
Security Intelligence
Lone Worker Security in High-Risk Cities: A Practical Guide for Employers
Lone workers in high-risk cities face elevated exposure with no immediate colleague support. Practical security measures for organisations managing isolated staff overseas.
Written by James Whitfield — Senior Security Consultant
A lone worker in Lagos conducting a site assessment for a construction project. A journalist in Karachi meeting sources without a colleague present. An HR manager attending a disciplinary meeting in Mexico City without local security support. A business development executive spending three days in Manila seeing clients, staying in a hotel, moving between meetings in taxis.
Each of these is a lone worker situation. Each carries risk that a risk assessment should identify, and that an employer has a legal and moral obligation to address.
Why Lone Workers Carry Elevated Risk
The elevated risk for lone workers is not complicated. When something goes wrong, there is no one present to assist, escalate, or call for help. An incident that a colleague could witness and report within seconds may not be detected for hours if the worker is operating alone.
In high-risk cities, the absence of immediate colleague support is compounded by the absence of familiar environment, local contacts, and rapid access to help. A worker who stumbles into a dangerous area at night in Bogota or who is targeted in an express kidnapping in Manila is, for practical purposes, on their own until a check-in is missed and someone acts on it.
OSAC’s 2025 annual report notes that opportunistic crime targeting isolated business travellers remains a consistent high-frequency incident type across every P1 city. The traveller who is alone, on foot, visibly disoriented or carrying visible equipment, in an area they do not know, at a predictable time of day, is presenting an attractive target to petty criminals and more serious actors alike.
The Legal Framework
The UK Health and Safety at Work Act 1974, the Management of Health and Safety at Work Regulations 1999, and equivalent legislation across the EU, Australia, and most developed markets impose explicit duty of care obligations on employers. These obligations extend to employees working overseas and employees on business travel.
ISO 31030:2021 (Travel Risk Management — Guidance for Organisations) addresses lone worker risk explicitly. The standard recommends that organisations identify roles or travel patterns that create lone worker situations, assess the specific risks for each, implement proportionate controls, and communicate the controls to the individuals concerned.
The practical consequence is that sending an employee to a high-risk city without a documented risk assessment, a security brief, and a check-in procedure creates employer liability if an incident occurs. Tribunals and courts in multiple jurisdictions have found against employers in cases where foreseeable risks were not assessed.
Risk Assessment for Lone Workers
A lone worker risk assessment for a specific trip or posting should cover four areas.
The destination threat environment. What are the crime patterns, terrorism indicators, and civil unrest risks in the specific city and the areas the worker will visit? This is not a country-level advisory. A worker based in Sandton, Johannesburg, has a materially different risk profile from one working in an industrial area of Johannesburg south of the city.
The individual’s profile and visibility. Does the worker have a profile that creates specific targeting risk? Journalists, lawyers involved in sensitive proceedings, company representatives in commercial disputes, and expatriates with visible lifestyle indicators carry elevated profiles relative to low-visibility corporate travellers.
The nature of the work. Does the work involve visiting unfamiliar locations, meeting individuals with adversarial interests, handling cash or valuable equipment, or operating outside normal business hours? Each of these factors modifies the risk picture.
The existing controls. What security measures are already in place? A company with an established in-country security provider, a 24-hour emergency line, and a vetted driver network is in a materially better position than one with no in-country support at all.
Practical Controls for Lone Workers
Controls should be proportionate to the assessed risk. For most lone worker situations in P1 cities, the following form the minimum baseline.
A vetted local driver rather than taxis, rideshare apps, or public transport for ground movement. The risk of taxi-based express kidnapping in Bogota, Mexico City, and Manila is well-documented. A vetted driver with a tracked vehicle is not a luxury for lone workers in these markets.
A check-in schedule with defined escalation. The worker confirms safety at defined intervals to a designated contact. Failure to check in triggers escalation: first a direct call, then a call to the hotel or contact on the ground, then emergency protocols if no contact is made within a defined window. The escalation chain should be written down and known to all parties before travel.
A security brief covering the specific destination. The worker should know the risk areas, the emergency contacts (police, embassy, company security, local fixer), the communication protocol, and the contingency for common incident types (robbery, medical emergency, arrest).
Pre-trip registration with the relevant embassy’s traveller registration programme (FCDO LOCATE, US STEP). This is free, takes five minutes, and ensures the embassy can make contact in an emergency.
When Close Protection is Appropriate
Close protection for lone workers is justified when the assessed risk level exceeds what procedural controls can adequately manage. This includes situations where the individual has a specific threat, where the nature of the work creates adversarial exposure (journalists in hostile environments, lawyers in active commercial disputes, investigators), or where the destination’s threat level means that even routine movement creates unacceptable exposure.
The decision should be made by a qualified security professional who knows the destination and the individual’s profile — not by the finance department applying a cost threshold. The cost of a preventable incident in a P1 city substantially exceeds the cost of a proportionate security programme.
For security support for staff travelling or posted to high-risk cities, our bodyguard hire services and security drivers cover lone worker deployment. City threat profiles for our 15 P1 destinations are at Lagos, Nairobi, Manila, and Karachi. For lone workers in remote or off-grid environments – mining, exploration, infrastructure in wilderness areas – the threat and response model is substantially different from urban lone worker protocols: see our remote operations security guide. For freelance contractors and gig economy professionals operating without institutional security support – including ISO 31030 duty of care gaps, lone worker device options, and platform insurance exclusions in high-risk markets – see our security guide for gig economy and freelance workers. For lone workers and corporate travellers using coworking spaces in P1 cities – shared Wi-Fi risk, shoulder surfing and visual eavesdropping, physical access control quality assessment, and building-level security in cities like Lagos, Bogota, and Manila – see our security in coworking spaces guide. For location-independent professionals and digital nomads working from P1 cities over extended periods – device security, pattern-of-life management, SIM card risks, accommodation security assessment, and welfare check protocols without an institutional support structure – see our security guide for digital nomads and remote workers. For healthcare workers – community nurses, A&E clinicians, and GP practice staff – who face among the highest assault rates of any occupational group in the UK, with specific lone worker safety management requirements for community health settings in high-risk urban areas – see our security and violence risk guide for healthcare workers.
Key takeaways
Most lone worker incidents are preventable with basic procedural controls
The risk assessment determines the appropriate level of protection
Duty of care documentation protects both the worker and the employer
Frequently Asked Questions
Request a Consultation
Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.
Your enquiry has been received. A security consultant will contact you within 24 hours to discuss your requirements.
