Although the threat of terrorist attacks is not a new phenomenon for hotels, limited literature exists on measures that hotels can take to prevent them or limit their damage. The purpose of this paper is to propose a baseline strategy to address this threat. Design/methodology/approach: Using the terrorist attack cycle and the security function models introduced in this paper, nineteen hotel security experts, members of an international working group on terrorism, were tasked to reach consensus on a baseline anti-terrorist strategy for a hotel. To reach this consensus, the study employed the Nominal Group Technique. Findings: The study presents a six-step baseline anti-terrorism strategy and a series of measures and actions under each step. In the centre of this strategy lies the disruption of the terrorist attack cycle. Research limitations/implications: There are limitations inherent to the Nominal Group Technique which may not allow the generalisability of the findings. However, every effort was made to ensure the reliability and validity of the study. Practical implications: The study suggests a shift from physical protection alone to a more intelligence-led approach. Counter-surveillance, terrorist behavioral analysis, higher visibility of security measures, stronger relationships with local community leaders, collaborative relationships with emergency response agencies and strategic use of risk intelligence providers will have to take a higher place in the agendas of hotel security departments. Originality/value: The paper presents for the first time two models that industry practitioners will find useful when designing security policies: the terrorist attack cycle and the security function model. Each component of the proposed strategy provides a