Country Risk Laboratory
SEVEREAn attack is highly likely.Reviewed September 2026
Somalia security risk assessment
An armed opposition retaining the capability to mount complex and explosive attacks in urban centres, contested control on inter-city roads, and a security transition that shifts responsibility faster than it builds capacity.
Analyst assessment from public sources, written for practitioners. Threat levels describe the general environment for a civilian organisation; they are not a substitute for an organisation's own assessment of its own exposure.
Operating environment
- National and international staff in Mogadishu, Baidoa, Kismayo, Garowe and Hargeisa, largely during working hours with visitor traffic on set days.
- Road movement on the Mogadishu–Afgooye, Mogadishu–Jowhar and Baidoa corridors, and airport transfers through areas used by officials.
- Distribution and monitoring visits in rural districts where control changes between towns.
Threats
- Al-Shabaab retains intent and demonstrated capability against government, security and hospitality targets in Mogadishu and regional capitals, including vehicle-borne devices and coordinated assault teams.
- Informal checkpoints and taxation on arterial routes outside government-held towns, reported consistently by transporters and traders.
- Clan and political competition, including federal member state disputes, capable of producing armed confrontation with little notice.
- Criminality in urban centres — armed robbery, vehicle theft, opportunistic abduction — that is separate from the conflict but affects staff more often.
Vulnerabilities
- Predictable routines: fixed arrival and departure times, single approach roads, and repeated use of the same hotels and meeting venues.
- Premises with limited stand-off from a public road, and guarding contracted without a written security standard.
- Movement approved on the basis of habit rather than a route assessment, with no written abort criteria held by the vehicle commander.
- Reliance on a single communications channel, and check-in schedules that would take hours to reveal a missing vehicle.
Operational considerations
- Site selection with measurable stand-off, controlled single entry with search, blast film, a designated safe room and a drill rhythm that is actually run.
- Journey management per movement: route assessment, varied timing and routing, day-of-travel road check, named vehicle commander and written abort criteria.
- Checkpoint mapping with transporters, a documented no-payment position, scripted responses and one named negotiation point of contact.
- Crisis management plan rehearsed with named roles, tested contact tree, and a decision log kept from the first hour.
- Acceptance work: transparent selection criteria, community feedback channels, and a public position on independence that partners can repeat.
If it happens
- Fatalities and serious injury from blast and fragmentation, with prolonged staff-care and family-liaison obligations.
- Loss of a vehicle or team to abduction, with months of crisis management and no guarantee of outcome.
- Programme suspension, contractual failure with donors, and loss of the community acceptance that makes access possible.
Rated risks
| Ref | Risk | L | I | Rating | Mitigation |
|---|---|---|---|---|---|
| SO-A1 | Staff caught in the effects of an explosive attack on a nearby government, security or hotel target | 4 | 5 | CRITICAL | Stand-off and site hardening; avoid venues used by officials; keep exposure short at high-profile locations; safe room and drills. |
| SO-A2 | Ambush or roadside device against vehicle movement on an inter-city corridor | 3 | 5 | SEVERE | Per-journey route assessment; varied timing; road check on the day; abort criteria and communications schedule. |
| SO-A3 | Detention, extortion or long delay at an informal checkpoint | 4 | 3 | SUBSTANTIAL | Checkpoint mapping; documented no-payment position; scripted responses; single negotiation contact; report every event. |
| SO-A4 | Abduction of staff for ransom or leverage | 2 | 5 | SUBSTANTIAL | Reduce predictability; restrict advance disclosure of movement; vetted drivers; rehearsed crisis plan. |
Residual risk
High. Controls reduce likelihood on movement and the impact on sites, but the threat is capable and persistent; residual risk should be formally accepted at director level and reviewed quarterly.
Confidence
Moderate to high on the pattern of urban attacks and route insecurity, which is consistently reported. Lower on the durability of local security arrangements in transition districts.
Sources
- · ACLED conflict event data
- · UN OCHA situation reports and ReliefWeb country pages
- · Insecurity Insight aid-security incident data
- · UK FCDO and US State Department travel advice
- · National and regional media monitoring
- · AMISOM/ATMIS and Somali federal government public statements