Security Intelligence

Close Protection in Southeast Asia | CloseProtectionHire

Q: "Which Southeast Asian country carries the highest executive security risk?"

"The Philippines and Myanmar carry the highest overall executive security risk in the region. The Philippines has documented KFR activity targeting business figures in Mindanao and some Metro Manila contexts, combined with political violence and a high-firearm environment. Myanmar is a military-controlled state in an active conflict with severe restrictions on movement and communications. Indonesia and Thailand carry elevated but more manageable risk profiles for standard business travel. Vietnam, Malaysia, and Singapore are substantially lower risk."

Q: "Is close protection necessary for business travel to Thailand?"

"For most business travel to Bangkok and major commercial centres, close protection is not routinely required. The primary risks for executives in Thailand are opportunistic crime, road safety (Thailand has one of the highest road traffic fatality rates in the world -- WHO data puts it at 32.7 deaths per 100,000 population), and the political environment during periods of instability. A security driver with local knowledge is appropriate for most executive visits. Full close protection is appropriate when the threat assessment identifies a specific personal or corporate threat, or when travel includes provinces in the Deep South (Pattani, Yala, Narathiwat, Songkhla) where an insurgency involving IED use is active."

Q: "What are the security risks for executives in the Philippines?"

"Kidnap for ransom is the primary executive security concern in the Philippines, particularly in Mindanao. The Abu Sayyaf Group (ASG) and criminal kidnapping networks operating in Basilan, Sulu, and the Zamboanga Peninsula have a documented history of targeting foreign nationals and local business figures. In Metro Manila, express kidnapping and robbery targeting of executives in transit is the principal threat. OSAC Philippines advisories consistently rate kidnapping as the primary risk for business travellers."

Q: "Can foreign nationals carry firearms for close protection in Southeast Asia?"

"No, with extremely limited exceptions. Civilian firearm carry by foreign nationals is prohibited or heavily restricted across all Southeast Asian jurisdictions. Indonesia, Thailand, Vietnam, Malaysia, and the Philippines all require specific licensing for armed security operations, and these licences are generally available only to registered local security companies. Unarmed close protection is the standard operating model for international CP operations in the region. Where armed protection is warranted by the threat assessment, it must be provided by licensed local operators, not by foreign CPOs."

Q: "What is the security environment in Vietnam for foreign executives?"

"Vietnam presents a relatively stable security environment for foreign executives by regional standards. Violent crime targeting foreigners is uncommon in major commercial centres (Hanoi, Ho Chi Minh City, Da Nang). The primary concerns are petty crime, road safety, and the political and legal environment -- Vietnam is a one-party state with a security apparatus that monitors foreign business activity, particularly in sensitive sectors. Cybersecurity risks from state-affiliated threat actors are documented. Full close protection is rarely required for standard commercial operations; a vetted security driver and pre-travel briefing are the appropriate baseline."

Executive security in Southeast Asia spans six distinct threat environments. A senior consultant's guide to close protection in the Philippines, Indonesia, Thailand, Vietnam, Malaysia, and Myanmar.

1 May 2026

Written by James Whitfield, Senior Security Consultant

Speak to the Team

Southeast Asia is not a single security environment. A close protection deployment in Manila requires a different operational framework from one in Bangkok, and both are different from an assignment in Yangon. The six principal commercial markets in the region – Philippines, Indonesia, Thailand, Vietnam, Malaysia, and Myanmar – present distinct threat profiles, regulatory environments for armed operations, and cultural context for protective security.

This guide covers the executive security environment in each market and the close protection considerations for corporate travellers and resident executives.

Philippines

The Philippines carries the highest KFR risk in Southeast Asia for business executives, concentrated in Mindanao and the southern island groups but with urban express kidnapping documented in Metro Manila.

Kidnap for ransom in Mindanao. The Abu Sayyaf Group (ASG) and affiliated criminal kidnapping networks operating in Basilan, Sulu, Tawi-Tawi, and the Zamboanga Peninsula have a sustained operational history of targeting foreign nationals and local business figures. The US State Department rates portions of Mindanao at Level 4 (Do Not Travel) due to terrorism and kidnapping. OSAC Philippines security reports consistently identify KFR as the primary threat for foreign business travellers with operations in the south.

For executives with business interests in Mindanao, full close protection with a K&R policy is not optional. The CP team must include operators with specific knowledge of the Philippine kidnap environment – not generic regional operators. The operational model should account for ASG boat-based interception operations, which have historically involved the seizure of vessels crossing between islands.

Metro Manila. Express kidnapping (sequestro) – short-duration kidnapping for immediate cash payment – is documented in Manila, targeting individuals perceived as wealthy or foreign. The threat is concentrated in transit (taxis, rideshare, vehicle interception at traffic stops) and in nightlife areas. A vetted, known driver and avoidance of unregulated transportation reduces the primary exposure vector.

Armed close protection is legally possible in the Philippines through licensed local security providers. The Philippine National Police Supervisory Office for Security and Investigation Agencies (SOSIA) regulates private security companies; armed CPOs must be Philippine nationals licensed under the Security Service Act (Republic Act 5487 as amended).

Political violence. Elections in the Philippines are associated with politically motivated violence. OSAC Philippines advisories flag election periods as elevated-risk windows for both Filipino political figures and foreign executives perceived as commercially or politically connected to contested interests.

Indonesia

Indonesia presents a more diffuse security picture than the Philippines. The archipelago’s 17,000+ islands and multiple distinct regional environments create a threat mosaic rather than a single country profile.

Jakarta and major commercial centres. Standard business travel to Jakarta, Bali, Surabaya, and Makassar operates within a manageable risk framework. Crime, road conditions, and natural disaster risk (Indonesia lies on the Pacific Ring of Fire) are the primary concerns rather than targeted executive threat. A security driver with defensive driving capability is the appropriate baseline for executive travel.

Terrorism. Indonesia has experienced significant terrorist attacks with domestic and international casualties: the 2002 and 2005 Bali bombings, the 2003 Marriott Jakarta bombing, and a series of subsequent smaller-scale attacks. Jemaah Islamiyah (JI) as an organisation has been substantially degraded through Indonesian Police (Densus 88) counter-terrorism operations, but affiliated networks remain active. The threat to Western commercial interests is lower than at its peak but has not been eliminated. OSAC Indonesia and FCDO advisories maintain a watch on terrorist activity.

Papua and conflict-affected regions. The Free Papua Movement (OPM/TPNPB) has conducted armed attacks against contractors and government personnel in Papua Province. Extractive industry operations in Papua require specialist security planning, not standard business travel protocols. This is an active armed conflict environment in which close protection requirements are substantially higher than in the rest of Indonesia.

Regulatory environment. Armed security operations require a licence from the Indonesian National Police (Polri). International CPOs cannot operate armed in Indonesia; armed elements must be Indonesian nationals from a licensed provider.

Thailand

Thailand’s threat profile for business executives is shaped by two distinct factors: the country’s exceptional road danger and the southern insurgency.

Road risk. WHO Global Status Report on Road Safety 2023 places Thailand among the world’s highest road traffic fatality rates at 32.7 deaths per 100,000 population. For the majority of executive visits to Thailand, a competent, trained security driver with defensive driving skills reduces the statistically most significant risk more directly than any other security measure. This is not a peripheral point – road incidents cause more harm to business travellers in Thailand than crime.

Southern insurgency. A separatist insurgency has operated in Thailand’s four southernmost provinces – Pattani, Yala, Narathiwat, and Songkhla – since 2004. IED attacks, shootings targeting Buddhist civilians, government officials, and security forces, and arson are documented. FCDO and OSAC advisories advise against all but essential travel to these provinces. For executives with business in these provinces (rubber, palm oil, manufacturing), close protection with specific insurgency awareness training is required.

Political environment. Thailand has experienced multiple military coups (most recently 2014) and periodic political unrest. The lese-majeste law (Section 112 of the Criminal Code) creates legal risk for foreign nationals who make public comments about the monarchy. Executives should receive a pre-travel legal and cultural briefing for Thai operations.

Bangkok. For standard commercial travel to Bangkok and tourist-economy areas, the risk profile is manageable without close protection. The primary threats are opportunistic crime, transport safety, and the legal risks associated with Thailand’s specific regulatory environment.

Vietnam

Vietnam presents a substantially different security profile from the Philippines or Indonesia. Violent crime targeting foreign executives is uncommon. The security risks that require management are political and legal rather than physical.

State surveillance. Vietnam is a one-party state governed by the Communist Party of Vietnam (CPV). The Ministry of Public Security (MPS) maintains surveillance of foreign business activity, particularly in sectors perceived as strategically significant or politically sensitive – telecommunications, media, fintech, and extractive industries. Meetings should be conducted with awareness that communications may be monitored. The NCSC has documented Vietnamese state-affiliated threat actors (APT32, OceanLotus/APT-C-00) conducting cyber espionage operations against foreign businesses with Vietnamese interests.

Legal risk. Vietnamese law includes provisions that create legal exposure for foreign nationals: commercial disputes may be handled through administrative processes that restrict departure (exit bans, document seizure), and commercial fraud allegations can result in detention. Pre-travel legal briefing on contractual and compliance risk is appropriate for executives with significant commercial exposure.

Physical security baseline. A vetted security driver for ground transport is the appropriate baseline for executive visits. Full close protection is not routinely required for commercial travel in Hanoi or Ho Chi Minh City.

Malaysia

Malaysia is the most straightforward commercial security environment in Southeast Asia for most executive purposes. Kuala Lumpur and the major commercial centres present a manageable risk profile without requiring close protection for standard business travel.

Primary concerns are opportunistic crime (including snatch theft), road safety, and occasional civil unrest associated with political events or communal tensions. A security driver and standard travel security awareness are appropriate for most executive visits.

For executives with operations in Sabah (Borneo), note that OSAC and FCDO advisories flag the eastern coastal areas of Sabah (particularly around Lahad Datu and Semporna) as areas of residual KFR risk linked to Abu Sayyaf maritime operations crossing from the Philippines.

Myanmar

Myanmar is categorically different from the other Southeast Asian markets discussed here. Following the military coup of February 2021 and the suppression of the subsequent protest movement, Myanmar is an active conflict zone.

The Tatmadaw (military junta, now the State Administrative Council) is engaged in armed conflict with the People’s Defence Force (PDF), ethnic armed organisations, and multiple resistance groups across the country. Airstrikes on civilian areas, arbitrary detention, communications blackouts, and road closures are ongoing. FCDO advises against all but essential travel to the majority of the country; all non-essential travel to Yangon and major cities should be carefully assessed.

Foreign executives with operations in Myanmar should assume that communications are monitored, that freedom of movement is restricted and unpredictable, and that the legal framework offers minimal protection against arbitrary state action. Close protection in Myanmar requires operators with specific experience of the current junta environment – the pre-2021 operational framework is entirely obsolete.

For executives operating in China, where a distinct legal framework governs foreign close protection and state surveillance creates specific digital security requirements, see our close protection in China guide. For the regional security context that frames Southeast Asia operations, see our close protection Asia-Pacific guide. For KFR insurance that covers the Philippines and Indonesia specifically, see our kidnap and ransom insurance guide. For the risk assessment methodology that determines the appropriate security level for a specific executive in a specific market, see our security risk assessment guide. For Australia and New Zealand – at the lower-risk end of the Asia-Pacific spectrum but with specific threat considerations – see our close protection in Australia and New Zealand guide.

Sources

OSAC Philippines Security Report 2024, Overseas Security Advisory Council. OSAC Indonesia Security Report 2024. OSAC Thailand Security Report 2024. FCDO Foreign Travel Advice: Philippines, Indonesia, Thailand, Vietnam, Malaysia, Myanmar, 2025. WHO Global Status Report on Road Safety 2023, World Health Organization. US State Department Travel Advisories: Southeast Asia, 2025. Control Risks RiskMap 2025: Southeast Asia. UNODC Global Study on Homicide 2023. NCSC: APT32/OceanLotus Threat Actor Profile, National Cyber Security Centre, 2023. Human Rights Watch: World Report 2025 – Myanmar, Indonesia, Thailand, Philippines chapters.

Summary

Key takeaways

Southeast Asia is six distinct threat environments, not one

The Philippines has active KFR risk. Myanmar is a conflict zone under military rule. Thailand has a persistent southern insurgency and exceptional road danger. Indonesia has a diffuse but documented terrorist threat. Vietnam is politically surveilled. Malaysia and Singapore are substantially lower risk. A regional security programme must be calibrated to each country separately.

KFR in the Philippines requires specialist protocols

The Philippines KFR environment -- particularly in Mindanao -- involves organised criminal and extremist groups with documented kidnapping capacity. OSAC Philippines advisories are unambiguous about the threat level. Executives with business interests in Mindanao or travel to the southern provinces should have a K&R policy and a close protection team briefed specifically on the Philippine kidnap environment.

Road risk in Thailand is a greater statistical threat than crime

Thailand's road traffic fatality rate is among the highest in the world. For most business travellers to Thailand, a competent security driver with defensive driving training reduces risk more directly than a close protection team. This does not mean CP is unnecessary -- it means the threat assessment must address the actual risk profile rather than default to a standard CP deployment.

Armed CP in Southeast Asia must use licensed local operators

Foreign CPOs cannot carry firearms in any Southeast Asian jurisdiction without highly specific licensing that is rarely available. Armed close protection in the Philippines, Indonesia, or other markets where it is warranted must be provided through licensed local security operators. International CP teams provide the command, intelligence, and principal liaison functions; armed elements are local.

Political and legal risk is highest in Myanmar and Vietnam

Myanmar is under military rule following the 2021 coup, with active conflict, communications surveillance, and severe restrictions on movement outside controlled zones. Vietnam's state security apparatus monitors foreign business activity in sensitive sectors. Both environments require pre-travel legal and security briefing beyond standard commercial travel preparation.

FAQ

Frequently Asked Questions

The Philippines and Myanmar carry the highest overall executive security risk in the region. The Philippines has documented KFR activity targeting business figures in Mindanao and some Metro Manila contexts, combined with political violence and a high-firearm environment. Myanmar is a military-controlled state in an active conflict with severe restrictions on movement and communications. Indonesia and Thailand carry elevated but more manageable risk profiles for standard business travel. Vietnam, Malaysia, and Singapore are substantially lower risk.

For most business travel to Bangkok and major commercial centres, close protection is not routinely required. The primary risks for executives in Thailand are opportunistic crime, road safety (Thailand has one of the highest road traffic fatality rates in the world – WHO data puts it at 32.7 deaths per 100,000 population), and the political environment during periods of instability. A security driver with local knowledge is appropriate for most executive visits. Full close protection is appropriate when the threat assessment identifies a specific personal or corporate threat, or when travel includes provinces in the Deep South (Pattani, Yala, Narathiwat, Songkhla) where an insurgency involving IED use is active.

Kidnap for ransom is the primary executive security concern in the Philippines, particularly in Mindanao. The Abu Sayyaf Group (ASG) and criminal kidnapping networks operating in Basilan, Sulu, and the Zamboanga Peninsula have a documented history of targeting foreign nationals and local business figures. In Metro Manila, express kidnapping and robbery targeting of executives in transit is the principal threat. OSAC Philippines advisories consistently rate kidnapping as the primary risk for business travellers.

No, with extremely limited exceptions. Civilian firearm carry by foreign nationals is prohibited or heavily restricted across all Southeast Asian jurisdictions. Indonesia, Thailand, Vietnam, Malaysia, and the Philippines all require specific licensing for armed security operations, and these licences are generally available only to registered local security companies. Unarmed close protection is the standard operating model for international CP operations in the region. Where armed protection is warranted by the threat assessment, it must be provided by licensed local operators, not by foreign CPOs.

Vietnam presents a relatively stable security environment for foreign executives by regional standards. Violent crime targeting foreigners is uncommon in major commercial centres (Hanoi, Ho Chi Minh City, Da Nang). The primary concerns are petty crime, road safety, and the political and legal environment – Vietnam is a one-party state with a security apparatus that monitors foreign business activity, particularly in sensitive sectors. Cybersecurity risks from state-affiliated threat actors are documented. Full close protection is rarely required for standard commercial operations; a vetted security driver and pre-travel briefing are the appropriate baseline.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.