Somalia: Geopolitical Risk Assessment, October 2026

Key judgement

An armed opposition retaining the capability to mount complex and explosive attacks in urban centres, contested control on inter-city roads, and a security transition that shifts responsibility faster than it builds capacity.

Sources · [12] INSO · [3] UN OCHA / ReliefWeb

Threat context

- Al-Shabaab retains intent and demonstrated capability against government, security and hospitality targets in Mogadishu and regional capitals, including vehicle-borne devices and coordinated assault teams. - Informal checkpoints and taxation on arterial routes outside government-held towns, reported consistently by transporters and traders. - Clan and political competition, including federal member state disputes, capable of producing armed confrontation with little notice. - Criminality in urban centres, armed robbery, vehicle theft, opportunistic abduction, that is separate from the conflict but affects staff more often.

Sources · [7] GDELT Project · [10] UKMTO

Vulnerabilities

- Predictable routines: fixed arrival and departure times, single approach roads, and repeated use of the same hotels and meeting venues. - Premises with limited stand-off from a public road, and guarding contracted without a written security standard. - Movement approved on the basis of habit rather than a route assessment, with no written abort criteria held by the vehicle commander. - Reliance on a single communications channel, and check-in schedules that would take hours to reveal a missing vehicle.

Sources · [6] NASA FIRMS / Copernicus · [9] Mazin Intel analyst desk

Exposure

- National and international staff in Mogadishu, Baidoa, Kismayo, Garowe and Hargeisa, largely during working hours with visitor traffic on set days. - Road movement on the Mogadishu–Afgooye, Mogadishu–Jowhar and Baidoa corridors, and airport transfers through areas used by officials. - Distribution and monitoring visits in rural districts where control changes between towns.

Sources · [1] ACLED · [4] GDACS

Operational implications

- Fatalities and serious injury from blast and fragmentation, with prolonged staff-care and family-liaison obligations. - Loss of a vehicle or team to abduction, with months of crisis management and no guarantee of outcome. - Programme suspension, contractual failure with donors, and loss of the community acceptance that makes access possible.

Sources · [4] GDACS · [7] GDELT Project

Rated risks

- Staff caught in the effects of an explosive attack on a nearby government, security or hotel target, likelihood 4/5, impact 5/5. Stand-off and site hardening; avoid venues used by officials; keep exposure short at high-profile locations; safe room and drills. - Ambush or roadside device against vehicle movement on an inter-city corridor, likelihood 3/5, impact 5/5. Per-journey route assessment; varied timing; road check on the day; abort criteria and communications schedule. - Detention, extortion or long delay at an informal checkpoint, likelihood 4/5, impact 3/5. Checkpoint mapping; documented no-payment position; scripted responses; single negotiation contact; report every event. - Abduction of staff for ransom or leverage, likelihood 2/5, impact 5/5. Reduce predictability; restrict advance disclosure of movement; vetted drivers; rehearsed crisis plan.

Sources · [8] Institute for Security Studies (ISS Africa) · [11] IOM DTM

Mitigation

- Site selection with measurable stand-off, controlled single entry with search, blast film, a designated safe room and a drill rhythm that is actually run. - Journey management per movement: route assessment, varied timing and routing, day-of-travel road check, named vehicle commander and written abort criteria. - Checkpoint mapping with transporters, a documented no-payment position, scripted responses and one named negotiation point of contact. - Crisis management plan rehearsed with named roles, tested contact tree, and a decision log kept from the first hour. - Acceptance work: transparent selection criteria, community feedback channels, and a public position on independence that partners can repeat.

Sources · [1] ACLED · [4] GDACS

Residual risk

High. Controls reduce likelihood on movement and the impact on sites, but the threat is capable and persistent; residual risk should be formally accepted at director level and reviewed quarterly.

Sources · [10] UKMTO · [1] ACLED

Confidence and sources

Confidence: Moderate to high on the pattern of urban attacks and route insecurity, which is consistently reported. Lower on the durability of local security arrangements in transition districts.. B

- ACLED[1] conflict event data - UN OCHA[3] situation reports and ReliefWeb country pages - Insecurity Insight aid-security incident data - UK FCDO and US State Department travel advice - National and regional media monitoring - AMISOM/ATMIS and Somali federal government public statements

Analyst assessment from public sources, Reviewed September 2026. Not a substitute for an organisation's own assessment.

Sources · [3] UN OCHA / ReliefWeb · [6] NASA FIRMS / Copernicus