Security Intelligence

Security Operations in Active Conflict Zones

Q: "What is the difference between a high-risk environment and a conflict zone?"

"A high-risk environment is one where crime, political instability, or civil unrest creates elevated threat for travellers and personnel, but the primary threat actors are criminals or non-state groups operating at a relatively contained level. A conflict zone is characterised by active armed hostilities between organised parties -- state military forces, rebel groups, militias, or a combination -- with the associated threat of direct fire, indirect fire (artillery, rockets, mortars), mines, IEDs, and a breakdown of civilian legal order. The security disciplines relevant to a high-risk environment (counter-surveillance, route planning, close protection) remain applicable in a conflict zone but are insufficient on their own. Additional skills -- mine awareness, checkpoint behaviour, trauma first aid, indirect fire procedures -- are required."

Q: "What training is required before deploying to a conflict zone?"

"The minimum training requirement for professional deployment to an active or recent conflict zone is a Hostile Environment and First Aid Training (HEFAT) course. A full HEFAT course (typically 4-5 days) covers: IED/mine awareness and safe behaviour, hostage survival and kidnap response, trauma first aid (TCCC -- Tactical Combat Casualty Care), checkpoint behaviour, convoy procedures, communications protocols, and personal security planning. For organisations in scope, the UN DSS SSAFE (Safe and Secure Approaches in Field Environments) standard defines minimum training requirements for humanitarian personnel. For journalists, the Rory Peck Trust and Reporters Without Borders publish specific hostile environment guidance. Refresher training every 2-3 years is the standard interval, or following any significant change in the operating environment."

Q: "How should routes be assessed in a mine or IED-contaminated environment?"

"Route assessment in contaminated areas requires: up-to-date mine and UXO contamination data from HALO Trust, UNMAS (UN Mine Action Service), or national demining authority records; understanding of the contamination patterns associated with the specific conflict (anti-tank mines on routes, victim-activated devices around former defensive positions, command-detonated IEDs on known movement corridors); visual assessment of the route surface for disturbance indicators (fresh earth, soil discolouration, protruding wires, disturbed vegetation, trip wires); and, in high-contamination areas, coordination with a specialist mine action operator before travel. The basic rule in uncertain terrain is: if you did not see a vehicle pass before you, you do not know the route is clear. Moving only on routes confirmed by vehicle movement or demining clearance is the operational standard."

Q: "What are the UN Security Phases and how do they apply to operational decisions?"

"The UN Department of Safety and Security (UNDSS) Security Phase system classifies areas in six phases based on threat level and operational conditions: Phase 1 (Precautionary) -- routine security measures; Phase 2 (Restricted) -- enhanced security measures, movement restrictions begin; Phase 3 (Relocation) -- eligible UN staff relocate to designated safer areas within country; Phase 4 (Programme Suspension) -- all non-essential staff evacuate, programmes suspended; Phase 5 (Evacuation) -- all international staff evacuate; Phase 6 (War/Civil War) -- armed conflict renders normal operations impossible. The practical implication is that Phase 3 and above typically means commercial CP operations are not viable without specialist conflict-zone capabilities, and extraction planning becomes the primary operational focus."

Q: "When does commercial close protection end and armed military or PMC escort begin?"

"Commercial close protection -- licensed, regulated, operated by SIA-registered or equivalent operators -- is designed for threat environments where the primary risk is criminal, targeted, or civil in character. In active conflict zones where the threat includes direct fire, armed attack by organised military forces, or operations in contested territorial control zones, commercial CP is typically insufficient. Armed escort by PMCs (Private Military Companies) operating under a defined legal authority -- host government contract, coalition framework, or equivalent -- may be applicable, but the legal, insurance, and operational complexity is substantially greater. Most commercial CP firms will have a clearly defined operational boundary: areas they will operate in, and areas they will not. Understanding that boundary, and what it means for your specific deployment, must be established before travel."

Operating in an active conflict environment is categorically different from high-risk city security. A senior security consultant examines the frameworks, training, and decision criteria that apply.

Specialist Security 1 May 2026

Written by James Whitfield

Speak to the Team

Active conflict zones present a security environment that is categorically different from even the most dangerous cities in the world. Lagos, Karachi, and Bogota carry serious security risk. Ukraine, Gaza, Sudan, and Myanmar in their current states present threats – artillery strikes, mine contamination, armed faction checkpoints, targeted killing – for which standard executive protection protocols are inadequate.

This article examines what operating in a conflict zone actually requires: the training baseline, the planning frameworks, the threat types, and the decision criteria for when commercial operations are viable and when they are not.

The Conflict Zone Threat Environment

The threat environment in an active conflict zone combines elements that are absent in even the highest-risk cities:

Indirect fire. Artillery, rockets, and mortar fire do not discriminate. They affect areas, not individuals. The protective measure is not personal security – it is shelter, dispersion, and not being in the wrong place at the wrong time. Understanding the pattern of fire – time of day, targets, range – is essential operational intelligence.

Mine and IED contamination. The HALO Trust estimates that more than 60 countries have landmine contamination. In active or recently active conflict zones – Ukraine, Yemen, Libya, Sudan, Myanmar, parts of Iraq and Syria – contamination is widespread and often uncharted. Victim-initiated anti-personnel mines, anti-tank mines on vehicle routes, and command-detonated IEDs on known movement corridors kill civilians and security personnel who lack the training to recognise and avoid them.

Armed checkpoints. In conflict environments, checkpoints may be operated by government forces, rebel groups, militias, or a combination of competing armed actors. Checkpoint behaviour – documents, approach speed, communication protocols, what to do if a checkpoint is clearly hostile – is a specialist skill that requires training, not improvisation.

Kidnapping for ransom and hostage-taking. In some conflict environments, kidnapping by armed non-state actors is a primary income source. The tactics and survival protocols are different from criminal K&R in a city environment. Hostage-taking in a conflict context may be politically as well as financially motivated, which changes the negotiation and release timeline significantly.

Breakdown of civilian legal order. In active conflict, the legal framework that normally constrains criminal behaviour collapses. Police are absent or are themselves participants in the conflict. This creates opportunistic threat – looting, sexual violence, opportunistic assault – layered on top of the organised conflict threat.

Training Requirements

Deploying to an active or recent conflict zone without specific training is a professional failure of duty of care – for the individual, the employer, and the organisation that sends them.

HEFAT – Hostile Environment and First Aid Training. A full HEFAT course is the minimum entry requirement for any professional deployment to a conflict zone. The key modules:

Mine and IED awareness. Surface indicators of buried devices, safe movement techniques in contaminated areas, action on finding a device, victim-activated versus command-detonated distinction, what to do if a colleague is a victim.

Trauma first aid (TCCC). Tactical Combat Casualty Care – tourniquet application, wound packing, tension pneumothorax treatment, airway management. The standard in HEFAT courses is now TCCC, not civilian first aid, because the injury patterns in conflict zones (blast, gunshot) require a different set of interventions.

Checkpoint behaviour. Approach speed, stopping distance, document handling, verbal communication, what constitutes a hostile checkpoint and how to respond.

Convoy procedures. Vehicle spacing, communications between vehicles, action on ambush, vehicle breakdown protocol, rally points.

Hostage survival. First 24 hours, compliance versus resistance calculus, maintaining physical and mental health over extended captivity, communication with captors.

Personal security planning. Pattern-of-life reduction, cover story maintenance, communication schedules, digital security in conflict environments.

Training providers should be assessed on instructor credentials (verified conflict-zone operational experience, not classroom-only), scenario realism, and whether TCCC modules are delivered by accredited instructors (PHTLS/NAEMT standard).

For organisations in scope, the UN Department of Safety and Security SSAFE (Safe and Secure Approaches in Field Environments) online module provides a baseline, but is not a substitute for full HEFAT training.

The UN Security Phase Framework

Organisations operating in conflict zones – NGOs, journalists, corporate actors in extractive industries, legal and human rights organisations – typically use the UN UNDSS Security Phase system as a reference framework for operational go/no-go decisions.

The six phases run from routine security measures (Phase 1) through restricted movement and partial evacuation (Phases 2-3), programme suspension and full evacuation of non-essential staff (Phases 4-5), to Phase 6 where armed conflict renders organised operations impossible.

The practical value of the Phase system is that it provides a common reference point for inter-agency coordination. When UNDSS moves an area to Phase 3, the assumption is that commercial CP operations are entering a new risk tier that requires reassessment of viability.

For corporate actors, particularly those in extractive industries operating in areas affected by conflict, the Phase system provides a useful trigger framework even if the organisation is not formally within the UN system. The Voluntary Principles on Security and Human Rights (relevant to mining and oil/gas companies) also reference conflict zone operating standards.

Route Planning and Mine Awareness

Movement is the highest-risk activity in a conflict or contaminated zone. Most casualties occur on routes.

The route planning framework in a conflict environment:

Contamination data. Before any movement in an area with known or suspected contamination, obtain the most current contamination data available. Sources: HALO Trust field teams, UNMAS (UN Mine Action Service) national reports, national demining authority records, and local knowledge from security advisers embedded in the area.

Route confirmation. A route is confirmed by observed vehicle movement – a vehicle that has already passed means the route is clear at that point and time. This does not mean it is clear in both directions, and does not mean it remains clear after a period in which it could have been mined. Primary, secondary, and emergency routes should all be assessed.

Visual awareness. Mine awareness training teaches recognition of surface indicators: soil disturbance, discolouration, protruding wires or pegs, disturbed vegetation, objects placed on or near routes. This is not infallible – well-laid devices may leave no visible trace – but it provides a meaningful risk reduction in contaminated areas.

Speed and dispersion. In ambush and IED environments, vehicles should not bunch, should maintain safe following distances, and should not stop in predictable locations (bridges, crossings, choke points).

Extraction Planning

In a conflict zone, extraction planning is not a contingency – it is a primary operational requirement.

The conditions that trigger extraction – rapid enemy advance, collapse of a ceasefire, government forces turning on the civilian population – may develop in hours and may simultaneously close the routes that the extraction plan depends on. An extraction plan prepared at the start of the deployment, practiced, and continuously updated as the operational environment changes is the standard.

Key elements of a conflict zone extraction plan:

Triggers. Pre-defined conditions that automatically initiate extraction, without requiring a committee decision. The trigger should be objective and recognisable: enemy forces within X kilometres of the operating base, a specific Security Phase level reached, loss of communications for more than Y hours.

Primary and contingency routes. At least two extraction routes assessed and kept current. Airport, land border, sea route options identified, with the current viability of each tracked.

Rally points and safe havens. Pre-identified locations – embassy, UN compound, vetted host organisation – where personnel can shelter if primary extraction is blocked.

Communications. Satellite communications as primary (Iridium/Thuraya), not reliant on local telecoms infrastructure. Personal Locator Beacons (PLBs) for individuals who may become separated from the main group.

National staff. Extraction planning that covers only international staff – and leaves national staff to manage on their own – is both ethically inadequate and operationally short-sighted. National staff are often the highest-risk individuals in a conflict scenario. For the duty of care framework, see our country evacuation planning guide.

When Commercial CP Ends

Commercial close protection is designed for threat environments where the primary risk actors are criminals, terrorist groups, or targeted hostile individuals – not organised armed forces conducting military operations.

In areas of active conventional military conflict, the threat profile exceeds what commercial CP can address. The boundary is not always sharp – in hybrid conflict environments, criminal, paramilitary, and military threats coexist – but the operational and legal implications of the boundary matter.

Most reputable commercial CP operators will define their operational limits explicitly. They will operate in Phase 1 and Phase 2 environments with enhanced protocols. They will not deploy in Phase 5 or 6 without specialist capabilities, coalition frameworks, or specific contractual and legal authority.

For corporate organisations considering deployment in conflict-adjacent or conflict-affected environments, understanding where that line is for your operator – before the deployment, not during a crisis – is a basic risk management requirement.

For the security requirements of film and TV productions operating in high-risk and conflict-adjacent locations – including the production security coordinator role, talent KFR risk management, call sheet OPSEC, and the specific Mexico production security environment – see our security for film and TV production guide. For the specific threat profile facing journalists and media teams deploying to conflict zones and hostile environments – including fixer vetting, digital security, K&R insurance for press, and the CPJ threat picture by country – see our security for journalists and media in hostile environments guide.

Source: UN Department of Safety and Security (UNDSS) Security Phases Reference Guide 2024. HALO Trust Landmine and Cluster Munition Monitor 2024. UNMAS Annual Report 2024. Rory Peck Trust: Safety Guides for Freelance Journalists 2024. Front Line Defenders Annual Report 2024. Control Risks RiskMap 2025. FCDO Travel Advisories: Ukraine, Sudan, Myanmar, Yemen, Gaza (April 2026). ISO 31030:2021 Travel Risk Management. Voluntary Principles on Security and Human Rights 2024 Annual Report.

James Whitfield is a Senior Security Consultant with 20 years of experience in close protection, conflict-zone operations, and security programme design across high-risk environments globally.

Summary

Key takeaways

Conflict zone operations require a fundamentally different security paradigm

The threat environment in an active conflict zone -- mines, IEDs, armed checkpoints, direct fire, indirect fire, artillery -- is not an extension of high-risk city security. Different training, different equipment, different decision frameworks, and different risk tolerance thresholds apply.

The UN Security Phase system is the standard risk classification for conflict environments

Organisations operating in conflict zones typically use the UN Department of Safety and Security (UNDSS) Security Phase system (Phases 1-6) as the baseline for operational go/no-go decisions. Understanding which phase applies to a given area and what operational restrictions it triggers is a fundamental planning requirement.

Mine and IED awareness is a prerequisite skill for conflict zone travel

Landmine and IED contamination affects 60+ countries. In active or recently active conflict zones, uncleared contamination is a primary cause of civilian and security professional casualties. Basic mine awareness training -- route assessment, surface indicators, victim-initiated versus command-detonated devices -- is a minimum training requirement before deployment.

The boundary between CP and armed escort is a legal and operational line

In most conflict zones, the line at which close protection ends and armed escort or military security begins is legally, operationally, and ethically significant. Most commercial CP firms operate unarmed in conflict zones or with limited licensed arms under host country or coalition frameworks. Understanding what your operator can and cannot do -- and where they cannot go -- is essential pre-deployment planning.

Extraction planning must be completed before deployment, not improvised during crisis

In a conflict zone, the conditions that would trigger extraction -- enemy advance, civil collapse, government forces turning hostile -- may develop rapidly and may close evacuation routes simultaneously. Extraction plans must be prepared, rehearsed, and updated continuously. They cannot be created on the day.

FAQ

Frequently Asked Questions

A high-risk environment is one where crime, political instability, or civil unrest creates elevated threat for travellers and personnel, but the primary threat actors are criminals or non-state groups operating at a relatively contained level. A conflict zone is characterised by active armed hostilities between organised parties – state military forces, rebel groups, militias, or a combination – with the associated threat of direct fire, indirect fire (artillery, rockets, mortars), mines, IEDs, and a breakdown of civilian legal order. The security disciplines relevant to a high-risk environment (counter-surveillance, route planning, close protection) remain applicable in a conflict zone but are insufficient on their own. Additional skills – mine awareness, checkpoint behaviour, trauma first aid, indirect fire procedures – are required.

The minimum training requirement for professional deployment to an active or recent conflict zone is a Hostile Environment and First Aid Training (HEFAT) course. A full HEFAT course (typically 4-5 days) covers: IED/mine awareness and safe behaviour, hostage survival and kidnap response, trauma first aid (TCCC – Tactical Combat Casualty Care), checkpoint behaviour, convoy procedures, communications protocols, and personal security planning. For organisations in scope, the UN DSS SSAFE (Safe and Secure Approaches in Field Environments) standard defines minimum training requirements for humanitarian personnel. For journalists, the Rory Peck Trust and Reporters Without Borders publish specific hostile environment guidance. Refresher training every 2-3 years is the standard interval, or following any significant change in the operating environment.

Route assessment in contaminated areas requires: up-to-date mine and UXO contamination data from HALO Trust, UNMAS (UN Mine Action Service), or national demining authority records; understanding of the contamination patterns associated with the specific conflict (anti-tank mines on routes, victim-activated devices around former defensive positions, command-detonated IEDs on known movement corridors); visual assessment of the route surface for disturbance indicators (fresh earth, soil discolouration, protruding wires, disturbed vegetation, trip wires); and, in high-contamination areas, coordination with a specialist mine action operator before travel. The basic rule in uncertain terrain is: if you did not see a vehicle pass before you, you do not know the route is clear. Moving only on routes confirmed by vehicle movement or demining clearance is the operational standard.

The UN Department of Safety and Security (UNDSS) Security Phase system classifies areas in six phases based on threat level and operational conditions: Phase 1 (Precautionary) – routine security measures; Phase 2 (Restricted) – enhanced security measures, movement restrictions begin; Phase 3 (Relocation) – eligible UN staff relocate to designated safer areas within country; Phase 4 (Programme Suspension) – all non-essential staff evacuate, programmes suspended; Phase 5 (Evacuation) – all international staff evacuate; Phase 6 (War/Civil War) – armed conflict renders normal operations impossible. The practical implication is that Phase 3 and above typically means commercial CP operations are not viable without specialist conflict-zone capabilities, and extraction planning becomes the primary operational focus.

Commercial close protection – licensed, regulated, operated by SIA-registered or equivalent operators – is designed for threat environments where the primary risk is criminal, targeted, or civil in character. In active conflict zones where the threat includes direct fire, armed attack by organised military forces, or operations in contested territorial control zones, commercial CP is typically insufficient. Armed escort by PMCs (Private Military Companies) operating under a defined legal authority – host government contract, coalition framework, or equivalent – may be applicable, but the legal, insurance, and operational complexity is substantially greater. Most commercial CP firms will have a clearly defined operational boundary: areas they will operate in, and areas they will not. Understanding that boundary, and what it means for your specific deployment, must be established before travel.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.