Security Intelligence

Close Protection in Central Asia: Security in Kazakhstan and the Region | CloseProtectionHire

Q: "Is close protection legal in Central Asian countries?"

"Close protection is legal in all five Central Asian states but operates within frameworks that vary significantly by country. Kazakhstan has the most developed private security sector: the Law on Private Security Activity (2000, with subsequent amendments) regulates private security companies, and licensed Kazakhstani companies can provide close protection to both domestic and foreign clients. Uzbekistan has reformed its private security regulations since 2016 as part of broader economic liberalisation -- licensed companies can operate but the sector remains heavily monitored by the State Security Service (SNB). Tajikistan and Kyrgyzstan have less formalised frameworks; international operators typically work through established local security providers or through diplomatic security coordination. Turkmenistan is the most restrictive -- private security operations for foreign clients exist primarily through state-approved channels. In all five countries, independent foreign close protection officers operating without a licensed local company are not legally compliant."

Q: "What is the main security threat for executives in Kazakhstan?"

"The principal security threat categories for executives in Kazakhstan are: political-commercial risk (business disputes that escalate to criminal proceedings, particularly where the counter-party has state connections -- Kazakhstan's judiciary is not independent of executive influence), protest and civil unrest (Zhanaozen 2011, Almaty protests January 2022 in which over 200 people were killed), authoritarian surveillance (the National Security Committee (KNB) monitors communications of foreign nationals, particularly those in sensitive commercial sectors), and the physical crime environment in Almaty (vehicle theft, robbery -- manageable with standard precautions). KFR risk for foreign executives in Kazakhstan is low by regional standards. The most significant risk for most corporate travellers is the legal and regulatory environment: a commercial dispute can become a criminal matter with detention of foreign nationals in circumstances that would not apply in Western jurisdictions. Pre-travel legal review for executives involved in active commercial disputes is strongly recommended."

Q: "What are the communications security requirements for Central Asia travel?"

"All five Central Asian states maintain surveillance infrastructure that monitors electronic communications of foreign nationals. Kazakhstan's KNB, Uzbekistan's SNB, Tajikistan's GKNB, Kyrgyzstan's GKNB, and Turkmenistan's MNB all have documented technical collection capabilities and legal authority (under national security laws) to access telecommunications data without judicial oversight equivalent to Western legal standards. The practical implication: assume that communications on local SIM cards, local hotel Wi-Fi, and standard email are monitored. For commercially sensitive discussions, E2EE communications (Signal or equivalent) on a pre-loaded SIM not registered to a corporate network provide meaningful protection. Full disk encryption on all devices is standard. Post-trip IT security assessment for devices used in Central Asia is recommended for executives carrying sensitive commercial information, particularly in sectors of specific state interest (energy, mining, telecommunications, financial services)."

Q: "How does the energy sector security environment in Kazakhstan compare with other P1 markets?"

"Kazakhstan's energy sector presents a distinct security profile compared to Gulf or West African energy markets. Physical security risk is lower than Nigeria's Niger Delta or Mozambique's Cabo Delgado by a significant margin -- there is no armed insurgency targeting energy infrastructure in Kazakhstan. The primary risks are operational and legal: FIFO (fly-in fly-out) programmes at projects like Tengizchevroil (TCO) and Kashagan create predictable personnel movements that are a surveillance target; commercial disputes involving energy assets can escalate to state intervention; and sanctions compliance (post-2022, Kazakhstan is a transit route for goods intended for Russia, creating secondary sanctions exposure for companies with both Kazakhstan and Russia-associated operations). The January 2022 Almaty protests, which originated in part from fuel price increases, demonstrated that energy sector companies are visible targets for civil unrest in periods of economic discontent."

Q: "What practical security measures are needed for a business trip to Almaty or Tashkent?"

"For a standard corporate trip to Almaty (Kazakhstan) or Tashkent (Uzbekistan): vetted ground transport from a pre-arranged provider (do not use unverified taxis at airport arrivals -- the kerb at Almaty International is a known approach point for overcharging and route manipulation); a clean device carrying only the data required for the trip; encrypted communications (Signal) for any commercially sensitive discussion; pre-trip research on the current political and commercial climate relevant to your specific sector; hotel selection at established international properties with professional security management; embassy registration (FCDO LOCATE service for UK nationals); and pre-agreed check-in protocols with your security manager or assistant. K\u0026R insurance is recommended for trips to the region, though the primary value is in the response service and pre-travel risk briefing rather than physical kidnap risk coverage. For operations in Tajikistan outside Dushanbe, or in any border areas (Afghanistan proximity in Tajikistan and Uzbekistan), the security assessment is materially more complex and professional security support is strongly recommended."

Security and close protection operations in Kazakhstan, Uzbekistan, Tajikistan, Kyrgyzstan, and Turkmenistan. Energy sector exposure, authoritarian surveillance, licensing frameworks, and operational planning for the post-Soviet space.

4 May 2026

Written by James Whitfield, Senior Security Consultant

Speak to the Team

Central Asia sits between Russia to the north, China to the east, and Afghanistan to the south. The five former Soviet republics – Kazakhstan, Uzbekistan, Tajikistan, Kyrgyzstan, and Turkmenistan – share a common political DNA: authoritarian governance, resource-extraction economies, security services that are continuations of Soviet-era structures, and a legal environment where commercial and political risk can overlap in ways that catch foreign operators off-guard.

For the energy, mining, and infrastructure sectors, Central Asia is unavoidable. Kazakhstan holds the world’s 12th-largest proven oil reserves and has attracted investment from Chevron, Shell, Total, BP, and Chinese national companies at a scale that generates significant executive travel. Uzbekistan’s post-Karimov reform trajectory has drawn new foreign investment. Tajikistan and Kyrgyzstan are relevant to extractive operations, hydropower projects, and NGO operations near the Afghan border.

This guide covers the security environment for each country, the operational requirements for corporate travellers and security providers, and the specific risk categories that distinguish Central Asia from other regions.

Kazakhstan

Kazakhstan is the economic and geographic centre of Central Asia – the largest country in the region, the most developed private security sector, and the most internationally connected commercial environment.

Threat profile. Physical security risk for foreign executives in Almaty and Astana is comparable to a mid-tier Eastern European city. KFR risk is low by regional standards. The primary threat categories are legal and political: commercial disputes involving Kazakhstani counter-parties with state connections can escalate to criminal proceedings and detention of foreign nationals. This is not a rare event – Control Risks and the US Embassy Almaty have documented multiple cases. Pre-travel legal review for executives involved in active commercial disputes in Kazakhstan is a security requirement.

January 2022. The civil unrest that began in January 2022 with fuel price protests and escalated to the deployment of a CSTO peacekeeping force (primarily Russian military) killed over 200 people and resulted in a temporary internet blackout and flight disruptions from Almaty. The event demonstrated that Kazakhstan’s political stability can deteriorate rapidly and that the state response includes communications suppression. Evacuation plans for Kazakhstan operations should not rely on commercial air travel and internet communications remaining available.

Communications. The KNB (National Security Committee) has legal access to telecommunications data. Encrypted communications (Signal) for commercially sensitive discussions and full disk encryption on devices are standard protocol for executives operating in sensitive sectors.

Licensing. The Law on Private Security Activity regulates licensed Kazakhstani private security companies. International operators work through licensed local partners. Independent foreign CPO operation is not legally compliant.

Uzbekistan

Uzbekistan’s reform trajectory since President Karimov’s death in 2016 has improved the business environment materially. The country has moved from near-total isolation to active foreign investment attraction, particularly in tourism, manufacturing, and agribusiness.

Threat profile. Tashkent is a manageable city for corporate travellers. Physical crime risk is low. The SNB (State Security Service) is active and monitors foreign nationals, particularly those in politically sensitive sectors (media, NGOs, legal services). Business disputes rarely escalate to the criminal dimensions seen in Kazakhstan, but the legal system remains executive-controlled and judicial independence is limited.

Practical. Vetted ground transport, clean devices, and encrypted communications are standard requirements. Hotel selection at established international properties. Embassy registration for nationals of countries with limited Uzbekistan consular presence.

Tajikistan

Threat profile. Dushanbe is the operating centre for most corporate activity. The city itself is manageable. The security environment becomes significantly more complex in Badakhshan (GBAO) and border areas – FCDO advises against all travel to the GBAO district borders with Afghanistan and China, and against all but essential travel to the broader Badakhshan region. The Tajik-Afghan border corridor carries trafficking and armed group activity spillover from the Afghan conflict.

Operations. Any operations outside Dushanbe require a detailed pre-trip security assessment. Local security support from a vetted Tajik company is required for field operations. The GKNB (State Committee for National Security) monitors foreign nationals with particular attention to those in border areas.

Kyrgyzstan

Threat profile. Kyrgyzstan has the most turbulent political history of the five states – three presidents have been removed by popular uprising (2005, 2010, 2020). The current environment in Bishkek is relatively stable but the pattern of rapid escalation from civil discontent to government change means contingency planning for political disruption is more relevant here than in Kazakhstan.

Practical. Anti-Western sentiment cycles with the political environment. Vetted ground transport and standard precautions are adequate for Bishkek business travel. The Kyrgyz GKNB has less comprehensive surveillance capability than Kazakhstani or Uzbek equivalents but the standard communications security protocols apply.

Turkmenistan

Threat profile. Turkmenistan is the most restricted operating environment in the region. It is consistently rated among the least free countries in the world by Freedom House. Foreign nationals are under sustained surveillance. Business operations occur primarily through state-approved channels. Independent activity outside sanctioned structures is exposed to state intervention.

Operations. Independent travel in Turkmenistan requires pre-approval and is monitored. Corporate travel occurs primarily in Ashgabat and in the energy sector’s Caspian facilities. CP operations for foreign clients work through state-adjacent channels – independent foreign operation is not viable. Pre-trip legal counsel and close engagement with the embassy of your nationality is mandatory.

Regional planning framework

For operations spanning multiple Central Asian countries, the planning framework covers:

Licensing. Each country has its own private security licensing framework. A licensed Kazakhstani company cannot legally operate in Uzbekistan. Multi-country operations require either separate licensed providers in each country or a regional operator with country-specific licensing across the footprint.

Ground transport. Vetted drivers are the minimum security layer for all five countries. Unverified taxis at airports and train stations in all major Central Asian cities are a known source of overcharging, route manipulation, and occasional robbery targeting foreign nationals.

Device and communications protocol. Clean devices, E2EE communications, and full disk encryption are standard across the region. Post-trip IT security assessment for devices used in Uzbekistan, Tajikistan, and Turkmenistan is recommended for executives carrying commercially sensitive data.

For energy sector security operations in other extractive markets, see our oil, gas, and energy sector security guide. For the close protection operating environment in Russia – which shares post-Soviet characteristics with Central Asia – see our close protection in Russia guide. For the South Caucasus states – Georgia, Armenia, and Azerbaijan – which sit between Central Asia and Europe and carry a distinct threat profile shaped by the Nagorno-Karabakh conflict legacy and Russian, Turkish, and Western competing influence, see our close protection in the Caucasus guide. For the close protection environments in South Asia – Bangladesh, Sri Lanka, and Nepal, each with distinct threat profiles, unarmed operating constraints, and MEDEVAC planning requirements – see our close protection in South Asia guide.

Sources

FCDO: Foreign Travel Advice for Kazakhstan, Uzbekistan, Tajikistan, Kyrgyzstan, Turkmenistan, April 2026. US State Department: Travel Advisories for Central Asian States, 2025. Control Risks: RiskMap 2025 – Central Asia Chapter. OSAC: Kazakhstan Security Report 2024, Uzbekistan Security Report 2024. Freedom House: Freedom in the World 2025 – Central Asia. Transparency International: Corruption Perceptions Index 2024. Human Rights Watch: World Report 2025 – Central Asia Chapters. ACLED: Central Asia Political Violence Dataset, 2024.

Summary

Key takeaways

The primary risk in Central Asia is legal and commercial, not physical violence

Central Asia's security environment for most foreign business travellers is characterised by manageable physical risk and significant legal and political risk. A business dispute that goes wrong, a commercial transaction that involves a politically connected counter-party, or a regulatory investigation in the energy sector can rapidly acquire criminal dimensions in ways that are not predictable from a Western legal framework. Pre-travel legal review, engagement with experienced in-country counsel, and careful due diligence on commercial partners are the highest-priority risk mitigations for most Central Asia operations.

Communications assume monitoring in all five Central Asian states

The national security laws of Kazakhstan, Uzbekistan, Tajikistan, Kyrgyzstan, and Turkmenistan all provide their respective security services with access to telecommunications data without judicial oversight equivalent to Western standards. This is not a speculative risk -- it is a documented feature of the operating environment. The communications security protocol for Central Asia is the same as for China and Russia: clean devices, E2EE messaging, and the assumption that locally generated traffic is accessible to the state.

January 2022 demonstrated that Kazakhstan's stability is not guaranteed

The January 2022 protests in Kazakhstan began with fuel price increases and escalated into the most significant civil unrest in the country's post-Soviet history, with over 200 people killed and a Russian-led CSTO military intervention. The speed of escalation from economic grievance to armed conflict, and the government's response (internet blackout, CSTO deployment), has material implications for contingency planning. Corporate travellers and operators with Kazakhstan exposure should have an evacuation plan that does not depend on commercial air travel from Almaty remaining operational.

Vetted local security providers are essential -- independent foreign CP is not legally compliant

Independent foreign close protection officers operating in Central Asia without a licensed local company are in breach of private security legislation in all five countries. The correct operating model is a partnership with an established licensed local provider who can provide vetted personnel, local intelligence, and legal coverage. The quality gap between local providers is significant -- vetting methodology, not marketing materials, is the selection criterion. Providers with demonstrable energy sector or diplomatic mission experience in the country are the appropriate reference point.

FIFO predictability in Kazakhstan's energy sector is a documented surveillance target

Fly-in fly-out personnel movements at major energy projects -- Tengizchevroil, Kashagan, Karachaganak -- follow highly predictable patterns. The same personnel, the same routes, the same transit points, on recurring cycles. This predictability is the precursor to most security incidents involving energy sector personnel globally. Route and schedule variation where operationally possible, counter-surveillance discipline at transit points, and varied accommodation between rotations are baseline countermeasures.

FAQ

Frequently Asked Questions

Close protection is legal in all five Central Asian states but operates within frameworks that vary significantly by country. Kazakhstan has the most developed private security sector: the Law on Private Security Activity (2000, with subsequent amendments) regulates private security companies, and licensed Kazakhstani companies can provide close protection to both domestic and foreign clients. Uzbekistan has reformed its private security regulations since 2016 as part of broader economic liberalisation – licensed companies can operate but the sector remains heavily monitored by the State Security Service (SNB). Tajikistan and Kyrgyzstan have less formalised frameworks; international operators typically work through established local security providers or through diplomatic security coordination. Turkmenistan is the most restrictive – private security operations for foreign clients exist primarily through state-approved channels. In all five countries, independent foreign close protection officers operating without a licensed local company are not legally compliant.

The principal security threat categories for executives in Kazakhstan are: political-commercial risk (business disputes that escalate to criminal proceedings, particularly where the counter-party has state connections – Kazakhstan’s judiciary is not independent of executive influence), protest and civil unrest (Zhanaozen 2011, Almaty protests January 2022 in which over 200 people were killed), authoritarian surveillance (the National Security Committee (KNB) monitors communications of foreign nationals, particularly those in sensitive commercial sectors), and the physical crime environment in Almaty (vehicle theft, robbery – manageable with standard precautions). KFR risk for foreign executives in Kazakhstan is low by regional standards. The most significant risk for most corporate travellers is the legal and regulatory environment: a commercial dispute can become a criminal matter with detention of foreign nationals in circumstances that would not apply in Western jurisdictions. Pre-travel legal review for executives involved in active commercial disputes is strongly recommended.

All five Central Asian states maintain surveillance infrastructure that monitors electronic communications of foreign nationals. Kazakhstan’s KNB, Uzbekistan’s SNB, Tajikistan’s GKNB, Kyrgyzstan’s GKNB, and Turkmenistan’s MNB all have documented technical collection capabilities and legal authority (under national security laws) to access telecommunications data without judicial oversight equivalent to Western legal standards. The practical implication: assume that communications on local SIM cards, local hotel Wi-Fi, and standard email are monitored. For commercially sensitive discussions, E2EE communications (Signal or equivalent) on a pre-loaded SIM not registered to a corporate network provide meaningful protection. Full disk encryption on all devices is standard. Post-trip IT security assessment for devices used in Central Asia is recommended for executives carrying sensitive commercial information, particularly in sectors of specific state interest (energy, mining, telecommunications, financial services).

Kazakhstan’s energy sector presents a distinct security profile compared to Gulf or West African energy markets. Physical security risk is lower than Nigeria’s Niger Delta or Mozambique’s Cabo Delgado by a significant margin – there is no armed insurgency targeting energy infrastructure in Kazakhstan. The primary risks are operational and legal: FIFO (fly-in fly-out) programmes at projects like Tengizchevroil (TCO) and Kashagan create predictable personnel movements that are a surveillance target; commercial disputes involving energy assets can escalate to state intervention; and sanctions compliance (post-2022, Kazakhstan is a transit route for goods intended for Russia, creating secondary sanctions exposure for companies with both Kazakhstan and Russia-associated operations). The January 2022 Almaty protests, which originated in part from fuel price increases, demonstrated that energy sector companies are visible targets for civil unrest in periods of economic discontent.

For a standard corporate trip to Almaty (Kazakhstan) or Tashkent (Uzbekistan): vetted ground transport from a pre-arranged provider (do not use unverified taxis at airport arrivals – the kerb at Almaty International is a known approach point for overcharging and route manipulation); a clean device carrying only the data required for the trip; encrypted communications (Signal) for any commercially sensitive discussion; pre-trip research on the current political and commercial climate relevant to your specific sector; hotel selection at established international properties with professional security management; embassy registration (FCDO LOCATE service for UK nationals); and pre-agreed check-in protocols with your security manager or assistant. K&R insurance is recommended for trips to the region, though the primary value is in the response service and pre-travel risk briefing rather than physical kidnap risk coverage. For operations in Tajikistan outside Dushanbe, or in any border areas (Afghanistan proximity in Tajikistan and Uzbekistan), the security assessment is materially more complex and professional security support is strongly recommended.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.