Somalia terrorism and armed-group threat: Managing risk in contested environments

Assessment at a glance

We judge the overall operational threat level from terrorism and armed groups in Somalia as SEVERE. Under the UK five-tier operational threat terminology, this rating indicates that an attack against international and national non-governmental organisations is highly likely. This assessment represents an analyst judgement for operational planning purposes and does not constitute an official government designation.

The primary security challenge stems from al-Shabaab, an armed group that maintains high operational capability across southern and central regions. Non-governmental organisations must operate within a fragile environment shaped by persistent friction between the Federal Government of Somalia and Federal Member States. Recurring clan feuds, structural weaknesses within local governance, and severe humanitarian access constraints further complicate field operations. Aid agencies face direct security challenges ranging from targeted explosive strikes and complex urban ambushes to pervasive extortion and illegal transit checkpoints.

Sources · [11] IOM DTM · [1] ACLED

Threat

We assess with high confidence that al-Shabaab retains the operational capacity to plan and execute complex multi-stage attacks against soft targets, government installations, and international compounds in Mogadishu.

We assess with high confidence that al-Shabaab relies on vehicle-borne improvised explosive devices, suicide vests, and concentrated small-arms fire to breach fortified perimeters in urban centres.

We assess with moderate confidence that persistent political disputes between federal authorities in Mogadishu and regional leadership in Jubaland and Puntland reduce security cooperation and hinder offensive operations against insurgent strongholds.

We assess with high confidence that insurgent elements maintain extensive extortion networks and operate informal tax checkpoints along key commercial and humanitarian transit corridors to generate income.

We assess with low confidence that factional elements affiliated with the Islamic State in Somalia operate within the Cal Madow mountain range, presenting a localized threat primarily confined to northern regions.

We assess with moderate confidence that inter-clan disputes over agricultural land, pastoral access, and local political power generate localized kinetic violent clashes that create security vacuums.

We assess with high confidence that insurgent forces actively employ targeted assassinations using magnetic improvised explosive devices attached to vehicles carrying government or security personnel.

Sources · [5] FEWS NET · [8] Institute for Security Studies (ISS Africa)

Vulnerability

We assess with high confidence that humanitarian operations relying on local commercial transport contractors face high vulnerability to extortion, vehicle confiscation, and cargo interception by non-state armed groups.

We assess with high confidence that regional police units suffer from inadequate equipment, delayed salary payments, and insufficient training, leaving regional administrative hubs reliant on irregular clan militias for static security.

We assess with moderate confidence that variable adherence to baseline security standards among local implementing partner organisations exposes aid programmes to potential operational compromise.

We assess with high confidence that frequent insurgent sabotage of commercial telecommunication infrastructure leaves field teams in rural areas unable to signal emergency assistance during security incidents.

We assess with moderate confidence that static humanitarian facilities operating near contested district boundaries lack sufficient structural reinforcement to withstand heavy indirect mortar fire.

Sources · [12] INSO · [2] UCDP

Exposure

We assess with high confidence that field staff travelling along major supply routes such as the Mogadishu-Baidoa corridor face high exposure to pressure-plate and command-wire improvised explosive devices.

We assess with high confidence that international and national personnel residing in or visiting commercial hotel facilities in central Mogadishu face direct exposure to complex insurgent assaults.

We assess with moderate confidence that field teams conducting assessment missions outside major urban centres operate without access to immediate emergency medical evacuation or advanced trauma care.

We assess with high confidence that static humanitarian compounds operating within contested districts of Hirshabelle and Galmudug face exposure to insurgent indirect mortar fire.

We assess with low confidence that small vessel maritime movements along the southern coastline face occasional exposure to opportunistic armed interception by local armed groups.

We assess with moderate confidence that field staff conducting direct community distributions in rural locations face brief periods of high exposure to sudden localized armed confrontations.

Sources · [6] NASA FIRMS / Copernicus · [9] INGO ADVISORY analyst desk

Impact

We assess with high confidence that a direct violent attack or kidnapping involving aid workers results in immediate operational suspension and the potential withdrawal of international personnel from the affected region.

We assess with moderate confidence that systematic extortion demands by armed groups force humanitarian organisations to pause cash distribution programs to avoid anti-terrorism compliance breaches.

We assess with high confidence that kinetic encounters occurring near relief distribution sites cause civilian casualties and severely damage long-term community acceptance for humanitarian actors.

We assess with moderate confidence that persistent security threats along main transit corridors cause protracted supply chain delays, degrading the timely delivery of emergency life-saving aid.

We assess with high confidence that severe physical damage to operational facilities caused by indirect fire or explosive devices imposes significant financial and logistical recovery burdens on operating organisations.

Sources · [6] NASA FIRMS / Copernicus · [9] INGO ADVISORY analyst desk

Mitigation

- Implement rigid journey management procedures with mandatory radio or cellular check-in intervals for all field movements. - Conduct continuous vetting of local commercial transport providers to identify and avoid routes subject to insurgent taxation. - Upgrade physical security infrastructure at fixed facilities through stand-off barriers, blast mitigation film, and secure safe rooms. - Issue dual satellite and cellular communication equipment to all field teams operating beyond major urban centres. - Map local trauma facilities and establish formal emergency medical evacuation agreements before launching field operations. - Restrict international staff accommodation to vetted facilities featuring multi-layered perimeter walls and professional security personnel. - Establish protocols for immediate operational suspension whenever active kinetic clashes occur within a ten-kilometre radius of project sites. - Conduct mandatory pre-deployment security briefings for national and international staff covering active threat patterns and emergency response steps.

Sources · [3] UN OCHA / ReliefWeb · [6] NASA FIRMS / Copernicus

Indicators to monitor

- Increased frequency of pre-operational surveillance or target-marking activities reported near commercial hotels in Mogadishu. - Escalation of political disputes or security coordination breakdowns between federal authorities and state leadership in Jubaland or Puntland. - Sudden increases in informal tax rates or operational demands imposed by armed groups at illegal checkpoints along major routes. - Abrupt tactical repositioning or unexpected withdrawal of national security forces from forward operating bases in central regions. - Spikes in indirect mortar fire targeting regional airfields, government compounds, or heavily protected administrative zones. - Noticeable increases in inter-clan violent disputes in rural areas slated for upcoming humanitarian relief distributions.

Sources · [2] UCDP · [5] FEWS NET

Confidence and sources

We maintain a high confidence level regarding our overall assessment of the threat environment in Somalia. Our analytical judgements rest entirely on open public sources available to security practitioners. These sources include official diplomatic travel advisories issued by international governments, situational reports published by multilateral bodies and humanitarian coordination agencies, open conflict-event datasets from recognized academic institutions, and reputable national news outlets across East Africa. Specific insurgent troop numbers, underground leadership directives, and localized attack schedules remain unverified due to the clandestine nature of violent non-state actors operating in the Horn of Africa.

Sources · [7] GDELT Project · [10] UKMTO