Kenya: Geopolitical Risk Assessment, October 2026

Key judgement

A stable regional hub with two distinct problems: a persistent cross-border threat in the north-east and coastal hinterland, and urban crime and protest dynamics in Nairobi and Mombasa.

Sources · [12] INSO · [3] UN OCHA / ReliefWeb

Threat context

- Al-Shabaab activity in Garissa, Wajir, Mandera and the Lamu–Boni hinterland, including roadside devices and attacks on security posts, vehicles and communications infrastructure. - Terrorist intent against soft targets in Nairobi and Mombasa, demonstrated historically against hotels, malls and transport hubs. - Violent urban crime, including armed carjacking and robbery, and express abduction in Nairobi. - Protest and public-order events that can escalate rapidly, with movement disruption and force used against crowds. - Road traffic risk, which remains the largest single cause of harm to staff nationally.

Sources · [11] IOM DTM · [2] UCDP

Vulnerabilities

- Routine, predictable movement patterns in Nairobi, and reliance on a small number of well-known venues. - North-eastern field movement planned as domestic travel rather than as a cross-border threat environment. - Driver standards and vehicle maintenance treated as a fleet matter rather than a security control. - No agreed thresholds for pausing movement during protest activity, leaving the decision to individuals in the moment.

Sources · [6] NASA FIRMS / Copernicus · [9] Mazin Intel analyst desk

Exposure

- Nairobi offices, accommodation, hotels and conference venues, and Mombasa coastal operations. - Field movement and camp operations in Garissa, Wajir, Mandera, Dadaab and the Lamu hinterland. - Long-distance road movement on the Nairobi–Mombasa, Nairobi–Garissa and northern corridors.

Sources · [1] ACLED · [4] GDACS

Operational implications

- Casualties from an attack on a soft target or a roadside device in the north-east. - Injury or death in a road traffic collision, statistically the most likely serious harm. - Programme disruption and reputational consequences from an incident involving staff during unrest.

Sources · [8] Institute for Security Studies (ISS Africa) · [11] IOM DTM

Rated risks

- Roadside device or ambush affecting movement in Garissa, Wajir, Mandera or the Lamu hinterland, likelihood 3/5, impact 5/5. Separate movement standard for the north-east; route assessment and road check; convoy and comms rules; abort criteria. - Attack on a soft target used by staff in Nairobi or Mombasa, likelihood 2/5, impact 5/5. Venue selection criteria; vary patterns; short exposure at high-profile sites; rehearsed incident procedure. - Road traffic collision during staff movement, likelihood 4/5, impact 4/5. Driver standards and assessment; speed policy; vehicle checks; night-travel ban; journey approval. - Violent urban crime, including carjacking or express abduction, likelihood 3/5, impact 4/5. Vetted transport; arrival and departure procedures; low-value carry; area briefing repeated regularly. - Staff caught in protest or public-order response, likelihood 3/5, impact 3/5. Written movement-pause thresholds; remote-working plan; avoid identified assembly points; monitoring and early notification.

Sources · [8] Institute for Security Studies (ISS Africa) · [11] IOM DTM

Mitigation

- Two-tier movement policy: separate approval, vehicle and communications standards for north-eastern and coastal-hinterland travel. - Road safety treated as a security control, driver assessment, defensive driving, speed limits, vehicle checks, seatbelt discipline and a night-travel ban. - Protest thresholds written down: what triggers a movement pause, who decides, and what staff do if caught out. - Urban crime controls: vetted transport, arrival and departure procedures, low-value carry, and a briefing that is repeated rather than issued once. - Venue selection criteria for meetings and conferences, and short exposure at high-profile locations.

Sources · [1] ACLED · [4] GDACS

Residual risk

Medium nationally, high in the north-east and coastal hinterland. Road traffic risk carries the largest expected loss and should be managed with the same seriousness as armed threat.

Sources · [10] UKMTO · [1] ACLED

Confidence and sources

Confidence: High on urban crime and road safety patterns, moderate to high on north-eastern threat activity, which is regularly reported.. B

- ACLED[1] conflict event data - UN OCHA[3] situation reports and ReliefWeb country pages - Insecurity Insight aid-security incident data - UK FCDO and US State Department travel advice - National and regional media monitoring - Kenya National Police Service and NTSA public statistics - Kenyan national media monitoring

Analyst assessment from public sources, Reviewed September 2026. Not a substitute for an organisation's own assessment.

Sources · [11] IOM DTM · [2] UCDP