Kenya security dashboard
A functioning state with real capability, where risk is concentrated geographically and episodically: Al-Shabaab attacks and IED use in the north-east and coastal counties, banditry in the north-west, and protest policing in Nairobi and other cities that can turn lethal within a day of a political trigger.
Every judgement on these dashboards is an analyst reading of public reporting. Direction of travel is a judgement, not a measurement. Nothing here is live monitoring: the picture is refreshed when the desk reviews the country, and the review date is shown.
Assessed risks by severity
Analyst ratings of likelihood and impact on a five-by-five scale, scored 1–25. These are judgements from public reporting, not measured values.
- KE-A3 Road traffic collision during staff movementSEVERE · 16 of 25
Likelihood Likely · Impact Major
- KE-A1 Roadside device or ambush affecting movement in Garissa, Wajir, Mandera or the Lamu hinterlandSEVERE · 15 of 25
Likelihood Possible · Impact Severe
- KE-A4 Violent urban crime, including carjacking or express abductionSUBSTANTIAL · 12 of 25
Likelihood Possible · Impact Major
- KE-A2 Attack on a soft target used by staff in Nairobi or MombasaSUBSTANTIAL · 10 of 25
Likelihood Unlikely · Impact Severe
- KE-A5 Staff caught in protest or public-order responseMODERATE · 9 of 25
Likelihood Possible · Impact Moderate
Risk matrix
Where each rated risk sits once likelihood and impact are combined.
| Likelihood / Impact | Insignificant | Minor | Moderate | Major | Severe |
|---|---|---|---|---|---|
| Almost certain | — | — | — | — | — |
| Likely | — | — | — | KE-A3 | — |
| Possible | — | — | KE-A5 | KE-A4 | KE-A1 |
| Unlikely | — | — | — | — | KE-A2 |
| Rare | — | — | — | — | — |
Residual position: Medium nationally, high in the north-east and coastal hinterland. Road traffic risk carries the largest expected loss and should be managed with the same seriousness as armed threat.
What is driving the picture
Cross-border threat from Somalia
Al-Shabaab retains the ability to conduct attacks and emplace devices in Garissa, Wajir, Mandera and Lamu, and periodically signals intent against the capital.
Protest and policing cycles
Tax, cost-of-living and governance grievance produces organised protest, and the policing response has repeatedly caused deaths and city-centre disorder.
Armed banditry in the north-west
Cattle raiding and armed criminality in Turkana, West Pokot, Samburu and Baringo create sustained rural insecurity with periodic security operations.
Regional hub status
Nairobi hosts the regional presence for most organisations, so Kenyan disruption has effects far beyond Kenya.
Indicator watchlist
What an analyst looks for in open reporting, and why a change in it matters for people working in the country.
| Indicator | Why it matters |
|---|---|
| IED and ambush incidents in Garissa, Wajir, Mandera and Lamu counties. | Governs road movement in the north-east, and often triggers curfew and escort requirements. |
| Protest calls, opposition mobilisation and police statements ahead of announced demonstration dates. | Nairobi disruption is usually predictable a few days out, which makes it manageable if watched. |
| Security operations and curfews in the north-west banditry counties. | Indicates both the level of rural violence and the movement restrictions that follow. |
| Official threat warnings and embassy advisories for Nairobi and the coast. | A reasonable proxy for elevated attack concern against hospitality and public venues. |
Actors that matter
- Al-Shabaab
External armed group with demonstrated intent and reach into north-eastern and coastal counties.
- Kenyan police and paramilitary units
Capable state forces, with a public record of lethal force in protest policing.
- Kenya Defence Forces
Military conducting border and regional operations.
- Armed pastoralist and bandit groups
Rural armed actors driving north-western insecurity.
Sources and what they cannot see
- Kenyan national media and county-level reporting
- ACLED conflict event and protest records for Kenya
- National Police Service and government statements
- Insecurity Insight and NGO security network reporting
- UK FCDO and other national travel advice
Protest casualty figures and responsibility are contested. Incidents in the north-east are reported quickly but details change substantially over the first days.
Confidence: High on urban crime and road safety patterns, moderate to high on north-eastern threat activity, which is regularly reported.
Operational implications
- Two-tier movement policy: separate approval, vehicle and communications standards for north-eastern and coastal-hinterland travel.
- Road safety treated as a security control — driver assessment, defensive driving, speed limits, vehicle checks, seatbelt discipline and a night-travel ban.
- Protest thresholds written down: what triggers a movement pause, who decides, and what staff do if caught out.
- Urban crime controls: vetted transport, arrival and departure procedures, low-value carry, and a briefing that is repeated rather than issued once.
- Venue selection criteria for meetings and conferences, and short exposure at high-profile locations.