Executive summary
Sources · [8] Institute for Security Studies (ISS Africa) · [11] IOM DTM
Full report
Assessment at a glance
We assess the overall operational threat level in Somalia as SEVERE, meaning an attack is highly likely in the near future. We judge the specific risk of disruptive civil unrest in Mogadishu and regional state capitals to be SUBSTANTIAL, indicating that public demonstrations, political protests, and related localized friction are likely. This rating represents an analyst judgement for operational planning and is not an official government designation.
Political friction between the Federal Government of Somalia and Federal Member States continually spills into urban public spaces. Tensions surrounding proposed constitutional amendments, electoral timelines, and municipal tax collection generate sudden street demonstrations. In Mogadishu, protests routinely gather momentum near key transport junctions and administrative hubs. Security force responses to unauthorized assemblies are often heavy-handed, creating immediate hazards for bystanders and non-governmental personnel. Beyond the capital, regional centres such as Garowe, Kismayo, and Baidoa experience distinct waves of agitation linked to local governance disputes and clan interests. INGOs must prepare for sudden operational disruption, access restrictions, and localized violence when public frustration boils over.
Sources · [6] NASA FIRMS / Copernicus · [9] INGO ADVISORY analyst desk
Threat
- Opposition political networks and clan elders maintain a persistent capability to mobilise street protests across major urban centres (moderate confidence). - Federal and regional security forces routinely employ live ammunition and kinetic crowd dispersal tactics to clear unapproved public gatherings (high confidence). - Armed criminal groups frequently exploit the chaos of public demonstrations to carry out opportunistic robberies and target commercial properties (moderate confidence). - Insurgent elements, particularly al-Shabaab, retain the capability to exploit civil unrest for targeted assassinations or low-level explosive attacks near crowd concentrations (moderate confidence).
Political gridlock remains the primary driver of civil disorder in the capital. Opposition coalitions frequently contest executive decisions regarding national governance structures, leading to spontaneous calls for public rallies. Demonstrators often assemble near high-profile locations such as Maka al-Mukarama road, Tarabuunka square, and corridors leading towards Villa Somalia. Security agencies, including the Somali National Army and police units, maintain a zero-tolerance policy for anti-government gatherings in these areas, often setting up rapid roadblocks and deploying force.
Economic grievances further intensify the threat environment. Public anger over municipal property taxation, port tariffs, and fluctuations in local currency values periodically brings commercial activity to a standstill. Transport operators, including tuk-tuk drivers and haulage operators, frequently mount strikes and construct burning-tire barricades across primary transport arteries. These localized disturbances can turn violent within minutes if armed security forces attempt to forcefully clear the thoroughfares.
Sources · [10] UKMTO · [13] OpenSanctions
Vulnerability
- International non-governmental organisations rely heavily on a small number of fixed transit routes that are easily compromised by spontaneous road closures (high confidence). - National staff members residing in residential districts outside fortified compounds face direct exposure to localized violence during political standoffs (moderate confidence). - Facility infrastructure, such as field offices, guest houses, and project sites, generally lacks physical hardening against angry crowds or targeted arson (high confidence). - Humanitarian supply chains rely on local transport contractors who are vulnerable to driver strikes, vehicle impoundment, and extortion during periods of disorder (moderate confidence).
Aid agency operations are vulnerable to urban unrest due to their reliance on unhindered mobility. When political friction leads to widespread street closures, field teams are frequently stranded between secure compounds and project locations. Many INGO[9] facilities sit within residential or commercial zones rather than heavily fortified diplomatic enclaves, leaving them susceptible to surrounding street disorder.
Also, institutional reliance on local national staff for daily community engagement creates unique vulnerabilities. Staff members commuting from peripheral districts must manage volatile security checkpoints established during periods of heightened tension. If local staff are perceived as affiliated with particular political factions or clan groups, their personal vulnerability increases during localized clan-driven unrest.
Sources · [4] GDACS · [7] GDELT Project
Exposure
- Humanitarian personnel and vehicles experience high exposure along main transit routes in Mogadishu, specifically the KM4, KM5, and Aden Adde International Airport corridors (high confidence). - Operations located near regional administrative capitals, particularly Garowe, Kismayo, Baidoa, and Dhusamareb, face targeted exposure during state-level political disputes (moderate confidence). - Field teams conducting aid distributions in informal settlements for internally displaced persons face exposure when distributions are disrupted by crowd surges (moderate confidence). - Logistics corridors linking sea ports and airfields to inland project locations maintain direct exposure to security force checkpoints established during civil unrest (high confidence).
Exposure is highest in urban areas where political, military, and civilian activities intersect. In Mogadishu, the concentration of government buildings, military headquarters, and international offices makes the central districts a focal point for both planned demonstrations and security force activity. Personnel moving between secure compounds and field sites must routinely cross transit corridors that civil unrest can instantly sever.
In regional state capitals, exposure is driven by localized political dynamics. Disputes between state presidents and local clan leaders often manifest as targeted road blockades or armed standoffs around regional assemblies. Humanitarian missions travelling through these areas face immediate exposure to vehicle seizures, extortion demands, and crossfire.
Sources · [3] UN OCHA / ReliefWeb · [6] NASA FIRMS / Copernicus
Impact
- Civil unrest causes immediate severe disruption to humanitarian program delivery through restricted movement and forced site closures (high confidence). - Severe physical injury or death to staff members represents a critical potential impact if personnel are caught in security force live-fire responses (moderate confidence). - Material loss through the looting or destruction of organisational assets, including vehicles, office equipment, and humanitarian stores, imposes significant financial damage (moderate confidence). - Perceived political bias during local governance disputes can lead to operational suspension and severe reputational damage (low confidence).
The operational impact of civil unrest primarily manifests as lost access and delayed assistance delivery. When key transit corridors are blocked, field surveys, clinical support, and food distributions halt. Delayed aid delivery can exacerbate community frustration, creating a feedback loop of local dissatisfaction.
Direct physical impact on personnel is a critical concern. Because security forces routinely use live rounds to disperse crowds, bystanders face significant risks of hit-by-stray-bullet incidents. Property damage also presents a constant concern, as unfortified field offices and aid warehouses can be targeted by opportunistic looters during broader public breakdown.
Sources · [11] IOM DTM · [1] ACLED
Mitigation
- Establish real-time communication protocols with local national staff to track emerging neighborhood sentiment and road closures before dispatching vehicles. - Map secondary and tertiary transit routes between staff residences, main offices, and transport hubs to bypass known political rally sites. - Implement strict low-profile movement rules during heightened political tension, restricting marked organisational vehicles from travelling near government administrative zones. - Maintain a three-day emergency supply of food, clean water, and communications equipment at key facilities to support immediate shelter-in-place posture. - Formulate objective operational triggers for suspending field movements based on security force redeployments or sudden checkpoint additions. - Conduct regular context-monitoring sessions with neutral local leaders and elders to maintain local acceptance and receive advance warning of planned strikes.
Sources · [4] GDACS · [7] GDELT Project
Indicators to monitor
- Public statements issued by political opposition coalitions calling for mass demonstrations, civil disobedience, or business shutdowns (high confidence). - Sudden redeployment of federal security forces, physical sandbag fortification, or heavy vehicle placement at major junctions in Mogadishu (high confidence). - Spikes in media reports or local chatter regarding proposed increases in municipal taxes, fuel prices, or port duties (moderate confidence). - Formal political breakdowns between the Federal Government of Somalia and Federal Member State leadership regarding constitutional reform or election schedules (high confidence).
Sources · [7] GDELT Project · [10] UKMTO
Confidence and sources
Our overall confidence in this assessment is moderate. This judgement rests on public source information, including official government statements, multilateral situational reports, recognized conflict-event databases such as ACLED[1], and established local media outlets in East Africa. Specific details concerning undisclosed political negotiations, real-time clan mobilisation agreements, and precise casualty figures during local clashes remain unverified in open sources.
Sources · [2] UCDP · [5] FEWS NET
Key findings
Analyst assessment
Related reports
Footnotes & sources
- [1] ACLED — Armed Conflict Location & Event Data — Africa event recordsL1 Conflict · reliability A
- [2] UCDP — Uppsala Conflict Data Program — organised violence datasetL1 Conflict · reliability A
- [3] UN OCHA / ReliefWeb — Situation reports, access snapshots and humanitarian updatesL2 Early warning · reliability A
- [4] GDACS — Global Disaster Alert and Coordination System alertsL2 Early warning · reliability B
- [5] FEWS NET — Food security outlooks and alertsL2 Early warning · reliability A
- [6] NASA FIRMS / Copernicus — Active fire detections and open satellite imagery for corroborationL3 GEOINT · reliability B
- [7] GDELT Project — Global media event and tone monitoringL5 Strategic · reliability C
- [8] Institute for Security Studies (ISS Africa) — Regional political and security analysisL5 Strategic · reliability B
- [9] INGO ADVISORY analyst desk — Practitioner interviews, field reporting and imagery verificationL6 Verification · reliability B
- [10] UKMTO — Maritime incident advisories — Gulf of Aden and Red Sea approachesL2 Early warning · reliability A
- [11] IOM DTM — Displacement Tracking Matrix — movement and displacement flowsL2 Early warning · reliability A
- [12] INSO — NGO safety incident reporting and access advisoriesL1 Conflict · reliability A
- [13] OpenSanctions — Sanctions, PEP and enforcement screening dataL5 Strategic · reliability A
Supporting capability statement
Horn of Africa security capability pack
Download the experience summary, applied risk frameworks and sample operational brief supporting this country threat assessment.
Free operational toolkit
Act on this assessment
Six free operational tools for NGO and charity teams — no sign-up, nothing leaves your browser.
- Travel risk authorisationRisk-tiered approval form with control verification before movement is signed off.
- Vehicle & convoy check13-point pre-departure inspection with go / no-go clearance logic.
- Safeguarding / PSEA referralAnonymised referral log for PSEA and misconduct concerns.
- Cyber hygiene assessmentScored self-assessment producing a prioritised remediation workplan.
- Staff accountability roll callReal-time headcount and status tracking during an incident.
- Endurance calculatorContingency stock planning for water, food, fuel and cash.