Close Protection Operations Across Africa: Licensing, Threat Environment, and Deployment

Africa is not a single threat environment. Treating it as such – applying a uniform high-risk label to 54 countries with vastly different security landscapes – produces CP plans that are either over-resourced for low-risk deployments or dangerously inadequate for high-risk ones. This article covers the licensing framework across the primary corporate security destinations, the threat environments that drive CP decisions in each sub-region, and the operational standards that separate credible providers from inadequate ones.

The Licensing Patchwork

Private security regulation in Africa is fragmented, with each country maintaining its own legal framework and enforcement capacity. There is no continental licensing standard, no mutual recognition arrangement, and no portability of credentials between jurisdictions. An operative licensed in South Africa cannot legally operate as a private security provider in Nigeria without compliance with Nigerian requirements, and vice versa.

South Africa has the most developed regulatory framework on the continent. The Private Security Industry Regulation Act 56 of 2001 established PSIRA as the sector regulator. All private security service providers and operatives must be registered with PSIRA, which requires background screening, prescribed training standards, and ongoing compliance. PSIRA registration data is publicly verifiable. The Arms and Ammunition Act 75 of 1969 governs firearms licensing for security operatives.

Nigeria’s private security sector operates under the oversight of the Nigeria Security and Civil Defence Corps (NSCDC), which licenses private guard companies under the Private Guard Companies Act. The sector is large – estimated at over one million private security personnel – and enforcement quality is uneven. The NSCDC issues company licences rather than individual operator licences, which creates a compliance gap at the operative level. Firearms authority for licensed private security companies is governed separately through the Police Act and Inspector General of Police directives.

Kenya’s sector is regulated by the Private Security Regulation Authority (PSRA), established under the Private Security Regulation Act 2016. PSRA registration is required for both companies and individual operatives. Kenya has seen significant professionalisation of the sector since the Act’s commencement, though rural and northern county operations remain less consistently regulated.

Other significant corporate destinations have varying frameworks: Ghana has the Private Security Organisation Act; Ethiopia’s sector operates under administrative licensing with less formal statutory structure; Tanzania, Mozambique, and Zambia maintain their own licensing authorities. For any deployment across multiple African countries, licensing compliance must be verified jurisdiction by jurisdiction before the assignment begins.

West Africa: Nigeria, Ghana, and the Gulf of Guinea Context

Nigeria’s close protection operating environment is shaped by two distinct risk profiles: Lagos and Abuja, where corporate crime, kidnap-for-ransom targeting, and road traffic incidents are the primary concerns; and the Niger Delta region, where successor groups to the Movement for the Emancipation of the Niger Delta (MEND) continue to operate, particularly affecting oil and gas sector personnel.

In Lagos, CP for senior executives typically involves two to three-vehicle convoys, advance work on venue and route security, and coordination with hotel security. Airport arrival is a high-risk point – Murtala Muhammed International Airport, particularly the domestic terminal, draws criminal attention to arriving foreign nationals. A vetted ground collection meeting the principal in the secure zone outside the arrivals hall removes most of this exposure. The Nairobi security guide and Lagos security guide cover city-specific protocols in more detail.

In the Niger Delta – Rivers State, Bayelsa, Delta State – armed CP is standard for all deployment tiers. The operating environment includes both criminal KFR networks and armed community grievance actors. Community engagement as a security strategy, originally developed by the oil majors, remains relevant for energy sector operators. For any deployment in extractive industry regions of Nigeria, coordination with the Nigeria Police Force or NSCDC is advisable for routes through higher-risk zones.

Ghana represents a significantly lower-risk operating environment than Nigeria. Accra operates at a risk level comparable to many mid-tier emerging market cities. Unarmed CP is appropriate for most corporate visits. The security in Africa for business travel guide provides the broader corporate travel context for West Africa.

East Africa: Kenya, Tanzania, and Ethiopia

Kenya’s security environment is defined by two intersecting risk factors: urban crime in Nairobi, and the Al-Shabaab threat that extends from Somalia across the border into northeastern Kenya and into Nairobi itself. The 2019 DusitD2 hotel complex attack in Nairobi’s Westlands district killed 21 people and demonstrated the group’s continued operational capability against high-profile commercial targets in the city (OSAC Kenya Country Security Report 2024).

For corporate CP in Nairobi, venue selection is a meaningful security decision. Hotels and commercial facilities in the CBD and Westlands that have invested significantly in physical security – perimeter control, vehicle barriers, armed response – provide a materially different operating environment to those with lower investment. Advance work should include a documented assessment of the venue’s security measures and the local police response profile for the specific area.

Nairobi’s northern suburbs (Westlands, Karen, Gigiri) are significantly lower risk than informal settlement areas and the CBD periphery. Route planning should reflect this geography. Counter-surveillance capability in the follow vehicle or a dedicated counter-surveillance car is appropriate for principals with any documented threat profile.

Tanzania presents lower risk than Kenya for most corporate visits. Dar es Salaam and the northern tourist corridor (Arusha, Kilimanjaro) operate at risk levels where standard CP protocols suffice. Ethiopia’s Addis Ababa is a major hub for regional business and the African Union headquarters. The 2020 to 2022 Tigray conflict demonstrated how quickly Ethiopia’s internal security environment can shift; ongoing monitoring is essential. Unarmed CP is standard for most Addis Ababa corporate assignments, with the caveat that security conditions outside the capital require a specific assessment.

Southern Africa: South Africa and Mozambique

South Africa presents a paradox: a sophisticated, heavily regulated private security sector operating alongside one of the highest violent crime rates in the world. Johannesburg’s carjacking rate – over 20,000 incidents per year nationally according to South African Police Service statistics – makes vehicle security the central CP concern. Standard protocols include counter-surveillance on departure from residences and hotels, route variation, avoidance of predictable patterns, and post-18:00 movement restrictions in areas not covered by adequate ground support.

Johannesburg’s northern suburbs (Sandton, Rosebank) represent a more manageable environment than the CBD or southern townships, but no area operates at a Western European risk level. CP operatives operating in South Africa must be registered with PSIRA and should carry evidence of registration. The Johannesburg security guide covers the city-specific context.

Mozambique’s Cabo Delgado province requires a different risk register entirely. The IS-affiliated insurgency that began in 2017 has caused significant civilian casualties and led to the 2021 attack on Palma that forced TotalEnergies to suspend its LNG project. Energy sector operators in Cabo Delgado require convoy protocols at a level closer to conflict zone operations than standard executive protection: armed escorts, armed vehicles, coordinated routes, and no independent movement. This is not a standard CP deployment – it falls into close protection with conflict-zone methodology. Southern Mozambique (Maputo) operates at a conventional high-risk emerging market level.

The Sahel: Where CP Ends and Conflict Zone Security Begins

Burkina Faso, Mali, Niger, and northeastern Nigeria in the Lake Chad Basin represent operating environments where conventional close protection is not an adequate security framework. The presence of IS-affiliated Sahel groups (JNIM, ISWAP) and the degraded capacity of state security forces in these zones creates conditions that require conflict zone security protocols: armed escorts, armoured vehicles, movement coordination with military or peacekeeping forces, and strict limitations on independent movement.

For most corporate purposes, operations in the Sahel are either conducted from Dakar, Abidjan, or Accra with day-trip protocols into the relevant zone under specific security arrangements, or they are not conducted at all. The kidnap prevention guide covers the KFR risk framework relevant to these environments.

Convoy Protocols and Cross-Border Deployment

Across most high-risk African CP deployments, convoy operations are standard for principal movement. Single-vehicle movements carry unnecessary risk in Lagos, Nairobi, Johannesburg, and comparable cities. A two-vehicle minimum – principal vehicle plus a follow vehicle with counter-surveillance capability – is the baseline. Three-vehicle operations add an advance car or a dedicated counter-surveillance vehicle appropriate for higher-threat profiles.

Convoy formation, inter-vehicle spacing, communications, and rally point protocols should be standardised and rehearsed before deployment. An ad hoc convoy assembled from operatives who have not worked together before requires at minimum a pre-deployment briefing and communications check.

Cross-border deployment in Africa requires advance planning for: host-country licensing compliance in each jurisdiction entered; firearms import and transit permits where armed CP is required; customs clearance for communications and security equipment; and liaison with in-country contacts who can provide ground-level intelligence on the specific routes to be used.

Vetting Local CP Contractors

The quality of private security providers across Africa varies substantially. In markets with stronger regulatory frameworks and more active enforcement – South Africa being the clearest example – provider quality is generally higher and more consistent. In markets with weaker enforcement, the correlation between claimed capability and actual capability is less reliable.

Verification steps for any local CP provider should include: confirmation of regulatory registration in the relevant jurisdiction; review of documented training records for the specific operatives proposed for deployment; a conducted interview with the team lead covering specific in-country operational experience; named references from comparable past assignments, contacted directly; and, where possible, in-country intelligence on the provider’s reputation from diplomatic security contacts, multinational corporate security networks, or specialist risk management firms with Africa operations.

Price is not a reliable quality indicator in either direction. Under-pricing often signals under-qualified operatives or regulatory non-compliance. Premium pricing without verifiable capability indicators does not guarantee quality either. The vetting process is not optional for any deployment above a minimal risk threshold.

For the West Africa regional security environment beyond the P1 cities – covering the Sahel jihadist corridor (JNIM/ISGS), the southward expansion into coastal Côte d’Ivoire, Benin, and northern Ghana, Gulf of Guinea maritime security, and the relative stability of Accra and Abidjan as regional operating bases – see our close protection in West Africa guide. For the Horn of Africa – Ethiopia (Addis Ababa as the AU and UNECA hub, internal conflict in Tigray/Amhara/Oromia), Djibouti (the region’s primary military hub and logistics base), Somalia (specialist-only operations framework), and Eritrea (effectively closed to independent commercial operations) – see our close protection in the Horn of Africa guide. For East Africa – Kenya (Nairobi as a P1 city, the al-Shabaab Westgate/Garissa/DusitD2 attack history, and the safari environment MEDEVAC requirements), Tanzania, Uganda, and Rwanda – see our close protection in East Africa guide. For the full convoy operations planning framework – vehicle formation design, communications architecture, counter-ambush drills, and route intelligence methodology applicable to high-threat principal movements – see our executive convoy operations guide.

Sources

PSIRA Act 56 of 2001 (Private Security Industry Regulation Act), Republic of South Africa. Nigeria Private Guard Companies Act (NSCDC oversight framework). Kenya Private Security Regulation Act 2016, PSRA. OSAC Nigeria Country Security Report 2024. OSAC Kenya Country Security Report 2024. Control Risks Africa Risk Outlook 2025. FCDO Travel Advisories: Nigeria, Kenya, South Africa, Ethiopia, Mozambique (April 2026). South African Police Service Crime Statistics 2024. UN Office for the Coordination of Humanitarian Affairs (OCHA) Sahel Security Reports 2024. For the Central Africa security environment – DRC Kinshasa operations, eastern DRC active conflict zone, Cameroon Anglophone crisis, Republic of Congo oil sector, Gabon post-2023 coup, and Central African Republic specialist framework – see our close protection in Central Africa guide.