Learn how to identify, evaluate, and respond to the full range of threats in a conflict environment — from armed actors to unexploded ordnance, disease, and crowd violence.
In a conflict zone, your survival depends not on luck but on your ability to read the environment accurately and consistently. Threats in armed conflict are rarely simple or singular — they layer on top of one another, shift with the political situation, and change by the hour. A street that was safe yesterday may be lethal today. An armed group that ignored civilians last week may be recruiting or extorting this week. Learning to assess threats systematically is the skill that separates those who navigate conflict successfully from those who are caught by surprise.
This guide covers the full threat landscape in conflict environments, explains how to gather and evaluate information, and gives you a practical framework for maintaining situational awareness and making security decisions under uncertainty.
Threats in conflict zones fall into six broad categories, each requiring different awareness and response:
| Threat Category | Examples | Primary Risk |
|---|---|---|
| Organised armed actors | Military units, insurgent groups, militias, paramilitaries | Direct targeting, crossfire, checkpoint violence |
| Unexploded ordnance (UXO) | Landmines, cluster munitions, IEDs, abandoned shells | Inadvertent detonation from contact or movement |
| Criminal violence | Armed robbery, carjacking, kidnap for ransom, opportunistic assault | Exploitation of security vacuum |
| Crowd violence | Protests turning violent, lynch mobs, communal clashes | Being caught in undirected mass violence |
| Disease and public health | Cholera, typhoid, trauma infections, collapse of medical services | Illness and inability to access treatment |
| Structural and environmental | Damaged buildings, flooded or mined roads, unexploded artillery in structures | Collapse, entrapment, secondary explosion |
Understanding which categories are most active in your location at any given moment determines where you direct your attention and what precautions you take.
Armed groups — whether formal military forces or non-state armed actors — represent the most deliberate and intentional threat in a conflict zone. Their behaviour toward civilians is shaped by several factors:
Command and control: A disciplined, hierarchically controlled force with clear rules of engagement treats civilians differently from a fragmented militia operating without oversight. Understand who commands the forces in your area and whether that command structure is intact.
Ideology and goals: Some armed actors seek civilian compliance and support — they are less likely to harm you if you appear non-threatening and neutral. Others have explicit ethnic, religious, or political targeting criteria. Knowing which factions are active and what they stand for is critical to understanding your personal risk level.
Level of desperation or impunity: Forces that are winning tend to follow more disciplined behaviour; forces that are retreating, surrounded, or losing cohesion tend to commit more atrocities. Monitor the military situation and recognise when armed actors around you may be under extreme stress.
Criminal motivation: In protracted conflicts, armed groups often develop predatory economic behaviours — looting, extortion, kidnapping. Even ostensibly political armed actors may behave as criminals when economic opportunity presents itself.
⚠️ Never assume that the armed actor you encounter today will behave as the one you encountered yesterday. Factions split, commanders change, orders are reversed, and soldiers' behaviour shifts dramatically with alcohol, drugs, fear, and fatigue.
UXO kills and maims civilians long after the fighting stops. In active conflict it is an immediate danger on every road, path, field, and damaged building.
Landmines are pressure-activated or victim-operated devices buried in the ground. They are found in fields, roadsides, building approaches, and near strategic infrastructure. Never walk in grass or fields that have not been recently and safely traversed. Follow established, used paths only.
Cluster munitions scatter dozens of sub-munitions over a wide area. Many sub-munitions do not detonate on impact and lie inert until disturbed. They resemble cans, tubes, or small yellow cylinders. Never touch unfamiliar metal objects on the ground.
IEDs (Improvised Explosive Devices) are triggered by pressure, trip wire, remote control, or timer. They may be disguised as ordinary objects — bags, boxes, rocks, food. Be suspicious of any object out of place on a route, especially if it appears to have been recently placed.
Abandoned ordnance — shells, rockets, grenades left by retreating forces — are extremely unstable due to damage and age. Do not enter recently vacated military positions. Do not pick up weapons or munitions.
When state authority collapses, criminal actors fill the vacuum. The security threats you would face in a high-crime urban environment are amplified in conflict because:
Armed robbery and carjacking increase dramatically near displacement routes, fuel queues, banking areas, and markets. Kidnapping for ransom targets foreigners, perceived wealthy individuals, and family members of diaspora sending money home.
Reducing criminal vulnerability:
Good threat assessment requires multiple information sources that you triangulate against one another.
| Source | What It Provides | Limitations |
|---|---|---|
| UN OCHA situation reports | Macro conflict overview, humanitarian access, major incidents | Can lag real-time events by 24–48 hours |
| Embassy security alerts | Country-level and city-level security alerts for nationals | Primarily for foreigners; may be conservative or poorly localised |
| NGO security networks (INSO, GISF) | Operational security intelligence for humanitarian workers | Requires registration; may not cover all areas |
| Local contacts (community leaders, shopkeepers, clergy) | Real-time, hyper-local intelligence | May be partial, rumour-influenced, or reflect specific biases |
| Phone and radio | Breaking news, rumour, crowd-sourced reports | Quality varies enormously; high rumour content |
| Personal observation | Direct situational awareness | Limited range; observer bias |
Triangulating information: Never act on a single source. If your local contact says fighting is near the market, check whether OCHA's latest report mentions increased activity in that sector, and whether your embassy has issued any alerts. Convergence of multiple sources increases reliability significantly.
Learning to recognise warning indicators before a situation becomes immediately life-threatening is the key to decision-making with enough lead time to act.
Environmental red flags:
Social red flags:
Information red flags:
In conflict zones, rumour spreads faster and more widely than accurate information. Acting on rumour can cause harm — it can trigger panic, cause you to expose yourself to danger to flee a non-existent threat, or cause you to stay when you should leave.
Test a rumour by asking:
Reliable information is usually specific, sourced from multiple independent channels, and consistent with observable indicators.
Not all threats affect you equally. Distinguishing between an area-level threat and a personal-level threat allows you to calibrate your response.
Area threats — shelling, airstrikes, street fighting — affect everyone indiscriminately in a geographic zone. The response is to not be in that zone.
Personal threats — based on your nationality, employer, religion, ethnicity, gender, or perceived wealth — are targeted. Someone may be safe in an area while you are specifically at risk based on who you are. Assess whether any armed actors active in your area have historical patterns of targeting people with your profile.
Intersection of both: In some conflict settings, you face both area threats from the general violence AND personal targeting. This compound threat requires both location-based precautions (don't be near the front line) and identity-based precautions (conceal identifying features, limit visibility of your employer or affiliations).
Security posture escalation means progressively restricting your movements and activities as threat levels rise. Have a pre-agreed framework with household members so that escalation decisions are made quickly without debate:
Posture 1 — Normal: Routine movement, work, and activities with standard precautions.
Posture 2 — Elevated: Reduce non-essential movement. Avoid areas with reported incidents. Increase frequency of check-ins. Verify routes before use.
Posture 3 — Restricted: Shelter in place during high-risk periods. Movement only for essential purposes (food, medical, evacuation). Prepare go-bag.
Posture 4 — Lockdown/Evacuation: No external movement except evacuation. Implement evacuation plan immediately.
Pre-decide what triggers each escalation. Removing these decisions from the moment of crisis prevents decision paralysis.
Systematic recording of security incidents serves multiple purposes: it improves your own threat picture, contributes to community safety, and creates a historical record valuable for accountability and legal purposes.
For each incident, record:
Incident logs shared with NGO security networks (INSO), UN OCHA, or the ICRC help those organisations provide better security information to others operating in the same area.
Professional security advisors in conflict zones begin every day with a structured security briefing. You can implement a simplified version:
This habit takes 15 minutes and dramatically improves your situational awareness and decision quality.
| Situation | Action |
|---|---|
| You hear gunfire in your area | Get below window level, move to interior room, do not go outside to look |
| You see an unusual object on a path | Stop, do not approach, warn others, report to UN/HALO Trust if reachable |
| Rumour of imminent attack is circulating | Verify with two independent sources before acting; check observable indicators |
| Local population is visibly moving out | Take this seriously — locals often have better early warning than outside sources |
| Embassy issues security alert | Read it in full; share with household; assess whether your security posture needs adjustment |
| You witness a security incident | Record details immediately; do not share on social media; report to appropriate organisation |
| You believe you are being personally tracked or targeted | Immediately vary routines, avoid predictable patterns, contact organisational security officer if applicable |
| Armed group behaviour suddenly changes in your area | Treat as a red flag; escalate security posture; prepare to move |
// Sources
Take Assessing Threats in a Conflict Zone with you — no internet needed when it matters most.
downloadGet on Google Play