Extreme Weather and Natural Disaster Security Planning | CloseProtectionHire

Natural disasters and extreme weather events do not sit in a separate category from security risk. They create it. When an earthquake strikes a P1 city, or a typhoon makes landfall on the Manila corridor, or Jakarta floods to the point of road closure, the security environment changes within hours. Law enforcement is overwhelmed. Emergency services are stretched or absent. Communications fail. Opportunistic crime and civil disorder follow.

A 2024 INFORM Risk Index assessment rated 17 of the world’s 40 largest cities at High or Very High natural hazard risk. Several of those cities – Istanbul, Mumbai, Manila, Mexico City, Jakarta, Bangkok – appear on the P1 and P2 city lists for this site. Understanding disaster risk is not an optional add-on to travel security planning. It is part of the threat picture.

The ISO Framework: 22301 and 31030

ISO 22301:2019 (Business Continuity Management Systems) provides the international standard for organisational response to disruptions, including natural disasters. It requires documented business impact analysis, defined recovery time objectives, maintained communication trees and tested recovery procedures. For organisations operating in high-disaster-risk geographies, ISO 22301 certification is the baseline evidence of preparedness.

ISO 31030:2021 (Travel Risk Management) – the standard directly applicable to business travellers – requires pre-trip assessment of destination hazards including natural disaster risk. This includes seasonal considerations: organisations cannot claim adequate travel risk management while sending employees to Jakarta during peak flood season without documented risk mitigation and contingency planning.

In the UK, the Management of Health and Safety at Work Regulations 1999 (implementing the EU Framework Directive 89/391/EEC) require employers to conduct suitable and sufficient risk assessments of foreseeable risks to employees. Natural disaster risk in documented high-frequency geographies is foreseeable. The duty is clear.

Seismic Risk: Turkey, Japan, Mexico and the Ring of Fire

The February 2023 Turkey-Syria earthquake killed over 50,000 people, destroyed or damaged 300,000 buildings in southeastern Turkey and northern Syria, and created a six-month period of profound security degradation in the affected region. In the immediate aftermath, communications failed, roads were blocked, medical infrastructure was destroyed or overwhelmed, and the early phase saw documented looting.

Istanbul – a P2 city for this site – sits on the North Anatolian Fault. AFAD (Disaster and Emergency Management Authority of Turkey) models suggest Istanbul is overdue for a major seismic event. The impact on business operations, personnel security and evacuation capability from a major Istanbul earthquake would be severe and potentially catastrophic for unprepared organisations.

Mexico City is built on drained lake sediment with liquefaction properties that amplify ground shaking significantly above bedrock level. The September 1985 earthquake killed 10,000 to 40,000 people. The September 2017 earthquake killed 369 and damaged 6,000 buildings. Business travel to Mexico City during seismic alert periods – common in the March-September window – requires documented emergency assembly procedures and clear evacuation routes from buildings.

Manila and the Philippines sit in one of the world’s most seismically active zones. The Philippine Institute of Volcanology and Seismology (PHIVOLCS) maintains a public earthquake monitor that should be checked pre-deployment. Building standards in older Manila districts vary significantly, and structural risk in unreinforced masonry construction is elevated.

Flood Risk in P1 Cities: Jakarta, Mumbai, Bangkok

Jakarta experiences annual flooding, primarily November to March. The BNPB (National Disaster Management Authority) has documented multiple flood events displacing hundreds of thousands of residents. The Jakarta northern coastal areas and lower-lying districts are most affected. Business travellers should verify hotel location relative to known flood zones, confirm vehicle access during flood events and maintain alternate accommodation options.

Mumbai’s monsoon season (June-September) brings flooding that regularly disrupts transport, closes the international airport and creates localised road access failures. The July 2005 Mumbai floods killed over 1,000 people and paralysed the city for days. For business operations during monsoon season, ground transport planning must account for flooding on the Bandra-Kurla Complex approach routes and the Western Express Highway.

Bangkok’s 2011 floods were the most severe in living memory: 13 million people affected, 815 killed, central Thailand submerged for months. The Chao Phraya basin vulnerability remains. Business travel to Bangkok during the October-November period in high-rainfall years should include contingency planning for airport access, and hotels in lower-lying riverside areas warrant specific assessment.

Tropical Cyclones: Manila, Mumbai and the Atlantic

Manila sits in one of the world’s most typhoon-exposed locations. PAGASA records typically 20 or more named tropical cyclones per year tracking toward or across the Philippines. Super Typhoon Haiyan (Yolanda) in November 2013 killed over 6,300 people and destroyed Tacloban. Business travel to Manila and the Philippine provinces should incorporate Pacific typhoon season planning (June-November) with airline disruption and evacuation option review.

Mumbai faces cyclone risk from the Arabian Sea, amplified by the Bay of Bengal low-pressure systems that drive monsoon rains. While direct major cyclone landfalls in Mumbai are less frequent than Manila, the infrastructure degradation from monsoon conditions creates secondary security risks including communications failure, road closure and medical service overload.

The Atlantic hurricane season (June-November) affects Caribbean and Central American destinations for this site – Panama City, San Jose (via Pacific coast activity) and any operations in the Lesser Antilles or greater Caribbean. NOAA seasonal forecasts, released in May and updated in August, should inform travel scheduling.

Volcanic Risk: Indonesia, Philippines, Iceland

Indonesia has over 130 active volcanoes. The Merapi, Sinabung, Semeru and Bromo systems are among the most active globally. Jakarta operations are not directly threatened by proximate volcanic activity, but Indonesian business travel outside Java and to Sumatra requires volcanic hazard assessment via the Centre for Volcanology and Geological Hazard Mitigation (PVMBG).

In 2010, Iceland’s Eyjafjallajokull eruption generated an ash cloud that closed European airspace for six days and grounded 100,000 flights. The 2023-2024 Reykjanes Peninsula eruption series demonstrated ongoing volcanic activity. For travel with tight schedule dependencies, Icelandic volcanic activity represents a genuine contingency planning requirement.

Manila is not directly threatened by nearby volcanoes of concern for business travel, but Mayon Volcano (Albay Province) and Taal Volcano (Batangas, 60km south of Manila) both warrant monitoring for operational planning. Taal’s January 2020 eruption required the evacuation of 300,000 people and disrupted Manila Ninoy Aquino International Airport.

Heat Emergencies: Karachi, Lagos, Riyadh

Extreme heat creates security risk through emergency service overload, public disorder risk during power outages and direct risk to outdoor operations. Karachi’s June 2015 heatwave killed 1,300 people in 5 days when power grid failure removed cooling access for low-income urban populations. Similar events in 2023 and 2024 repeated the pattern.

Riyadh summer temperatures regularly exceed 45 degrees Celsius. All outdoor operations – advance work, vehicle preposition, external close protection – must comply with heat emergency protocols including Wet Bulb Globe Temperature (WBGT) monitoring per OSHA heat stress guidelines. Outdoor work above WBGT 32 degrees requires significant modification.

Lagos heat and humidity in the March-April and October-November periods creates heat stress risk for vehicle-based operations. Air-conditioned transport, hydration protocols and limitation of outdoor exposure time are basic operational requirements.

Communications Backup: What Fails and What Doesn’t

Terrestrial mobile networks are typically among the first systems to fail or be overwhelmed in major disasters. Cell towers lose power, are physically destroyed, or are saturated by simultaneous traffic volume. A mobile phone that worked at 0900 on the day of an earthquake may not work at 1000.

Satellite communications devices operating on Low Earth Orbit (LEO) constellations – Iridium Extreme PTT, Iridium 9575A, Garmin inReach with Iridium – maintain connectivity regardless of terrestrial infrastructure status. Iridium’s 66 LEO satellite constellation provides genuine pole-to-pole coverage. Pre-departure configuration, contact synchronisation and test confirmation are essential. A satellite device acquired at destination during a disaster is of limited practical value.

For operations with fixed base requirements in disaster-prone areas, Inmarsat BGAN (Broadband Global Area Network) portable terminals provide data and voice connectivity via geostationary satellite. Starlink portable terminal provides broadband connectivity for base of operations use. Both require advance procurement and training.

The corporate travel security policy should mandate satellite communications capability for any deployment to INFORM Risk Index Tier 1 or Tier 2 disaster-risk destinations. This is not a luxury provision – it is a duty of care requirement under ISO 31030:2021 for high-risk travel.

MEDEVAC in Disaster Conditions

Standard MEDEVAC planning – International SOS, Global Rescue, AXA Assistance SWAP – assumes infrastructure capability for the first extraction leg. Road access to the airstrip. A functioning airstrip. A destination hospital with capacity.

A major earthquake, Category 5 hurricane or catastrophic flood eliminates these assumptions for the first 24-72 hours. Post-disaster MEDEVAC planning requires identification of: alternate extraction points (secondary road routes, beach landing zones, open fields for helicopter access); the nearest functioning trauma facility outside the disaster zone; the insurer’s documented disaster-condition response protocol; and a personal casualty protocol that acknowledges potential delay in formal response.

For deployments to Istanbul, Manila, Mexico City, Jakarta or Mumbai – all high-disaster-risk environments – pre-trip MEDEVAC briefings should include disaster-condition scenarios. International SOS maintains pre-positioned medical capabilities in most of these cities and publishes regular updates on infrastructure status following major events.

For further guidance on travel security planning and evacuation protocols, see our article on country evacuation planning and security and our review of corporate travel security policy frameworks.

James Whitfield is a Senior Security Consultant specialising in travel risk and crisis preparedness. This article draws on ISO 22301:2019, ISO 31030:2021, INFORM Risk Index 2025, EM-DAT/CRED 2024, BNPB Indonesia 2024, WMO State of Global Climate Report 2024, AFAD Turkey seismic risk data, Management of Health and Safety at Work Regulations 1999, OSHA Heat Illness Prevention guidelines, International SOS Annual Report 2025, NOAA Atlantic Hurricane Season Outlook 2025, and OSAC country reports for Indonesia, Philippines, Turkey, Mexico and India 2024.