OSINT-032-operational-country-entry-risk-assessment-collection

[COUNTRY/REGION] - Collection Map

OSINT-032 Operational / Country-Entry Risk Assessment - collection workspace. Central topic = the country or sub-national area the operation will enter. Branches = the eight operational risk domains + collection-plan spine. Drop each collected indicator, source, or scored sub-risk as a child node; expand it with the source URL and Admiralty grade. Paste raw tool output into node Notes. → feeds deliverable OSINT-032.

00 · Collection Plan - PIRs & EEIs

The intelligence questions this collection must answer, mapped to OSINT-032’s PIR set (§4) and Key Judgments (§3). Tick each EEI when satisfied; open gaps route to §21 Collection Gaps & RFIs. → drives §3 Key Judgments, §4 PIRs, §15 Overall Operational Risk Rating, §16 Key Findings, §22 Assessment & Recommendations.

PIR-1 - Threat Environment (§6): What is the threat to personnel, assets, and the operation within the assessed area and operational timeframe?

• EEI: armed conflict presence or spillover within the operational geographic bounds
• EEI: terrorism / targeted violence threat level at the specific sites and routes
• EEI: violent and acquisitive crime rates affecting operations (sector/nationality targeting)
• EEI: civil unrest / disorder incidents at operational locations - trend direction
• EEI: kidnap/ransom/extortion threat level (domain-level survey - refer to OSINT-034 for full K&R)
• EEI: threats specifically targeting the client’s sector, nationality, or operation type

PIR-2 - Travel & Movement Risk (§7): What is the risk to personnel and assets transiting planned routes and transport nodes?

• EEI: airport security, reliability, and customs/immigration friction at points of entry/exit
• EEI: land-border / port-of-entry risk (delays, extortion, document scrutiny)
• EEI: road-movement security on identified routes (ambush, IED, banditry, road rage)
• EEI: road-safety risk (accident rates, road condition, driver culture)
• EEI: night-travel restrictions, roadblock culture, weather-driven route closures
• EEI: fuel availability, vehicle/transport reliability, and mobility-logistics constraints

PIR-3 - Site & Facility Risk (§8): What is the specific risk at the client’s identified operational sites, accommodation, and facilities?

• EEI: physical security posture at each named site (access control, perimeter, guard force)
• EEI: proximity of each site to crime hotspots, protest-prone areas, conflict targets
• EEI: structural, fire, and H&S standards at the accommodation/office/storage facilities
• EEI: contingency and fallback-site availability within the operational area

PIR-4 - Infrastructure & Utility Risk (§9): What is the risk of essential-service failure at the operation’s locations?

• EEI: power-grid reliability and backup-power adequacy at the operational sites
• EEI: water quality and availability at sites
• EEI: telecom / internet / VPN connectivity and redundancy
• EEI: IT infrastructure and data-sovereignty / data-interception risk
• EEI: fuel and supply-chain dependency at the operational sites

PIR-5 - Medical & Health Risk (§10): What are the medical and public-health risks to personnel during the operation?

• EEI: endemic disease and active outbreak risk for the operational timeframe and locations
• EEI: medical-evacuation access, travel time, and availability of MEDEVAC providers
• EEI: in-country medical-facility quality at or near operational sites
• EEI: trauma and emergency-response capacity in the area
• EEI: food/waterborne illness risk; vaccination / prophylaxis requirements

PIR-6 - Legal, Regulatory & Compliance Risk - Operational (§11): What legal and regulatory conditions affect the operation’s lawful execution?

• EEI: visa, work-permit, and residency requirements for operation’s personnel nationalities
• EEI: customs / import-export requirements for operational equipment and supplies
• EEI: local-hire and labour-law obligations
• EEI: sector-specific licensing or authorisation requirements for the operation’s activity
• EEI: data-localisation, privacy, and operational-communications regulations
• EEI: sanctions / export-control exposure for the operation’s technology, goods, or personnel

PIR-7 - Cultural, Community & Reputational Risk (§12): What social and community risks at the operation’s specific locations could affect safety, access, or reputational standing?

• EEI: community sentiment toward the client’s sector, nationality, or foreign workers in the area
• EEI: cultural friction points (dress, behaviour, photography, religious observance, gender dynamics) affecting safety or access
• EEI: language barriers and communication risk
• EEI: protest, NGO-campaign, or community-action risk directed at the operation or its sector

PIR-8 - Environmental & Seasonal Risk (§13): What environmental and seasonal hazards affect the operation within its timeframe?

• EEI: seasonal weather hazards coinciding with the operational window (rain, heat, storm, etc.)
• EEI: seismic / volcanic / flood / landslide hazard at operational locations
• EEI: seasonal disease-vector activity within the operational timeframe
• EEI: environmental conditions affecting movement, equipment, or site safety

Collection gaps / RFIs (running)

• [open item] → route to §21 Collection Gaps & RFIs
• [open item - e.g., site-level source coverage thin for sub-national area]
• [open item - e.g., route-specific road-security intelligence not available]

01 · Geographic & Administrative

Geographic and administrative baseline for the country/sub-national area - the frame within which the operation sits. → feeds §2 Executive Summary & Scope, §5 Operational Risk Framing (geographic/administrative bounds), Appendix A.

Country / area identity

• Country / territory:
• Sub-national area / region / defined bounds:
• Capital / principal cities in scope:
• Administrative divisions relevant to operational sites:

Operational footprint coordinates

• Defined geographic bounds (lat/long or descriptive):
• Specific operational sites (list by name):
• Planned routes (named corridors):

Transport infrastructure overview

• International airports in scope:
• Land border crossings in use:
• Sea / river ports in use:
• Primary road arteries on planned routes:

Country baseline pointer

• Source OSINT-031 Country Risk Assessment available? [Y/N]
  • If yes - reference / date:
  • If no - compressed environmental picture to be built in-house:
• Notes / tool output: ← CIA World Factbook, ACLED country page, official govt portal

02 · Political & Governance

Political stability and governance factors relevant to the operation’s ability to proceed and be protected. → feeds §5 Operational Risk Framing (methodology / relationship to country baseline), §11 Legal/Regulatory, §15 Overall Rating.

Regime type & stability

• Government type:
• Stability assessment (head of state, coalition fragility):
• Recent / upcoming elections or succession events:
• Confidence: [H/M/L]

Governance quality

• Rule-of-law index / ranking (source):
• Corruption Perceptions Index score / ranking:
• Bureaucratic obstruction risk (permits, customs):

Government posture toward the operation’s sector / nationality

• Known policy stance:
• Documented incidents of expropriation / interference / denial of permit:
• Notes / tool output: ← ICRG, Freedom House, Transparency International, ACLED

Political risk events (horizon)

• [event - e.g., election, parliamentary vote, constitutional deadline]
  • Date:
  • Risk implication for operation:
  • Confidence: [H/M/L]
  • Notes / tool output:

03 · Security & Conflict

The threat environment at the operational level - armed conflict, terrorism, crime, and unrest scoped to the operational area and timeframe. Primary feed for §6 Threat Environment Risk (PIR-1). Also primes §17 Risk-Escalation & Early-Warning Indicators. Clone the event block per incident type.

Conflict & armed-group presence

→ feeds §6 Threat Environment Risk, KJ-2, §14 Consolidated Risk Register. Clone block per armed group or conflict zone.

• [armed group / conflict dynamic - e.g. insurgency, inter-communal violence]
  • Active area / proximity to operational sites:
  • Trend (within operational window): [↑/→/↓]
  • ACLED / UCDP data points:
  • Attribution confidence: [Confirmed / Probable / Possible]
  • Notes / tool output: ← ACLED, UCDP GED, Crisis Group, Jane’s

Terrorism / targeted violence

→ feeds §6 sub-risk: Terrorism / targeted violence. Clone per group or threat type.

• [threat actor / attack type - e.g. IED, kidnap, VB-IED]
  • Claimed area of operations:
  • Recent incidents near operational sites (date, type, location):
  • Trend: [↑/→/↓]
  • Confidence: [H/M/L]
  • Notes / tool output: ← RAND, START GTD, local English-language press, OSC/FBIS equivalents

Crime environment

• Violent crime rate (homicide per 100k):
• Acquisitive crime affecting expatriates / the sector:
• Organised crime / extortion presence:
• Incidents targeting the client’s nationality or sector:
• Notes / tool output: ← UNODC, US State Dept OSAC, UK FCDO Travel Advice

Civil unrest / protest

→ feeds §6 sub-risk: Civil unrest. Clone per event / hotspot.

• [unrest type / cause - e.g. fuel protests, labour action, political demonstration]
  • Location(s) relevant to operation:
  • Frequency and scale:
  • Trend: [↑/→/↓]
  • Notes / tool output: ← ACLED, local media scrape, social media monitoring

Kidnap / ransom / extortion (domain-level)

• KRE threat level in the operational area:
• Target profile relevance (nationality, sector, perceived wealth):
• Recent incidents:
• Notes / tool output: ← Control Risks KRE index, OSAC, US State Dept
• [Flag if full K&R analysis required → OSINT-034]

04 · Economic & Infrastructure

Infrastructure and utility conditions at the operation’s specific sites - feeds §9 Infrastructure & Utility Risk (PIR-4). Also informs §18 Risk Treatment (mitigation options: backup power, comms redundancy).

Power infrastructure

→ feeds §9 sub-risk: Power-grid reliability. Clone per site if conditions differ.

• [site / locality]
  • Grid reliability (outage frequency/duration):
  • Backup-power adequacy at site:
  • Source / date:
  • Confidence: [H/M/L]
  • Notes / tool output: ← World Bank infrastructure data, utility regulator reports, in-country contacts

Water infrastructure

• [site / locality]
  • Municipal water quality / availability:
  • Bottled / treated water dependency:
  • Notes / tool output:

Telecom / internet / connectivity

• [site / locality]
  • Mobile network coverage (operators, 3G/4G/5G):
  • Fixed internet / fibre availability:
  • VPN / encrypted-comms restrictions:
  • Data-sovereignty / state-interception risk:
  • Notes / tool output: ← ITU, GSMA, Freedom House Internet Freedom, Speedtest Intelligence

Fuel & supply-chain

• Fuel availability / reliability at operational sites:
• Supply-chain dependencies for operational consumables:
• Notes / tool output:

Sanitation

• Waste / sanitation adequacy at operational sites:
• Notes / tool output:

05 · Social & Demographic

Social fabric, cultural norms, community sentiment, and demographic factors that determine the operation’s social licence and cultural risk. Primary feed for §12 Cultural, Community & Reputational Risk (PIR-7).

Cultural norms & friction points

→ feeds §12 sub-risk: Cultural friction / safety risk. Document per location or sector.

• [cultural norm / friction point - e.g. dress code, photography restrictions, gender dynamics, religious observance]
  • Location relevance:
  • Operational impact:
  • Source:
  • Notes / tool output: ← US State Dept country notes, UK FCDO, Kwintessential, in-country advisers

Community sentiment

• Sentiment toward the client’s nationality:
• Sentiment toward the client’s sector / industry:
• Documented hostility incidents:
• Notes / tool output:

Language barriers

• Primary language(s) in operational area:
• English / operational-language availability:
• Communication risk assessment:
• Notes / tool output:

Protest / NGO / campaign risk

→ feeds §12 sub-risk: Protest / NGO / campaign risk. Clone per campaign or actor.

• [campaign / NGO / cause]
  • Target: [sector / company / nationality]
  • Activity level:
  • Proximity to operational sites:
  • Notes / tool output: ← NGO websites, social media search, local press

06 · Key Actors & Entities

Key actors in the operational environment - government, security, threat, and enabling - that the operation must navigate, avoid, or engage. Feeds §6 Threat Environment, §11 Legal/Regulatory, §12 Cultural Risk, §22 Recommendations. Clone the block per actor.

Government / regulatory actors

→ feeds §11 Legal/Regulatory, §22 Recommendations for decision-makers and legal advisers.

• [ministry / agency / official - e.g. immigration authority, customs, local governor]
  • Role relevant to operation:
  • Known posture / risk:
  • Contact / liaison:
  • Notes / tool output: ← official portals, embassy resources, country-risk databases

Security actors (formal and informal)

→ feeds §6 Threat Environment, §8 Site & Facility Risk.

• [security force / militia / private security provider - e.g. national police, army checkpoint units, local guard firms]
  • Area of operation:
  • Reliability / corruption risk:
  • Contact / coordination:
  • Notes / tool output: ← ACLED (security force incidents), OSAC, in-country networks

Threat actors (non-state)

→ feeds §6 Threat Environment, §14 Consolidated Risk Register. Clone per group.

• [threat actor name]
  • Type: [insurgent / criminal / terrorist / hybrid]
  • Area of operations relevant to the client:
  • Targeting profile:
  • Recent activity:
  • Attribution confidence: [Confirmed / Probable / Possible]
  • Notes / tool output: ← ACLED, UCDP, GTD, OSAC, open HUMINT reporting

Enabling / support entities

Local partners, suppliers, fixers, security contractors, medical providers who support the operation.

• [entity name - e.g. local security contractor, in-country partner, medical provider]
  • Role in operation:
  • Vetting status: [Vetted / Pending / Unknown]
  • Due-diligence notes:
  • Notes / tool output: ← OpenCorporates, local registries, adverse-media search

07 · Legal & Regulatory Environment

Legal and regulatory conditions as they bear on the operation’s lawful and uninterrupted execution. Primary feed for §11 Legal, Regulatory & Compliance Risk (PIR-6). Also informs §22 Recommendations (legal/compliance advisers).

Visa / entry requirements

• [nationality group - e.g. EU nationals, US nationals]
  • Visa requirement: [Visa on arrival / e-Visa / Consular visa / Visa-free]
  • Work-permit / residency requirement:
  • Processing time / lead time:
  • Known friction / denial risk:
  • Notes / tool output: ← IATA Travel Centre, embassy official portal, Timatic

Customs / import-export

• Equipment / technology restrictions:
• Prohibited / controlled items relevant to operation:
• Duties, bonds, and carnet requirements:
• Notes / tool output: ← national customs authority, WCO, ECFR / BIS export control registers

Labour law & local-hire obligations

• Local-hire quotas / requirements:
• Employment contract / termination law risk:
• Notes / tool output:

Liability & insurance requirements

• Mandatory insurance types for the operation’s activities:
• Liability regime (tort / statutory):
• Notes / tool output:

Sector-specific licensing / authorisation

• [licence / permit type required for the operation’s activity]
  • Issuing authority:
  • Lead time / cost:
  • Risk of denial or delay:
  • Notes / tool output: ← sector-regulator official portal, legal advisers

Sanctions / export-control exposure

• OFAC SDN / OFAC country-level restrictions:
• EU / UK / UN sectoral or country sanctions:
• Export-control restrictions (EAR / ITAR or local equivalents) relevant to operation’s technology or goods:
• Notes / tool output: ← OFAC SDN search, EU financial sanctions database, UK OFSI, UN Security Council list

Data-localisation / privacy regulations

• Data-localisation laws affecting operational data and communications:
• Encryption restrictions:
• State surveillance / interception risk:
• Notes / tool output: ← GTDT, DLA Piper Data Protection Navigator, Freedom House Internet Freedom

08 · Indicators & Events

Observable, time-sensitive indicators and events relevant to the operation’s risk trajectory. Primary feed for §17 Risk-Escalation & Early-Warning Indicators (Operational) and §19 ACH. Clone the block per indicator or event.

Threat-environment indicators

→ feeds §17 Indicator Register, §19 ACH, KJ-3. These are the tripwires the client’s opsec team monitors during the operation.

• [indicator - e.g. armed incident within 50km of operational site; IED report on planned route]
  • Risk / domain: [§6 Threat Environment]
  • Score-change signalled:
  • Severity: [Critical / High / Medium / Low]
  • Current status: [Not present / Emerging / Present]
  • Disposition: [Watch / Notify client / Re-score / Escalate to OSINT-034 K&R / OSINT-036 Monitoring]
  • Notes / tool output: ← ACLED real-time feed, OSAC alerts, local media

Travel & movement indicators

• [indicator - e.g. airport closure, border closure, route IED report, fuel shortage]
  • Risk / domain: [§7 Travel & Movement]
  • Score-change signalled:
  • Severity: [Critical / High / Medium / Low]
  • Current status: [Not present / Emerging / Present]
  • Disposition:
  • Notes / tool output: ← NOTAM feeds, FCDO/State Dept travel alerts, local transport authority

Infrastructure / utility indicators

• [indicator - e.g. prolonged power outage at site, telecom provider outage, water contamination advisory]
  • Risk / domain: [§9 Infrastructure & Utility]
  • Score-change signalled:
  • Severity: [Critical / High / Medium / Low]
  • Current status: [Not present / Emerging / Present]
  • Disposition:
  • Notes / tool output:

Medical / health indicators

• [indicator - e.g. WHO outbreak alert, epidemic declared, MEDEVAC route disrupted]
  • Risk / domain: [§10 Medical & Health]
  • Score-change signalled:
  • Severity: [Critical / High / Medium / Low]
  • Current status: [Not present / Emerging / Present]
  • Disposition:
  • Notes / tool output: ← WHO GOARN, ProMED, ReliefWeb, CDC Traveler’s Health

Political / regulatory indicators

• [indicator - e.g. sudden visa-policy change, coup attempt, protest escalation, new sanctions designations]
  • Risk / domain: [§11 Legal/Regulatory or §6 Threat]
  • Score-change signalled:
  • Severity: [Critical / High / Medium / Low]
  • Current status: [Not present / Emerging / Present]
  • Disposition:
  • Notes / tool output: ← government gazette / official monitor, OFAC/OFSI update feeds, ACLED

Environmental / seasonal indicators

• [indicator - e.g. cyclone forecast, flood watch issued, earthquake >5.0 within 200km]
  • Risk / domain: [§13 Environmental & Seasonal]
  • Score-change signalled:
  • Severity: [Critical / High / Medium / Low]
  • Current status: [Not present / Emerging / Present]
  • Disposition:
  • Notes / tool output: ← WMO, national met office, GDACS, USGS earthquake feed

Events timeline (operational window)

Chronological log of events relevant to the operation within its defined timeframe. → feeds §14 Consolidated Risk Register, §15 Overall Rating trajectory, §19 ACH.

• [event - e.g. election date, religious festival, national holiday, scheduled protest, seasonal onset]
  • Date:
  • Operational impact:
  • Risk domain:
  • Notes / tool output:

09 · Sources & Media Landscape

Quality and access of source coverage for the operational area - informs §23 Annex A (Sources & Methodology) and coverage-confidence rating. Also flags contested-information-environment risks.

Official / government sources

• [source - e.g. national statistics office, official health authority, customs authority]
  • Self-interest / reliability caveat:
  • Admiralty reliability: [A–F]
  • Notes / tool output:

Independent media coverage

• [outlet / platform - e.g. local English-language press, wire services, regional bureaux]
  • Coverage quality of the operational area:
  • Language(s) available:
  • Admiralty reliability: [A–F]
  • Notes / tool output: ← RSF Press Freedom Index, CPJ country page, local outlet verification

Country-risk and conflict data providers

• ACLED - coverage quality for area:
• UCDP - coverage:
• Crisis Group / Jane’s / Oxford Analytica - subscription available: [Y/N]
• Control Risks / Drum Cussac / iJET - subscription available: [Y/N]
• Notes / tool output:

Country Risk Assessment baseline (OSINT-031)

• Commissioned / available: [Y/N]
• Date / version:
• Domains covered that this product inherits:
• Adjustments required for operational resolution:
• Notes:

Coverage gaps & contested-information environment

• Sub-national / site-level data availability:
• Language barrier impact on sourcing:
• State-controlled-media dominance risk:
• Notes / tool output:

99 · Collection Admin

Working register - not a deliverable section, but the audit trail behind the scores and findings. Every material datum is traceable to a graded source here.

Source register

Every material datum is graded with the Admiralty two-axis code (A–F / 1–6). Record here; this populates §23 Annex A and Appendix J.

• [S-1 - source name / reference]
  • Type: [Primary / Secondary / Tertiary]
  • Reliability (A–F):
  • Credibility (1–6):
  • Coverage scope:
  • Date accessed:
  • Self-interest / reliability caveat:

Evidence archive

Screenshots, captures, and exports with hash, URL, and timestamp. → feeds Appendix J Full Source Register.

• [capture ref + hash + URL + timestamp]:

Scored sub-risk working table

Working register for §6–§13 domain scoring before consolidation into §14. One row per sub-risk.

• [sub-risk name - domain §]
  • Inherent L:
  • Inherent I:
  • Inherent score (L×I):
  • Existing mitigation:
  • Residual score:
  • Trend: [↑/→/↓]
  • Confidence: [H/M/L]
  • Source grade:

Open gaps / verification pending

Running gap list - feeds §21 Collection Gaps & RFIs in the deliverable.

• [item - domain - impact on rating - recommended collection - escalation target - priority H/M/L]

Assumptions log

Working list of assumptions credited in the scores - feeds §20 Key Assumptions Check (KAC).

• [assumption - basis - confidence - impact if wrong - linchpin Y/N]

ACH working notes

Evidence arrayed against competing hypotheses for §19 ACH (typically: risk holds at band / escalates / de-escalates within the operational window).

• [evidence item] - H1 [C/I/N] - H2 [C/I/N] - H3 [C/I/N]