Taxation, permits and justice delivered by armed groups create compliance exposure that a security policy alone cannot manage.
What happened
The immediate concern is Insurgents, militia and criminal networks exercising governance. The record we hold, drawn from ACLED event data, UN OCHA and ReliefWeb reporting, and official statements from the authorities concerned, shows sustained activity across Sahel / Horn of Africa / Great Lakes / Mozambique rather than a single decisive event. We do not restate casualty figures we cannot corroborate; where the record is thin we say so.
What is changing
We judge, with moderate to high confidence, that the drivers behind this dilemma are becoming structural rather than episodic. Two years ago an operations manager could treat it as a background condition. It now belongs in the country risk register with named owners, review dates and defined triggers.
Why it matters
- Personnel: exposure shifts from frontline areas into routine movement, accommodation and airport transfers.
- Access: programme delivery slows through permits, escorts and route closures rather than outright refusal.
- Assets and supply chain: lead times lengthen, insurance terms tighten and single-source dependencies surface.
- Reputation and compliance: payments, partners and escorts create scrutiny long after the incident closes.
Where the exposure sits
Exposure concentrates in Multiple theatres and across Sahel / Horn of Africa / Great Lakes / Mozambique. We name the corridor, the port and the district in client-specific assessments; generic references to "the region" hide the decision. Organisations with staff, partners or supply chains in these areas should assume the assessment applies to them directly.
What organisations should watch
- Force posture changes: new deployments, withdrawals or a change in who holds a checkpoint.
- Administrative signals: registration reviews, visa processing times, import clearance delays.
- Market signals: fuel availability and price, currency movement, freight and insurance quotations.
- Information environment: network restrictions, coordinated messaging campaigns naming organisations or staff.
- Displacement: new arrivals in an area, or a route emptying, ahead of reported violence.
What organisations should do
- Re-baseline the country risk assessment against this dilemma and record the date it was done.
- Set movement rules to the threat level below, with the authorisation level written into policy.
- Test the crisis plan against the most likely scenario here, using the roster that would actually take the call.
- Confirm medical, communications and relocation arrangements before tempo builds, not during it.
- Screen counterparties, escorts and landlords; in several of these theatres due diligence is the security control.
Threat level and operational meaning
We assess this dilemma at SEVERE on the United Kingdom five-tier scale. An attack is highly likely. For managers, that rating sets the authorisation level for movement, the reporting rhythm and the review frequency.
A rating that does not change what somebody does on Monday is commentary, not risk management.
Reporting basis
This analysis was written by Mowlid Ali for Mazin Intel. It draws on ACLED event data, UN OCHA and ReliefWeb humanitarian reporting, Insecurity Insight incident monitoring, official government and UN statements, and local media in Sahel / Horn of Africa / Great Lakes / Mozambique, triangulated against our own field engagement. The judgement is ours and is verified against multiple independent streams; the underlying reporting remains the property of the publishers named in the citations below.