side of a wood it is large.
Darker means more of the event's visitors are modelled as passing through. Cells are five metres, as in the model, so the view covers about 480 m by 280 m.
This panel runs the real calculation on a small demonstration grid: two least-cost surfaces, subtract the optimal route cost, decay the remainder. Because it is built from walking cost rather than geometry, the corridor bends around obstacles and pinches where the ground funnels people together, which is exactly where trees along the route matter most.
Moving the dispersal control also shows how finely graded these choices are. There is no value that is obviously right and none that is obviously wrong; each one is a defensible statement about how tightly people keep to a route, and the shape of the answer changes steadily rather than snapping between options. The test that matters is not which number looks best on the map, but whether the result matches what estate staff see on the ground on the day of an event.
The practical benefit of doing it this way is that an event is now an input rather than an assumption. A new event can be added, moved or removed and the model re-run, and the output shows which parts of the estate change zone as a result, and how many trees fall into an area needing earlier inspection. That converts a difficult conversation about whether an event is acceptable into an arithmetic one about what it would cost to make it so.
Section seven
From a pressure surface to an inspection programme
The combined surface is classified into six zones corresponding to the pedestrian occupancy ranges used in the QTRA framework. Those ranges are part of the licensed QTRA system and are not reproduced here; what matters for this account is that the thresholds are external to the model, published, and peer reviewed, so the classification step introduces no further judgement of ours. This is the join between the modelling and the policy: everything before it is spatial analysis, and everything after it is tree management.
The scale runs from TR1, the busiest places, to TR6, the most remote. A tree in a higher-use zone is inspected more often and managed more conservatively, because the consequence of a failure is more likely to involve somebody being present.
Six ranges, three management bands
Six inspection frequencies would be unworkable for the people who have to run the programme. The six occupancy ranges are therefore grouped into three management bands, High, Medium and Low use, and it is at that level that the Tree Risk Management Policy sets inspection frequency and risk tolerance. The six-way classification is retained underneath, because it is what allows a band boundary to be justified and what makes the model worth re-running when something changes; the three-way banding is what a ranger, a contractor or an events manager actually works to.
This is the point at which the model stops being a piece of spatial analysis and becomes an operational document. The policy sets out, for each band, how often trees are inspected, what level of risk is tolerated before work is specified, and how that interacts with the rest of the framework: the weather thresholds that suspend activity, the minimal intervention principle applied to veteran trees, and the height-derived safety buffer used around event areas. The pressure surface does not make any of those decisions. It tells the policy where it is standing.
Applying zones to the areas trees can actually reach
A zone boundary drawn across open parkland is of no operational use on its own. The final step intersects the zoned surface with the areas within which a tree could strike somebody, derived by offsetting mapped canopy extents by an allowance based on LiDAR vegetation heights. Each resulting fragment carries its zone, which means the Estate can count the trees or the woodland area falling into each inspection band and cost a survey programme directly from it.
Show the working: the classification and intersection steps
Classification is a single nested conditional evaluated across the raster, assigning each cell to one of the six zones by comparing its pressure value against the QTRA occupancy thresholds, with cells below the lowest threshold left unzoned. Inspection area polygons are then intersected with the zone boundaries, with a geometry repair step applied first, because invalid geometry at zone edges will otherwise stall the intersection.
Smoothing was applied to the zone polygons in an earlier version and has been removed. It made the boundaries look better and reduced the fidelity of small inaccessible areas, which is the wrong trade in a document that has to be defensible rather than attractive.
What it delivers
The same rule everywhere
Every part of the estate is zoned by the same process from the same data, so two similar places get the same answer regardless of who is assessing them or when.
A stated basis for every boundary
If a zone boundary is questioned, the answer is a chain of inputs and formulae rather than a recollection. That matters most in the situation nobody wants, after an incident.
Scenarios instead of arguments
Adding an event, opening a new path or closing a car park can be modelled before it happens, and the change in survey liability quantified in advance.
Section eight
Limits and caveats
Reproduced from the policy appendix, because a model of this kind is only safe to use if the people using it know where it stops.
- Only car park arrivals are modelled at baseline
Visitors arriving on foot from the surrounding villages, by bicycle or by public transport are not captured in the base surface.
- Event numbers are anticipated, not counted
They are drawn from historic averages and need updating annually as the events programme changes.
- No seasonal or weather variation
The friction surface reflects a judgement about relative traversability in general. It does not change between a dry August afternoon and a wet February morning, and neither does the output.
- The attractor ratings are indicative
Interest ratings and effect radii come from site knowledge and professional assessment rather than from measurement of where people actually went.
- The terrain model is a snapshot
Slope is derived from LiDAR captured at a point in time and takes no account of vegetation change or ground conditions since.
- Lambda is a local calibration, and is presented as one
The exponential decay framework is well established in the literature; the specific value adopted here is a site calibration rather than a published finding. That is normal practice in applied spatial modelling, and it is said plainly rather than implied. It should be revisited if systematic visitor tracking data ever becomes available.
- It should be re-run, not archived
The model needs recalibration if visitor numbers change materially, if a major new attraction opens, or if the path network is substantially altered.
Section nine
Client, credit and version
The model was developed for Holkham Estate as part of the Tree Risk Management Policy, which this practice originally authored and revised in 2026. It is published here with the Estate's agreement, with visitor figures withheld at their request.
The wider policy work also included a LiDAR-derived, height-proportional safety buffer for event areas, replacing a blanket standoff distance with one that scales to the actual trees present. The same modelling approach is transferable to any property where public access varies significantly across the site: estates, parks, campuses, visitor attractions and long linear routes.
- Quantified Tree Risk Assessment (QTRA) practice note and target ranges, QTRA Ltd.
- Environment Agency LiDAR composite digital terrain model, Open Government Licence.
- Ordnance Survey and OpenStreetMap path network data, supplemented by on-site GPS survey.
Version 1.0 · September 2026 · first publication