Scroll to top
Lone Worker Security: Managing Risk for Isolated Staff

Security Intelligence

Lone Worker Security in High-Risk Cities: A Practical Guide for Employers

Lone workers in high-risk cities face elevated exposure with no immediate colleague support. Practical security measures for organisations managing isolated staff overseas.

Corporate Security 7 min read 29 Apr 2026

Written by James Whitfield — Senior Security Consultant

A lone worker in Lagos conducting a site assessment for a construction project. A journalist in Karachi meeting sources without a colleague present. An HR manager attending a disciplinary meeting in Mexico City without local security support. A business development executive spending three days in Manila seeing clients, staying in a hotel, moving between meetings in taxis.

Each of these is a lone worker situation. Each carries risk that a risk assessment should identify, and that an employer has a legal and moral obligation to address.

Why Lone Workers Carry Elevated Risk

The elevated risk for lone workers is not complicated. When something goes wrong, there is no one present to assist, escalate, or call for help. An incident that a colleague could witness and report within seconds may not be detected for hours if the worker is operating alone.

In high-risk cities, the absence of immediate colleague support is compounded by the absence of familiar environment, local contacts, and rapid access to help. A worker who stumbles into a dangerous area at night in Bogota or who is targeted in an express kidnapping in Manila is, for practical purposes, on their own until a check-in is missed and someone acts on it.

OSAC’s 2025 annual report notes that opportunistic crime targeting isolated business travellers remains a consistent high-frequency incident type across every P1 city. The traveller who is alone, on foot, visibly disoriented or carrying visible equipment, in an area they do not know, at a predictable time of day, is presenting an attractive target to petty criminals and more serious actors alike.

The UK Health and Safety at Work Act 1974, the Management of Health and Safety at Work Regulations 1999, and equivalent legislation across the EU, Australia, and most developed markets impose explicit duty of care obligations on employers. These obligations extend to employees working overseas and employees on business travel.

ISO 31030:2021 (Travel Risk Management — Guidance for Organisations) addresses lone worker risk explicitly. The standard recommends that organisations identify roles or travel patterns that create lone worker situations, assess the specific risks for each, implement proportionate controls, and communicate the controls to the individuals concerned.

The practical consequence is that sending an employee to a high-risk city without a documented risk assessment, a security brief, and a check-in procedure creates employer liability if an incident occurs. Tribunals and courts in multiple jurisdictions have found against employers in cases where foreseeable risks were not assessed.

Risk Assessment for Lone Workers

A lone worker risk assessment for a specific trip or posting should cover four areas.

The destination threat environment. What are the crime patterns, terrorism indicators, and civil unrest risks in the specific city and the areas the worker will visit? This is not a country-level advisory. A worker based in Sandton, Johannesburg, has a materially different risk profile from one working in an industrial area of Johannesburg south of the city.

The individual’s profile and visibility. Does the worker have a profile that creates specific targeting risk? Journalists, lawyers involved in sensitive proceedings, company representatives in commercial disputes, and expatriates with visible lifestyle indicators carry elevated profiles relative to low-visibility corporate travellers.

The nature of the work. Does the work involve visiting unfamiliar locations, meeting individuals with adversarial interests, handling cash or valuable equipment, or operating outside normal business hours? Each of these factors modifies the risk picture.

The existing controls. What security measures are already in place? A company with an established in-country security provider, a 24-hour emergency line, and a vetted driver network is in a materially better position than one with no in-country support at all.

Practical Controls for Lone Workers

Controls should be proportionate to the assessed risk. For most lone worker situations in P1 cities, the following form the minimum baseline.

A vetted local driver rather than taxis, rideshare apps, or public transport for ground movement. The risk of taxi-based express kidnapping in Bogota, Mexico City, and Manila is well-documented. A vetted driver with a tracked vehicle is not a luxury for lone workers in these markets.

A check-in schedule with defined escalation. The worker confirms safety at defined intervals to a designated contact. Failure to check in triggers escalation: first a direct call, then a call to the hotel or contact on the ground, then emergency protocols if no contact is made within a defined window. The escalation chain should be written down and known to all parties before travel.

A security brief covering the specific destination. The worker should know the risk areas, the emergency contacts (police, embassy, company security, local fixer), the communication protocol, and the contingency for common incident types (robbery, medical emergency, arrest).

Pre-trip registration with the relevant embassy’s traveller registration programme (FCDO LOCATE, US STEP). This is free, takes five minutes, and ensures the embassy can make contact in an emergency.

When Close Protection is Appropriate

Close protection for lone workers is justified when the assessed risk level exceeds what procedural controls can adequately manage. This includes situations where the individual has a specific threat, where the nature of the work creates adversarial exposure (journalists in hostile environments, lawyers in active commercial disputes, investigators), or where the destination’s threat level means that even routine movement creates unacceptable exposure.

The decision should be made by a qualified security professional who knows the destination and the individual’s profile — not by the finance department applying a cost threshold. The cost of a preventable incident in a P1 city substantially exceeds the cost of a proportionate security programme.

For security support for staff travelling or posted to high-risk cities, our bodyguard hire services and security drivers cover lone worker deployment. City threat profiles for our 15 P1 destinations are at Lagos, Nairobi, Manila, and Karachi. For lone workers in remote or off-grid environments – mining, exploration, infrastructure in wilderness areas – the threat and response model is substantially different from urban lone worker protocols: see our remote operations security guide. For freelance contractors and gig economy professionals operating without institutional security support – including ISO 31030 duty of care gaps, lone worker device options, and platform insurance exclusions in high-risk markets – see our security guide for gig economy and freelance workers. For lone workers and corporate travellers using coworking spaces in P1 cities – shared Wi-Fi risk, shoulder surfing and visual eavesdropping, physical access control quality assessment, and building-level security in cities like Lagos, Bogota, and Manila – see our security in coworking spaces guide. For location-independent professionals and digital nomads working from P1 cities over extended periods – device security, pattern-of-life management, SIM card risks, accommodation security assessment, and welfare check protocols without an institutional support structure – see our security guide for digital nomads and remote workers. For healthcare workers – community nurses, A&E clinicians, and GP practice staff – who face among the highest assault rates of any occupational group in the UK, with specific lone worker safety management requirements for community health settings in high-risk urban areas – see our security and violence risk guide for healthcare workers.

Summary

Key takeaways

1
1
Most lone worker incidents are preventable with basic procedural controls

2
2
The risk assessment determines the appropriate level of protection

3
3
Duty of care documentation protects both the worker and the employer

FAQ

Frequently Asked Questions

A lone worker is any employee who operates without direct supervision or immediate colleague support for a significant portion of their working time. In a security context, this includes employees based in a country where the rest of the team is remote, field staff conducting site visits without a partner, journalists or researchers working independently in unfamiliar environments, and executives staying alone in hotels during business travel. The defining characteristic is the absence of a colleague who could immediately assist or raise an alarm if something goes wrong.

Employers have a legal duty of care toward employees that extends to overseas postings and business travel. The UK Health and Safety at Work Act 1974 and equivalent legislation in most developed markets require employers to assess and mitigate foreseeable risks to employees, including those working alone. ISO 31030:2021 (Travel Risk Management) specifically addresses lone worker risk. In practice, this means employers must identify lone worker situations, assess the specific risks, implement proportionate controls, and document the process. An incident involving an unprotected lone worker in a high-risk city, where no risk assessment was conducted, creates significant employer liability.

The main technology categories are: check-in apps with automated escalation (the worker confirms safety at defined intervals; failure to check in triggers an alert), personal safety devices (GPS trackers with panic buttons that alert a monitoring centre), satellite communicators for areas without mobile coverage (Garmin inReach, SPOT), and smartphone apps with fall detection and automatic alert capability. None of these are a substitute for procedural controls and security planning. Technology fails, batteries die, and coverage gaps exist. Technology works best as one layer in a broader lone worker programme.

Not necessarily, but the question should be answered by a risk assessment rather than a budget assumption. Close protection for lone workers is appropriate when the individual has a profile that creates specific targeting risk, when the destination has a pattern of incidents involving people of similar profile, or when the nature of the work (journalism, investigations, legal proceedings) creates adversarial exposure. Many lone workers in high-risk cities are adequately protected by a vetted local driver, a check-in protocol, and security awareness training rather than a full close protection deployment. The assessment determines the appropriate level.

A buddy system pairs lone workers with a contact who is responsible for raising an alarm if contact is not maintained. The contact can be a colleague in another location, a security operations centre, or a commercial monitoring service. Buddy systems work when: the check-in schedule is realistic (too frequent and workers skip checks; too infrequent and the response window is too long), the escalation procedure is clearly defined and rehearsed, and the contact has the authority and means to act when contact is lost. Buddy systems fail when they are treated as a formality rather than an operational procedure.
Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.

Confidential. Your details are never shared with third parties.