Operating In and Around Conflict Zones: An Enterprise Risk Framework

The decision is rarely "should we be there"

By the time conflict escalates in a market, most enterprises are already present — through a subsidiary, a distributor, a supplier, a customer or a corridor that routes through it. The live questions are narrower and harder: what changes now, what is the trigger for suspending operations, who has the authority to call it, and what does a defensible exit look like.

Conflict-zone risk management for corporations sits at the intersection of duty of care, continuity, compliance and reputation. Treating it as a security problem alone produces good evacuation plans and bad commercial decisions. Treating it as a commercial problem alone produces decisions that cannot be defended afterwards.

Four exposure classes, four different owners

People. Employees, contractors, dependants and — often forgotten — locally engaged staff who cannot relocate. Duty of care obligations do not distinguish by contract type, and the legal and reputational consequences of ignoring that are severe.

Assets and operations. Facilities, inventory, equipment and data. In practice the binding constraint is rarely destruction; it is access — to fuel, to power, to banking, to functioning customs, to staff who can safely travel to work.

Counterparties and compliance. Conflict compresses the distance between a routine payment and a sanctions or anti-corruption problem. Informal payments at checkpoints, unofficial fuel and currency markets, sudden changes in who controls a licensing authority — each is a live exposure under extraterritorial legislation, and each has a paper trail.

Reputation and stakeholder position. Presence, exit, and the manner of exit all carry a public position whether or not one is intended. So does silence. The commitments made in a crisis are judged years later.

Thresholds decided in advance, not in the moment

The single most valuable artefact for a market with escalation risk is a written threshold framework agreed while the situation is calm. It should specify, for each of three or four escalation levels: the observable indicators that define entry into that level, the operating posture at that level, the authority that declares it, and the actions that automatically follow.

Useful indicators are observable and non-partisan: airspace and airport status, commercial flight availability, functioning of the banking system and currency convertibility, fuel and power availability, port and border operability, insurer posture, and the movement patterns of other international employers. Note that insurance withdrawal frequently leads the public narrative — when underwriters reprice or exit, they are reporting information.

The reason to pre-agree is not speed alone. It is that judgement degrades under pressure and under sunk cost. A team that has invested three years in a market will find reasons to stay; a threshold agreed in advance removes that argument from the moment it is most likely to be wrong.

Continuity design for degraded environments

Plans written for a functioning environment fail in a degraded one. The design assumptions that matter:

• Communications that survive infrastructure loss — with tested fallbacks, published contact trees, and a single accountable duty officer rota rather than a group email.
• Payments that work when banking does not — pre-positioned local liquidity, alternative payroll routes for local staff, and clear, documented limits on what may be paid to whom.
• Data and systems — what is held locally, what is replicated out, what must be destroyed or rendered inaccessible if a site is lost or seized, and who is authorised to do it.
• Movement and access — realistic assessment of routes, curfews and checkpoints, and an explicit rule that no commercial objective justifies discretionary travel above the declared level.
• Local staff protection — relocation support, continued pay, and a decision made before the crisis about what the organisation will do for people it cannot evacuate. This is the commitment most often deferred and most consequential.

Exit, suspension and the difference between them

Suspension preserves optionality: operations pause, obligations to staff continue, licences and registrations are maintained where possible, and the position can be reversed. Exit is a legal and commercial transaction with tax, employment, contractual and sanctions dimensions, and it is rarely fast.

Firms that manage this well have mapped the exit mechanics in advance — entity structure, transfer restrictions, employment obligations, contractual termination rights, asset disposal constraints and currency repatriation limits — so that a decision to leave is an execution of a known plan rather than the start of a discovery exercise. Firms that manage it badly discover that capital controls, foreign-ownership rules or a state-linked partner make exit slow, expensive or effectively blocked. That discovery belongs in due diligence at entry, not in a crisis.

Adjacent-market and corridor effects

Conflict rarely respects the perimeter of the affected state. The second-order effects that hit balance sheets are usually adjacent: freight re-routing and insurance premia, refugee and labour-market pressure on neighbouring operations, energy and food price transmission, currency and convertibility stress, and secondary sanctions risk arriving through a supplier two tiers away in a third country.

An exposure register scoped only to the conflict state will understate the position, often substantially. Scope it to the corridor and the neighbourhood.

What good looks like

An enterprise handling this well can produce, without preparation: a current list of people in and near the market by employment type; a threshold framework with a named declaring authority; a continuity plan tested in degraded-environment conditions; an exit mechanics memo per material entity; and a decision log showing what was known when. That last artefact is what protects the organisation and its directors when the decisions are reviewed afterwards — and they will be.

Related reading: geopolitical risk governance and board reporting and geopolitical due diligence for market entry. Our teams support enterprises across Asia, the Middle East, Africa, Europe and the Americas through strategic consulting — book an executive consultation.