Executive summary
East Africa's risk profile is defined by the transmission of instability across borders: insurgent spillover, refugee and displacement pressure, contested electoral politics and infrastructure exposure along the Northern and Central corridors.
This briefing consolidates the regional threat picture into a single operating view and translates it into sector-specific impact for humanitarian, extractive, logistics and financial services operations.
Sources · [3] UN OCHA / ReliefWeb · [6] NASA FIRMS / Copernicus
Full report
Regional drivers
Four drivers explain most of the region's security variance: insurgent pressure emanating from Somalia, contested domestic politics, climate-driven displacement and food insecurity, and infrastructure concentration along a small number of trade corridors.
Sources · [13] OpenSanctions · [3] UN OCHA / ReliefWeb
Sectoral impact
Humanitarian operations face access negotiation and staff movement risk. Extractives face community and land-tenure friction. Logistics faces corridor disruption and cargo integrity risk. Financial services faces fraud environment and branch security exposure in border towns.
Key findings
- Kenya's north-eastern counties remain exposed to Al-Shabaab cross-border activity, with IED use against security convoys the dominant tactic.
- Urban protest risk in Nairobi and Kampala is increasingly economically driven and less predictable than election-cycle unrest.
- Ethiopia's residual conflict dynamics in Amhara and Oromia continue to constrain overland movement and NGO access.
- Corridor dependency is the region's principal continuity exposure: a single disruption at Mombasa or on the A104 propagates within days.
- Tanzania remains the region's lowest-threat major market but is not insulated from regional displacement and commodity shocks.
Analyst assessment
We assess with high confidence that regional threat levels will remain broadly stable through 2027, with volatility concentrated in border zones and capital-city protest environments rather than nationwide deterioration.
We assess with moderate confidence that supply-chain disruption, not violent incident, will be the most material risk realised by commercial operators in the region over the next 12 months.
Related reports
Footnotes & sources
- [1] ACLED: Armed Conflict Location & Event Data, Africa event recordsL1 Conflict · reliability A
- [2] UCDP: Uppsala Conflict Data Program, organised violence datasetL1 Conflict · reliability A
- [3] UN OCHA / ReliefWeb: Situation reports, access snapshots and humanitarian updatesL2 Early warning · reliability A
- [4] GDACS: Global Disaster Alert and Coordination System alertsL2 Early warning · reliability B
- [5] FEWS NET: Food security outlooks and alertsL2 Early warning · reliability A
- [6] NASA FIRMS / Copernicus: Active fire detections and open satellite imagery for corroborationL3 GEOINT · reliability B
- [7] GDELT Project: Global media event and tone monitoringL5 Strategic · reliability C
- [8] Institute for Security Studies (ISS Africa): Regional political and security analysisL5 Strategic · reliability B
- [9] Mazin Intel analyst desk: Practitioner interviews, field reporting and imagery verificationL6 Verification · reliability B
- [10] UKMTO: Maritime incident advisories, Gulf of Aden and Red Sea approachesL2 Early warning · reliability A
- [11] IOM DTM: Displacement Tracking Matrix, movement and displacement flowsL2 Early warning · reliability A
- [12] INSO: NGO safety incident reporting and access advisoriesL1 Conflict · reliability A
- [13] OpenSanctions: Sanctions, PEP and enforcement screening dataL5 Strategic · reliability A
Supporting capability statement
Horn of Africa security capability pack
Download the experience summary, applied risk frameworks and sample operational brief supporting this country threat assessment.
Free operational toolkit
Act on this assessment
Six free operational tools for NGO and charity teams; no sign-up, nothing leaves your browser.
- Travel risk authorisationRisk-tiered approval form with control verification before movement is signed off.
- Vehicle & convoy check13-point pre-departure inspection with go / no-go clearance logic.
- Safeguarding / PSEA referralAnonymised referral log for PSEA and misconduct concerns.
- Cyber hygiene assessmentScored self-assessment producing a prioritised remediation workplan.
- Staff accountability roll callReal-time headcount and status tracking during an incident.
- Endurance calculatorContingency stock planning for water, food, fuel and cash.