Security Intelligence

Close Protection in East Africa: Kenya, Tanzania, Uganda and Rwanda | CloseProtectionHire

Q: "What is the al-Shabaab threat to Kenya and Tanzania?"

"Al-Shabaab (Harakat al-Shabaab al-Mujahideen), the Somali Islamist militant group, has carried out multiple significant attacks in Kenya and poses a lower but documented threat in Tanzania. The key Kenya attacks: Westgate Mall, Nairobi (September 2013 -- 67 killed, 4-day siege); Garissa University College (April 2015 -- 148 killed, specifically targeted non-Muslim students); DusitD2 hotel and office complex, Nairobi (January 2019 -- 21 killed). The pattern shows a shift from mass-casualty spectacular attacks to targeted, complex assaults on hotels, commercial centres, and institutions that have Western or Kenyan government associations. In Tanzania, the threat is lower but not absent -- the 1998 US embassy bombing in Dar es Salaam (which killed 11 people alongside the Nairobi bombing) and a small number of improvised device incidents since 2015 establish Tanzania as a secondary risk environment. FCDO maintains an enhanced terrorist threat level for Kenya."

Q: "Is Nairobi safe for business travel?"

"Nairobi is a functioning commercial capital and one of the most significant business hubs in sub-Saharan Africa. It is the regional headquarters for numerous international organisations, the UN Environment Programme (UNEP), and the UN Office for the Human Environment. The security environment for business visitors is manageable with appropriate protocols, but is not equivalent to a low-risk environment. The specific risks are: armed robbery and express kidnap (particularly at ATMs, in traffic on approach roads, and in unlit areas at night), carjacking on airport and city roads (especially Tom Mboya Street approach and the Mombasa Road corridor), and the terrorist threat described above. Nairobi's security posture has improved significantly since the DusitD2 attack in 2019 -- anti-terrorism police responses are faster, key commercial venues have improved security, and awareness of complex attack indicators is higher. But the underlying threat environment has not been eliminated."

Q: "What are the security considerations for safari and wildlife tourism security in East Africa?"

"Safari and wildlife tourism in East Africa -- Kenya's Maasai Mara/Amboseli/Tsavo, Tanzania's Serengeti/Ngorongoro/Ruaha, and comparable wildlife destinations -- creates a specific risk profile. The relevant considerations are: remoteness from emergency services (helicopter evacuation from major wildlife areas takes 30-90 minutes minimum, ground evacuation hours); natural hazard (game drive vehicles and walking safari guests are in environments with dangerous wildlife -- the risk is mitigated by experienced guides and rangers, but not eliminated); the limited capacity of local medical facilities (AMREF Flying Doctors and African Air Rescue provide the primary emergency medical evacuation capability in the region); communications infrastructure (mobile coverage is minimal in most wildlife areas; satellite phone or SPOT device is a planning requirement for executive-level visits); and, in northern Kenya wildlife areas (particularly Samburu/Laikipia/Isiolo regions), a secondary banditry/cattle rustling conflict that creates a different threat from al-Shabaab."

Q: "What close protection regulations apply in Kenya and Tanzania?"

"Kenya's private security sector is regulated under the Private Security Regulation Authority (PSRA), established by the Private Security (Regulation) Act 2016. The PSRA licenses private security companies and their employees. Armed close protection requires specific licensing from the PSRA; armed security in Kenya must be provided by a PSRA-licensed company. In Tanzania, the Security Industry Authority (SITA) regulates private security under the Private Security Industry Act, Chapter 249. Foreign security operators cannot legally provide armed protection in either country on a standard commercial assignment -- a licensed local partner is required. The quality of PSRA and SITA-licensed operators varies considerably, and vetting beyond licence verification is required for any serious assignment."

Q: "What is the security environment in Uganda and Rwanda for executive travel?"

"Uganda and Rwanda have distinct security profiles. Rwanda under President Kagame has one of the most stable surface security environments in East Africa -- Kigali is genuinely low-crime, the Rwanda Investigation Bureau (RIB) has effective street-level presence, and tourist and business infrastructure is developed. The specific risks in Rwanda are: the authoritarian political environment (opposition activists and critics of the government face significant risk, and foreign nationals associated with critical civil society organisations or journalism should maintain profile awareness), and the eastern DRC border security situation (Goma/eastern Congo is a conflict zone; the Rwanda-DRC border requires specific assessment). Uganda presents more conventional East African business travel risk: Kampala moderate crime, road security on approaches, alcohol-related incidents in hospitality districts, and a FCDO-flagged risk in areas near the DRC border, the Rwenzori region, and parts of the north."

Close protection across East Africa: Kenya, Tanzania, Uganda, and Rwanda. Al-Shabaab cross-border threat, attack history, safari security, regional CP framework, and Nairobi operational planning.

4 May 2026

Written by James Whitfield

Speak to the Team

East Africa is one of the most significant commercial regions in sub-Saharan Africa and carries a security profile that demands more than standard awareness protocols. Nairobi is a P1 city – with documented kidnap for ransom, carjacking, and a sustained al-Shabaab terrorist threat. The wider region includes Tanzania (Dar es Salaam and the Serengeti), Uganda (Kampala and the DRC border corridor), and Rwanda (Kigali, genuinely stable but politically sensitive).

This guide covers the current threat environment across the region, the specific considerations for business travel and close protection assignments, and the regional planning framework.

Kenya: The Nairobi Threat Environment

Kenya’s security landscape is shaped by two intersecting risk currents: conventional urban crime and the persistent al-Shabaab threat that has produced three major attacks on Nairobi targets since 2013.

Conventional crime risk in Nairobi: Armed robbery, carjacking, and express kidnap are the primary daily risks for business visitors. The highest-risk moments are: ATM use in unsecured locations, travel on approach roads at night (particularly the Mombasa Road corridor to Jomo Kenyatta International Airport and the airport itself), movement in areas adjacent to informal settlements (Mathare, Mukuru, Kibera), and unprotected movement in commercial areas after dark. Vehicle selection matters – locally sourced vehicles in neutral, non-commercial colours, with tinted windows where permitted, reduce profile. Dedicated security drivers, not hotel-arranged taxis, are the appropriate standard for high-profile executive visits.

The al-Shabaab threat pattern:

Three attacks define the current threat model:

Westgate Mall, September 2013: Gunmen from al-Shabaab occupied the upscale Westgate Shopping Centre for four days. 67 people were killed. The attack specifically targeted a venue with high international and Kenyan middle-class patronage. It established the complex attack-on-commercial-venue model that the group has repeated.

Garissa University College, April 2015: Four gunmen attacked the university campus, specifically separating Muslim from non-Muslim students and executing the latter. 148 students were killed. The attack targeted the institutional embodiment of Western-style education in a border-proximate region.

DusitD2 Complex, January 2019: Attackers struck the DusitD2 hotel and 14 Riverside Drive office complex – a venue housing multiple international NGOs, embassies, and businesses. 21 people were killed. The attack demonstrated an evolved intelligence capability: the attackers exploited knowledge of the complex’s internal layout, security procedures, and the profile of occupant organisations.

The attack pattern shows deliberate selection of venues that represent Western commercial, educational, or international presence in Nairobi. Standard mitigation: vary arrival/departure times at international hotels, avoid lingering at main hotel entrances, maintain awareness of entry points and emergency exits in any commercial venue, apply counter-surveillance protocols on approach routes.

Northern Kenya: FCDO advises against all travel within 60km of the Somali border and against all but essential travel to parts of North-Eastern Province, parts of Lamu County, and the Tana River area. These advisories reflect active al-Shabaab cross-border infiltration and separate banditry/armed conflict dynamics in Laikipia and Samburu counties. Operations in Garissa, Mandera, Wajir, and comparable counties require specialist operators with current local intelligence.

Tanzania

Tanzania’s security environment is meaningfully calmer than Kenya’s for standard business visitors. Dar es Salaam functions as an accessible commercial capital. Arusha is the gateway to the Serengeti and northern circuit wildlife destinations.

The specific risk factors for Tanzania are: petty crime in Dar es Salaam (mobile phone theft, bag snatching in commercial areas), road safety (one of the higher road traffic death rates in Africa – WHO data), the tourist economy crime pattern in Zanzibar (targeting of tourists on beaches, ATM crime), and the residual jihadist threat. Tanzania has had improvised device incidents and a small number of targeted attacks on Kenyan and Tanzanian security personnel attributed to groups linked to al-Shabaab or affiliated networks since 2015. FCDO maintains a general terrorism awareness advisory for Tanzania.

Safari operations: See the planning notes in the FAQ above. Wildlife area visits for executive principals require pre-arranged AMREF Flying Doctors or equivalent MEDEVAC cover, satellite communications capability, and a clear protocol for medical emergencies. The experience of a wildlife area visit is, by design, remote and disconnected. The security planning must account for this remoteness before departure, not as a reaction to it.

Uganda

Kampala is a functional commercial capital with a developing infrastructure for international business. The specific risks are: moderate urban crime (street robbery, vehicle crime on approach roads, mugging in restaurant and bar areas at night), road safety (poor road conditions and accident risk on upcountry routes), and security concerns in specific regions.

FCDO advises against all travel within 10km of the DRC border in western Uganda (armed group activity, cross-border conflict spillover), to areas of eastern DRC accessible from Uganda, and against all but essential travel to areas of Kasese District. The capital Kampala and the main business infrastructure is not subject to these advisories.

Uganda’s close protection regulatory framework is less developed than Kenya’s. Security provision quality varies considerably. Any executive assignment should involve pre-vetted local providers with verifiable track record on comparable assignments.

Rwanda

Rwanda’s security environment at street level in Kigali is genuinely different from most East African capitals. President Kagame’s administration has maintained effective law enforcement and low street crime. The Rwanda Investigation Bureau (RIB) has visible presence. For standard corporate visitors, Kigali is one of the most comfortable operating environments in sub-Saharan Africa.

The specific risk layer is the authoritarian political context. Rwandan law has broad provisions around genocide ideology and divisionism that have been applied against opposition figures, journalists, and critics of the government. Foreign nationals associated with Rwandan civil society organisations critical of the government, diaspora political networks, or international human rights reporting on Rwanda should obtain specific legal and security advice before travel. The treatment of opposition politicians including Victoire Ingabire Umuhoza and Paul Rusesabagina – the latter arrested on terrorism charges in 2020 after being lured to Kigali – illustrates the specific risk profile for certain visitor categories.

The DRC border situation is separately relevant: eastern DRC (North Kivu, South Kivu) remains an active conflict zone, and the Rwanda-DRC tension – including documented Rwandan military involvement in eastern DRC per UN Group of Experts reports – makes the border region a materially elevated security environment.

For the close protection operating framework across the wider African continent, see our close protection Africa operations guide. For the specific threat environment in the Horn of Africa – Ethiopia, Djibouti, Somalia – see our close protection in the Horn of Africa guide.

Sources

FCDO: Travel Advice Kenya, Tanzania, Uganda, Rwanda – April 2026. US State Department: Travel Advisories East Africa 2025. OSAC: Kenya Security Report 2024, Tanzania Security Report 2024, Uganda Security Report 2024, Rwanda Security Report 2024. Control Risks RiskMap 2025. ACLED: East Africa Political Violence Dataset 2025-2026. UN Group of Experts: DRC/Rwanda Report 2025. AMREF Flying Doctors: Service Coverage East Africa 2024. WHO: Road Traffic Deaths by Country 2024. Freedom House: Freedom in the World 2025 – Kenya, Tanzania, Uganda, Rwanda. Human Rights Watch: World Report 2025 – East Africa. NaCTSO/FCDO: Kenya Enhanced Terrorism Threat Level Assessment 2024. Kenya PSRA: Private Security Regulation Authority Licensing Register 2024.

James Whitfield is a Senior Security Consultant with 20 years of experience in close protection and security risk management across East and sub-Saharan Africa.

Summary

Key takeaways

Nairobi is East Africa's premier business hub and carries a genuine, documented terrorist threat that requires active security planning

The Westgate (2013), Garissa (2015), and DusitD2 (2019) attacks are not historical anomalies -- they are data points in an active al-Shabaab campaign against Kenyan targets. Business visitors to Nairobi should apply venue security awareness, avoid predictable patterns near international hotels, and have a current emergency contact plan.

The al-Shabaab threat profile in Kenya specifically targets hotels, commercial centres, and institutions with Western associations

The attack target selection pattern from 2013-2019 shows deliberate selection of venues where the victim profile (international, Western, non-Muslim, NGO/government affiliated) matches the group's targeting criteria. Business visitors who stay at international branded hotels, use international-branded commercial facilities, or have visible NGO/government associations carry a higher profile than general tourists.

East African safari environments carry significant remoteness risk requiring specific medical evacuation planning

AMREF Flying Doctors (based in Nairobi) and African Air Rescue are the primary MEDEVAC providers for the region. Executive visits to wildlife areas should have AMREF membership or equivalent MEDEVAC cover confirmed before departure. The gap between incident and hospital care in the Serengeti or Tsavo is measured in hours, not minutes.

Rwanda is genuinely low-crime at street level but carries specific risk for anyone associated with political opposition or critical civil society

Kigali's surface stability is real and documented. The specific risk layer -- authoritarian political context, targeted treatment of opposition figures -- is largely invisible to standard corporate visitors but directly relevant for anyone with connections to Rwandan civil society, diaspora political networks, or human rights organisations.

East Africa's regional CP framework requires country-by-country operator vetting -- there is no single-provider regional solution

A licensed Kenyan security company cannot legally operate in Tanzania or Uganda. A Rwanda-based provider cannot operate in Kenya. Each country requires a licensed local partner vetting process. Organisations planning multi-country East Africa itineraries should plan the operator vetting timeline accordingly -- this cannot be done in 24 hours.

FAQ

Frequently Asked Questions

Al-Shabaab (Harakat al-Shabaab al-Mujahideen), the Somali Islamist militant group, has carried out multiple significant attacks in Kenya and poses a lower but documented threat in Tanzania. The key Kenya attacks: Westgate Mall, Nairobi (September 2013 – 67 killed, 4-day siege); Garissa University College (April 2015 – 148 killed, specifically targeted non-Muslim students); DusitD2 hotel and office complex, Nairobi (January 2019 – 21 killed). The pattern shows a shift from mass-casualty spectacular attacks to targeted, complex assaults on hotels, commercial centres, and institutions that have Western or Kenyan government associations. In Tanzania, the threat is lower but not absent – the 1998 US embassy bombing in Dar es Salaam (which killed 11 people alongside the Nairobi bombing) and a small number of improvised device incidents since 2015 establish Tanzania as a secondary risk environment. FCDO maintains an enhanced terrorist threat level for Kenya.

Nairobi is a functioning commercial capital and one of the most significant business hubs in sub-Saharan Africa. It is the regional headquarters for numerous international organisations, the UN Environment Programme (UNEP), and the UN Office for the Human Environment. The security environment for business visitors is manageable with appropriate protocols, but is not equivalent to a low-risk environment. The specific risks are: armed robbery and express kidnap (particularly at ATMs, in traffic on approach roads, and in unlit areas at night), carjacking on airport and city roads (especially Tom Mboya Street approach and the Mombasa Road corridor), and the terrorist threat described above. Nairobi’s security posture has improved significantly since the DusitD2 attack in 2019 – anti-terrorism police responses are faster, key commercial venues have improved security, and awareness of complex attack indicators is higher. But the underlying threat environment has not been eliminated.

Safari and wildlife tourism in East Africa – Kenya’s Maasai Mara/Amboseli/Tsavo, Tanzania’s Serengeti/Ngorongoro/Ruaha, and comparable wildlife destinations – creates a specific risk profile. The relevant considerations are: remoteness from emergency services (helicopter evacuation from major wildlife areas takes 30-90 minutes minimum, ground evacuation hours); natural hazard (game drive vehicles and walking safari guests are in environments with dangerous wildlife – the risk is mitigated by experienced guides and rangers, but not eliminated); the limited capacity of local medical facilities (AMREF Flying Doctors and African Air Rescue provide the primary emergency medical evacuation capability in the region); communications infrastructure (mobile coverage is minimal in most wildlife areas; satellite phone or SPOT device is a planning requirement for executive-level visits); and, in northern Kenya wildlife areas (particularly Samburu/Laikipia/Isiolo regions), a secondary banditry/cattle rustling conflict that creates a different threat from al-Shabaab.

Kenya’s private security sector is regulated under the Private Security Regulation Authority (PSRA), established by the Private Security (Regulation) Act 2016. The PSRA licenses private security companies and their employees. Armed close protection requires specific licensing from the PSRA; armed security in Kenya must be provided by a PSRA-licensed company. In Tanzania, the Security Industry Authority (SITA) regulates private security under the Private Security Industry Act, Chapter 249. Foreign security operators cannot legally provide armed protection in either country on a standard commercial assignment – a licensed local partner is required. The quality of PSRA and SITA-licensed operators varies considerably, and vetting beyond licence verification is required for any serious assignment.

Uganda and Rwanda have distinct security profiles. Rwanda under President Kagame has one of the most stable surface security environments in East Africa – Kigali is genuinely low-crime, the Rwanda Investigation Bureau (RIB) has effective street-level presence, and tourist and business infrastructure is developed. The specific risks in Rwanda are: the authoritarian political environment (opposition activists and critics of the government face significant risk, and foreign nationals associated with critical civil society organisations or journalism should maintain profile awareness), and the eastern DRC border security situation (Goma/eastern Congo is a conflict zone; the Rwanda-DRC border requires specific assessment). Uganda presents more conventional East African business travel risk: Kampala moderate crime, road security on approaches, alcohol-related incidents in hospitality districts, and a FCDO-flagged risk in areas near the DRC border, the Rwenzori region, and parts of the north.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.