Global security operations (GSOC)
CurrentMonitoring, assessing and reporting on incidents and threats affecting people, sites and travel across multiple countries, working to defined escalation and communication procedures.
Mowlid Ali · Security operations & risk analyst
Twenty years of security practice, and the analysis to prove the judgement
Security practitioner with more than twenty years in security supervision, duty management and physical risk assessment, now working in global security operations (GSOC). Publishes independent, open-source security research and risk analysis on Africa, with the deepest coverage across Africa.
Open to security operations, threat intelligence, security risk, monitoring and coordination roles. Employer names, dates, qualifications and referees are provided on request.
- Years in security supervision and duty management
- 20+
- Current global security operations work
- GSOC
- Published country, city and route risk assessments
- Africa
- Published source-reliability method
- A–D
Roles I am applying for
What I am looking for
- Security Operations Centre (SOC / GSOC) Analyst
- Security Intelligence / Threat Intelligence Analyst
- Security Risk Analyst
- Incident Monitoring & Response Analyst
- Travel Security / Threat Monitoring Analyst
- Security Risk Coordinator
- Security Adviser (junior–mid)
- Operational Risk / Crisis Management Analyst
- Business Continuity & Resilience Analyst
Experience
Where the practice comes from
Security supervision and duty management
20+ yearsSupervisory and duty-management responsibility for security operations: shift leadership, control-room and site coordination, incident handling, access control and reporting.
Physical risk assessment
20+ yearsStructured assessment of sites, movements and activities: identifying threats, testing vulnerability, judging likelihood and impact, and recommending proportionate controls.
Employer names, dates, qualifications and referees are provided on request.
Role-relevant evidence
NGO security management capability
Each capability links to a published assessment, working dashboard or practical resource a reviewer can inspect directly.
Context & threat analysis
Turns incident reporting, armed-actor activity and political developments into decision-focused assessments.
Published intelligenceSecurity risk assessment
Applies structured threat, vulnerability, likelihood, impact, control and residual-risk reasoning.
Africa risk dashboardHumanitarian access & acceptance
Examines authority, gatekeeper, community-perception, diversion and programme-access exposure.
Access assessment toolIncident & crisis management
Builds escalation thresholds, action cards, crisis structures, continuity decisions and review disciplines.
Crisis readiness workspaceJourney management & travel risk
Connects route exposure, authorisation, movement controls, communications and abort criteria.
Operational tool libraryBriefing, training & duty of care
Translates complex risk into concise briefings and practical controls for staff and leadership.
Reports and briefingsEarly warning & information management
Uses indicators, timelines, provenance and confidence to identify material change without overstating certainty.
Africa Situation RoomCompliance & field verification
Provides structured approaches for partner checks, site verification, programme assurance and audit trails.
Development platformsSelected work
Three pieces of published analysis
Each one is a finished piece of work published under my own name, written from public sources with the method, confidence and sources stated. Open any of them and judge the reasoning directly.
Country security risk assessment
Somalia Security Risk Assessment
A country-level assessment of Somalia rated SEVERE on UK threat terminology, covering the operating environment, armed-actor threat, organisational vulnerabilities and the operational considerations that follow.
Method
Threat, vulnerability, exposure and impact separated before any rating; four rated risks with likelihood, impact and mitigation; residual risk stated for formal acceptance.
What it shows
That I can write a country judgement a director can accept or reject, with the arithmetic and the assumptions visible.
- Sources
- ACLED, OCHA and ReliefWeb reporting, Insecurity Insight, FCDO travel advice, Somali and regional media
- Confidence
- Moderate to high on urban attack patterns; lower on transition districts
Early warning analysis
Ethiopia–Eritrea Early Warning
Indicator-based watch on the Ethiopia–Eritrea relationship and the Tigray periphery, written so that a change in the picture is visible before it becomes an incident.
Method
Named indicators with the observation that would move them, separation of confirmed, reported and assessed material, and a monitoring rhythm rather than a one-off forecast.
What it shows
How I convert political and military signals into warning that leadership can act on without overstating certainty.
- Sources
- Public statements, ACLED event data, humanitarian situation reporting, Ethiopian and Eritrean media monitoring
- Confidence
- Moderate; independent reporting from the border areas is limited
Regional security analysis
Red Sea Security Analysis
Analysis of the Red Sea and Bab el-Mandeb corridor and its effect on Djibouti, Somaliland and Horn of Africa supply lines, staff movement and aviation routing.
Method
Situation separated from assessment, operational implications drawn out explicitly, indicators and confidence stated, sources named at the foot of the brief.
What it shows
That I can take a maritime and geopolitical picture and turn it into consequences for people, cargo and programme continuity.
- Sources
- Maritime advisories, IMO and industry reporting, regional media, humanitarian logistics reporting
- Confidence
- Moderate on shipping effects; lower on intent behind individual incidents
Published work
Open this before you decide
Written analysis, data work and operational tools published under my own name and open to inspection.
Capability
Five OSINT capabilities
Conflict, humanitarian, GEOINT, verification and strategic risk, each with its method, sources and limits.
OpenRisk assessment
Somalia country and city risk assessments
Country, regional and city assessments with UK threat levels, matrices and mitigation.
OpenAssessment writing
Horn of Africa security briefs
Mogadishu, Ethiopia, Sudan, the Kenya–Somalia border and the Red Sea, with confidence and sources.
OpenWorked example
Somalia NGO case study
A fictional NGO used to show journey risk, incident response and duty-of-care decisions end to end.
OpenMonitoring
Africa Situation Room
Open-source incident monitoring with named provenance and confidence on every entry.
OpenAnalysis product
Africa country risk dashboards
Analyst-assigned indicators, matrices and trends across covered African states.
OpenData work
Africa Operations Map
Humanitarian and development activity built from UN OCHA HDX and IATI records with provenance.
OpenTool
Working risk register
A live register recording likelihood, impact, confidence, mitigation and review dates.
OpenTraining
Security training hub
Anonymised East Africa case studies and practical field checklists.
OpenSelected walkthroughs
From context to operational decision
Three worked examples showing how context becomes an assessment, and an assessment becomes a decision.
Somalia country security risk assessment
Context
A fragmented operating environment shaped by terrorism, political contestation, localised conflict and access constraints.
Task
Create a defensible country-level judgement that remains useful to programme, travel and duty-of-care decisions.
Approach
Threat-by-threat analysis, geographic exposure, UK threat terminology, confidence grading, indicators and source appendix.
Operational value
A repeatable basis for risk ownership, mitigation priorities and review triggers.
Mogadishu journey-risk decision
Context
Urban movement where exposure changes by district, route, time, profile and current incident pattern.
Task
Structure a go/no-go decision without relying on intuition at the point of departure.
Approach
Route segments, control checks, communications, authorisation, abort criteria and contingency actions.
Operational value
A concise movement record that makes assumptions, ownership and escalation visible.
Humanitarian access & crisis scenario
Context
Programme delivery affected by authority fragmentation, community acceptance, security incidents and remote-management constraints.
Task
Compare access options and define the conditions that should trigger escalation or suspension.
Approach
Constraint mapping, stakeholder exposure, scenario testing, red lines, crisis roles and continuity actions.
Operational value
A practical bridge between contextual analysis, programme choices and staff duty of care.
Work samples
Eight inspectable deliverables
Sample / demonstration material. These examples show structure, reasoning and operational utility. They contain no client information and do not claim a specific engagement.
Country assessment
Sample Country Threat Assessment + Capability Pack
Inspect evidenceCity briefing
Mogadishu Security Briefing
Inspect evidenceThreat assessment
Somalia Threat Assessment
Inspect evidenceRisk register
Security Risk Register
Inspect evidenceTravel security
Journey Management Plan
Inspect evidenceCrisis readiness
Crisis Management Plan
Inspect evidenceAccess assessment
Humanitarian Access Risk Assessment
Inspect evidenceLeadership reporting
Executive Intelligence Briefing
Inspect evidencePublished by Mowlid Ali
Assess the work directly
The strongest evidence on this platform is the work itself: sourced assessments, explicit confidence language, regional coverage and tools designed around real security-management decisions.