COUNTRY RISK ASSESSMENT
[COUNTRY / REGION - RISK ASSESSMENT TITLE - ENGAGEMENT REF]
The Country Risk Assessment is the holistic, purpose-scored risk rating of a country (or defined sub-national area) for a client with interests, personnel, assets, or exposure in or connected to it. Where the Regional Study describes and assesses what the operating environment IS, this product takes that environmental baseline as input and answers a different question - how much risk does this environment pose to the client, in which domains, and which way is it trending - expressing the answer as a structured, scored, and ranked risk picture using an explicit Likelihood × Impact (1–5 × 1–5 = 1–25) register, a domain heat map, and a headline country-risk rating. It is a space/time-anchored framework product: its risk taxonomy maps onto the PMESII-PT variables, and its collection logic is PIR → risk-domain → indicator → source. It is the parent product of the Geopolitical Risk Assessment node and is deliberately broad; it does not deliver the operation-scoped, footprint-specific scoring of the Country-Entry Risk Assessment (risk to a specific deployment, footprint, or operation on the ground); the capital/commercial-decision lens of the Market-Entry Risk Assessment; the threat-actor-specific kidnap, ransom, and extortion focus of the Kidnap & Ransom (K&R) Risk Assessment; the flow-and-node analysis of the Supply Chain & Logistics Risk Assessment; or the ongoing-cadence re-scoring of Continuous Country Risk Monitoring (retained service). Where those needs surface, raise them as RFIs in §20 and escalate. Risk-treatment content here is analytic and advisory - it identifies what would reduce residual risk; it does not constitute an operational security, protective, evacuation, or compliance plan, which are separately scoped products. This is a risk assessment; it is not legal, investment, insurance, security, or travel advice, and it is not a guarantee of future conditions.
Document Control
| Field | Value |
|---|---|
| Report Reference | [REF-YYYY-###] |
| Date of Report | [YYYY-MM-DD] |
| Baseline / As-Of Date | [YYYY-MM-DD - the date through which risk is assessed] |
| Classification / Handling | [CONFIDENTIAL - CLIENT EYES ONLY / TLP:AMBER] |
| Client | [CLIENT NAME] |
| Requesting Party | [CONTACT - ENGAGEMENT REF] |
| Area Assessed | [COUNTRY / REGION / SUB-NATIONAL AREA - and defined geographic bounds] |
| Client Exposure Profile | [What the client has at risk - e.g., resident personnel / travelling principals / fixed assets / investment / supply nodes / commercial operations / none-yet (prospective)] |
| Engagement Purpose | [Decision the rating informs - e.g., go/no-go, posture-setting, insurance, board risk register, continuous-monitoring baseline] |
| Risk Horizon | [The forward window the rating covers - e.g., 6 / 12 / 24 months] |
| Scope / Depth | [Whole-of-country multi-domain risk rating - see §2 scope] |
| Prepared By | [ANALYST NAME / ID] |
| Reviewed By | [REVIEWER NAME / ID] |
| Approving Officer | [APPROVER NAME / ID] |
| Version | [1.0] |
| Distribution | [NAMED RECIPIENTS] |
Handling & Legal Caveat
Handling: [Classification/TLP]. Disseminate only to the named authorized recipients. Reproduction or onward sharing prohibited without originator approval. Where the assessment names individuals (leadership, officials, threat actors, private persons), it may contain personal data - store and transmit per the client data-processing agreement and applicable data-protection frameworks (GDPR, CCPA, and local equivalents).
Nature of this product (READ FIRST): This is a strategic, open-source-based analytic assessment of risk to the client, prepared to inform the client’s risk-management decisions. It is not legal advice, investment advice, insurance advice or an insurance opinion, security or travel advice, a credit or sovereign-rating-agency product, or a guarantee of future conditions. The risk scores are the firm’s structured analytic judgments, calibrated to the stated scales - they are an aid to reasoning and prioritisation, not precise measurements, actuarial probabilities, or statements of certainty. The rating is one input; the client’s legal, security, financial, insurance, and in-country advisers should be relied on for operational and transactional determinations.
Analytic independence & policy neutrality (ICD 203): Scores and judgments are the firm’s independent analytic assessment, reached on the evidence and free of policy advocacy, a client-preferred answer, or any government’s or party’s line. Reporting is distinguished from analyst judgment throughout; uncertainty drivers and change indicators are stated explicitly; alternative explanations are tested, not suppressed. Where the client’s commercial or operational preference points one way, the assessment is not adjusted to suit it.
Sourcing & legality: Findings derive from open, licensed, and lawfully accessed sources - public record, official statistics, reputable media, academic and institutional reporting, recognised country-risk and conflict datasets used within licence, and (where commissioned) discreet in-country human sourcing - current as of the baseline date and graded (Annex A). No classified, proprietary-without-licence, or unlawfully obtained material is used; copyright and database-licence terms are respected. Official statistics and state-controlled media are treated as potentially self-interested and corroborated against independent sources.
Scope of risk-treatment content: Mitigation and risk-reduction options in §17 are advisory and analytic - they indicate the direction and category of measures that would lower residual risk. They are not an operational security, protective-operations, evacuation, business-continuity, or legal-compliance plan, and they should not be implemented without a separately scoped, separately governed product and qualified in-country and legal advice.
Perishability: This is a point-in-time rating against a stated horizon. Country risk moves; indicators shift. Scores are time-sensitive - re-verify against current reporting before any consequential or time-critical decision, and commission Continuous Country Risk Monitoring for standing currency.
Reliance: Reliance is limited to the named client for the stated purpose; no third-party reliance without originator consent.
Risk Snapshot
| Field | Value |
|---|---|
| Area Assessed | [Country / region / defined sub-national bounds] |
| Risk Horizon | [6 / 12 / 24 months] |
| Overall Country Risk Rating | [LOW (1–5) / MODERATE (6–10) / ELEVATED (11–15) / HIGH (16–20) / CRITICAL (21–25)] - [aggregate score] |
| Rating Trajectory | [Improving / Stable / Deteriorating / Volatile - see §14] |
| Highest-Risk Domain(s) | [The 1–2 domains driving the rating - see §13] |
| Top Residual Risks | [The 2–3 ranked residual risks the client most needs to act on - see §13] |
| Principal Risk Drivers | [The structural/proximate forces pushing risk up - see §14] |
| Highest-Priority Watch Indicators | [The 1–3 indicators whose movement would most change the rating - see §16] |
| Coverage Confidence | [HIGH / MODERATE / LOW - access, source diversity, currency - see §22] |
| Overall Assessment Confidence | [HIGH / MODERATE / LOW - see §22] |
Table of Contents
- BLUF
- Executive Summary & Scope
- Key Judgments
- Priority Intelligence Requirements (PIRs)
- Risk Framing, Taxonomy & Methodology
- Political & Governance Risk
- Security & Safety Risk
- Economic & Financial Risk
- Regulatory, Legal & Compliance Risk
- Operational & Infrastructure Risk
- Societal & Human-Environment Risk
- Environmental & Natural-Hazard Risk
- Consolidated Risk Register & Heat Map
- Overall Country Risk Rating & Trajectory
- Key Findings Summary
- Risk-Escalation & Early-Warning Indicators
- Risk Treatment & Mitigation Options (Advisory)
- Analysis of Competing Hypotheses (ACH)
- Key Assumptions Check (KAC)
- Collection Gaps & RFIs
- Assessment & Recommendations
- Annex A - Sources & Methodology
- Annex B - Appendices
(Page numbers populate on export to Word/PDF.)
1. BLUF
2–3 sentences. Lead with the overall country risk rating and trajectory, the domain(s) driving it, and the single most decision-relevant implication for the client’s stated exposure and purpose - with the recommended posture or next step. Written so the decision-maker can act on this line alone.
[BLUF]
2. Executive Summary & Scope
Triggering requirement and engagement purpose; the client’s exposure profile and the decision the rating informs. Scope in/out stated explicitly - geographic and administrative bounds, the risk horizon, the risk domains scored, the client-exposure lens applied, and what is deferred to sibling/downstream products (operation-scoped risk → Country-Entry Risk; investment/market-entry → Market-Entry Risk; K&R-specific → K&R Risk; supply-chain → Supply Chain & Logistics Risk; ongoing monitoring → Continuous Country Risk Monitoring; the descriptive environmental baseline this consumes → Regional Study). Narrative synthesis of the rating and the principal residual risks across the domains below, to the ICD 203 floor - reporting separated from analytic judgment, uncertainty drivers named, alternatives acknowledged. State the headline rating, its trajectory, and the top residual risks here.
[EXECUTIVE SUMMARY & SCOPE]
3. Key Judgments
The analytic bottom line on risk - the overall rating and its direction, the domains and drivers that most determine it, and the most consequential residual risks to the client. Each judgment carries likelihood and analytic confidence as separate columns (never combined - ICD 203) and a change-indicator stating what would shift it. Order by decision-relevance. Note: the ICD 203 likelihood term here describes the analytic judgment; the 1–5 likelihood in the risk register (§6–§13) is the scoring input - keep the two distinct and consistent (see §5 for the mapping).
| # | Key Judgment | Likelihood | Analytic Confidence | Change Indicator (what would shift it) |
|---|---|---|---|---|
| KJ-1 | [e.g., Overall country risk is assessed [BAND] over the [horizon], driven primarily by [domain/driver]] | [ICD 203 term] | [HIGH/MOD/LOW] | [ ] |
| KJ-2 | [e.g., The highest residual risk to the client’s [exposure] is [risk], scored [residual L×I]] | [ ] | [ ] | [ ] |
| KJ-3 | [e.g., The dominant escalation pathway is [pathway], turning on [pivotal event/indicator]] | [ ] | [ ] | [ ] |
| KJ-4 | [e.g., Risk in [domain] is [stable/rising/falling] because [driver]] | [ ] | [ ] | [ ] |
| KJ-5 | [e.g., The rating trajectory is [improving/stable/deteriorating/volatile], pending [pivotal event]] | [ ] | [ ] | [ ] |
4. Priority Intelligence Requirements (PIRs)
Collection-management spine for a risk product: PIR → risk-domain → indicator → source. State each PIR, the answer, key evidence, and analytic confidence. Each PIR maps to one or more risk domains. Summarize in the matrix.
- PIR-1 - Political & governance risk: What is the likelihood and client impact of political instability, policy/leadership change, expropriation, or breakdown of governance over the horizon? [Answer / evidence / confidence]
- PIR-2 - Security & safety risk: What is the threat to the client’s people and assets from conflict, terrorism, violent crime, civil unrest, and targeted threats, and which way is it trending? [ ]
- PIR-3 - Economic & financial risk: What is the exposure to currency, capital-control, sovereign/financial, inflation, and macro-shock risk? [ ]
- PIR-4 - Regulatory, legal & compliance risk: What is the exposure to sanctions, expropriation, contract/rule-of-law failure, corruption-driven compliance risk, and adverse regulatory change? [ ]
- PIR-5 - Operational & infrastructure risk: What is the risk to operations from infrastructure failure, service disruption, access/movement constraints, and dependency single-points-of-failure? [ ]
- PIR-6 - Societal & human-environment risk: What is the risk arising from social fault lines, unrest, labour, public sentiment toward the client/foreign interests, and information-environment threats? [ ]
- PIR-7 - Environmental & natural-hazard risk: What is the exposure to natural hazards, climate stress, and environmental events that could affect people, assets, or continuity? [ ]
- PIR-8 - Trajectory & inflection: Where is overall risk heading over the horizon, and what events/indicators would mark a step-change in the rating? [ ]
- [Add engagement-specific PIRs - e.g., a named site, corridor, counterparty, or threat actor relevant to the client’s exposure.]
| PIR | Risk Domain(s) | Answer (summary) | Confidence | Key Gap |
|---|---|---|---|---|
| PIR-1 | Political | [ ] | [H/M/L] | [ ] |
| PIR-2 | Security | [ ] | [H/M/L] | [ ] |
| PIR-3 | Economic | [ ] | [H/M/L] | [ ] |
| PIR-4 | Regulatory/Legal | [ ] | [H/M/L] | [ ] |
| PIR-5 | Operational/Infra | [ ] | [H/M/L] | [ ] |
| PIR-6 | Societal | [ ] | [H/M/L] | [ ] |
| PIR-7 | Environmental | [ ] | [H/M/L] | [ ] |
| PIR-8 | Trajectory | [ ] | [H/M/L] | [ ] |
5. Risk Framing, Taxonomy & Methodology
The load-bearing methodology section for a scored product - state the rules before any score appears so the rating is transparent and reproducible. Define, in order:
- Client exposure & risk lens. What the client has at risk (people / assets / capital / operations / reputation / continuity) and therefore the lens through which impact is scored. Risk is scored as risk TO THIS CLIENT’s exposure, not as generic country risk in the abstract - state this explicitly.
- Risk taxonomy. The risk domains used (this template uses seven - §6–§12 - mapped to PMESII-PT: Political↔P, Security↔M, Economic↔E, Regulatory/Legal↔P/E, Operational/Infrastructure↔I(infra), Societal↔S/I(info), Environmental↔PE). Note any domain de-emphasised or added for this engagement and why.
- Scoring scales. Likelihood (1–5) and Impact (1–5) → inherent score (1–25); the band key; and the inherent → mitigation → residual logic. Impact is scored against the client’s exposure, not against the country. State how the 1–5 likelihood relates to the ICD 203 estimative bands used in the Key Judgments (the mapping table below).
- Inherent vs. residual risk. Inherent = before client/existing mitigations; residual = after accounting for mitigations in place. Where the client has no presence yet (prospective), state that residual = inherent until measures are defined.
- Risk tolerance frame. The rating is objective (the firm’s assessment of risk level); the client’s risk appetite/tolerance is recorded as context for interpreting it, not used to adjust the scores.
- Relationship to other products. This consumes the Regional Study baseline (or builds a compressed environmental picture if that study was not commissioned) and feeds the operation/investment/K&R/supply-chain siblings and continuous monitoring.
- Principal coverage constraints. Access, language, official-data reliability, contested information environment.
| Framing Element | Content |
|---|---|
| Client exposure & risk lens | [People / assets / capital / operations / reputation / continuity - and the dominant exposure] |
| Geographic / administrative bounds | [ ] |
| Risk horizon | [6 / 12 / 24 months] |
| Risk domains scored (taxonomy) | [Seven default domains; note additions/de-emphasis and why] |
| Inherent vs. residual basis | [Existing mitigations credited / prospective - residual = inherent] |
| Client risk tolerance (context only) | [e.g., Low / Moderate / High appetite - recorded, not used to adjust scores] |
| Relationship to other products | [Consumes Regional Study baseline / feeds the Geopolitical Risk Assessment siblings / standalone] |
| Principal coverage constraints | [Access, language, official-data reliability, contested information] |
Likelihood (1–5) ↔ ICD 203 mapping (apply consistently):
| Score | Likelihood (1–5) | Approx. ICD 203 band |
|---|---|---|
| 1 | Remote | almost no chance / very unlikely (01–20%) |
| 2 | Unlikely | unlikely (20–45%) |
| 3 | Possible | roughly even chance (45–55%) |
| 4 | Likely | likely (55–80%) |
| 5 | Almost certain | very likely / almost certain (80–99%) |
Impact (1–5), scored against client exposure: 1 Negligible · 2 Minor · 3 Moderate · 4 Major · 5 Severe/Catastrophic. Define each band concretely for this client in the source annex (e.g., what a “Major” people-safety vs. financial impact means).
6. Political & Governance Risk
Risk to the client arising from the political and governance environment: instability and transfer-of-power risk; policy and leadership-change risk; expropriation / nationalisation / forced-localisation risk; breakdown of rule of law and institutional capacity; corruption as it bears on the client; and contested-legitimacy or conflict-of-authority risk. Consume the §6 political baseline of the Regional Study where available; here, score it as risk to the client’s exposure. Assess each sub-risk, do not merely describe the politics.
| Sub-Risk | Driver / Basis | Likelihood (1–5) | Impact (1–5) | Inherent (L×I) | Existing Mitigation | Residual | Trend | Confidence | Source Grade |
|---|---|---|---|---|---|---|---|---|---|
| Political instability / transfer-of-power risk | [ ] | [1–5] | [1–5] | [ ] | [ ] | [ ] | [↑/→/↓] | [H/M/L] | [A–F/1–6] |
| Policy / leadership-change risk | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Expropriation / nationalisation / localisation | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Rule-of-law / institutional-capacity failure | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Corruption exposure (as it bears on client) | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
Political risk assessment: [Synthesis - the net political-risk picture for the client, the dominant sub-risk, and the principal uncertainty.]
7. Security & Safety Risk
Risk to the client’s people and physical assets from the security environment: armed conflict and spillover; terrorism and targeted violence; violent and acquisitive crime; civil unrest and disorder; and threats targeting foreign interests, the client’s sector, or the client specifically. Apply the security baseline of the Regional Study (§7) and OCOKA terrain factors where movement/site risk is relevant. The kidnap, ransom, and extortion threat is surveyed here and scored at domain level; the dedicated threat-actor analysis, viability, and response posture are deferred to the K&R Risk Assessment.
| Sub-Risk | Driver / Basis | Likelihood (1–5) | Impact (1–5) | Inherent (L×I) | Existing Mitigation | Residual | Trend | Confidence | Source Grade |
|---|---|---|---|---|---|---|---|---|---|
| Armed conflict / spillover | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Terrorism / targeted violence | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Violent & acquisitive crime | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Civil unrest / disorder | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Kidnap / ransom / extortion (domain-level - K&R Risk Assessment) | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Threats targeting client / sector / foreign interests | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
Security risk assessment: [Synthesis - net threat to the client’s people and assets, the principal threat dynamic, and escalation pathways.]
8. Economic & Financial Risk
Risk to the client from the economic and financial environment: currency, convertibility, and capital-control risk; sovereign, banking-system, and counterparty financial risk; inflation, macro-shock, and recession risk; commodity/sector exposure; and contract-payment and repatriation risk. Consume the §8 economic baseline of the Regional Study. The full investment/market-entry financial-decision analysis is deferred to the Market-Entry Risk Assessment; here the lens is risk to the client’s existing or committed exposure.
| Sub-Risk | Driver / Basis | Likelihood (1–5) | Impact (1–5) | Inherent (L×I) | Existing Mitigation | Residual | Trend | Confidence | Source Grade |
|---|---|---|---|---|---|---|---|---|---|
| Currency / convertibility / capital controls | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Sovereign / banking / counterparty risk | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Inflation / macro-shock / recession | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Commodity / sector exposure | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Payment / repatriation risk | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
Economic risk assessment: [Synthesis - net financial exposure, dominant vulnerability, and macro-shock sensitivity.]
9. Regulatory, Legal & Compliance Risk
Risk to the client from the legal, regulatory, and compliance environment: sanctions and export-control exposure; adverse or unpredictable regulatory change; contract-enforcement and dispute-resolution failure; corruption-driven compliance risk (FCPA/UKBA exposure created by operating conditions); data-protection and licensing obligations; and tax/customs/localisation risk. This is risk identification, not legal advice - flag exposures for the client’s counsel to determine.
| Sub-Risk | Driver / Basis | Likelihood (1–5) | Impact (1–5) | Inherent (L×I) | Existing Mitigation | Residual | Trend | Confidence | Source Grade |
|---|---|---|---|---|---|---|---|---|---|
| Sanctions / export-control exposure | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Adverse / unpredictable regulatory change | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Contract enforcement / dispute resolution | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Corruption-driven compliance (FCPA/UKBA) | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Data-protection / licensing / tax / customs | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
Regulatory & compliance risk assessment: [Synthesis - net legal/compliance exposure and the items requiring counsel determination.]
10. Operational & Infrastructure Risk
Risk to the client’s operations and continuity from infrastructure and operating conditions: power, water, telecom, and IT/connectivity reliability; transport, ports, and movement/access constraints; supply, fuel, and essential-services dependency; single-points-of-failure; and medical/health-system adequacy for the client’s people. Consume the §11 infrastructure baseline of the Regional Study. The deep supply-chain flow-and-node analysis is deferred to the Supply Chain & Logistics Risk Assessment; the operation-/footprint-specific operational risk to a defined deployment is deferred to the Country-Entry Risk Assessment.
| Sub-Risk | Driver / Basis | Likelihood (1–5) | Impact (1–5) | Inherent (L×I) | Existing Mitigation | Residual | Trend | Confidence | Source Grade |
|---|---|---|---|---|---|---|---|---|---|
| Power / water / utilities reliability | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Telecom / IT / connectivity reliability | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Transport / ports / movement & access | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Supply / fuel / essential-services dependency | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Medical / health-system adequacy | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
Operational & infrastructure risk assessment: [Synthesis - net operational exposure, decision-critical single-points-of-failure, and continuity sensitivity.]
11. Societal & Human-Environment Risk
Risk to the client arising from the social and information environment: social-unrest and labour risk; public/community sentiment toward the client, its sector, or foreign interests; ethnic/sectarian/communal tension as it bears on the client; reputational and information-environment risk (disinformation, hostile narratives, hostile media or activist targeting); and NGO/community-relations and social-licence risk. Consume the §9–§10 social and information baseline of the Regional Study.
| Sub-Risk | Driver / Basis | Likelihood (1–5) | Impact (1–5) | Inherent (L×I) | Existing Mitigation | Residual | Trend | Confidence | Source Grade |
|---|---|---|---|---|---|---|---|---|---|
| Social unrest / labour risk | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Sentiment toward client / sector / foreign interests | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Communal / sectarian tension (as it bears on client) | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Reputational / information-environment risk | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Social-licence / community-relations risk | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
Societal & human-environment risk assessment: [Synthesis - net societal/reputational exposure and the dominant fault line bearing on the client.]
12. Environmental & Natural-Hazard Risk
Risk to the client’s people, assets, and continuity from the physical and natural environment: natural-hazard exposure (seismic, flood, storm, wildfire, volcanic); climate stress and chronic environmental degradation; pandemic/public-health and CBRN-incident exposure; and environmental events that could trigger displacement, disruption, or regulatory response. Consume the §12 physical-environment baseline of the Regional Study.
| Sub-Risk | Driver / Basis | Likelihood (1–5) | Impact (1–5) | Inherent (L×I) | Existing Mitigation | Residual | Trend | Confidence | Source Grade |
|---|---|---|---|---|---|---|---|---|---|
| Natural-hazard exposure (seismic/flood/storm/etc.) | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Climate stress / chronic degradation | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Pandemic / public-health exposure | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
| Industrial / CBRN / environmental-incident exposure | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] | [ ] |
Environmental & natural-hazard risk assessment: [Synthesis - net hazard exposure and the continuity/displacement sensitivity.]
13. Consolidated Risk Register & Heat Map
Aggregate every scored sub-risk from §6–§12 into one ranked register, ordered by residual score, so the client sees the whole risk picture and the priorities in one place. The heat map plots the distribution across the 5×5 grid. This is the analytic spine of the product - the domain sections build the scores; this section ranks and visualises them.
| Rank | Risk | Domain (§) | Inherent (L×I) | Existing Mitigation | Residual (L×I) | Band | Trend | Confidence |
|---|---|---|---|---|---|---|---|---|
| 1 | [ ] | [§] | [ ] | [ ] | [ ] | [Low/Mod/Elev/High/Crit] | [↑/→/↓] | [H/M/L] |
| 2 | [ ] | [§] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] |
| 3 | [ ] | [§] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] |
| … | [ ] | [§] | [ ] | [ ] | [ ] | [ ] | [ ] | [H/M/L] |
Residual-risk heat map (plot each risk’s residual L×I; cell = count or risk IDs):
| Impact ↓ / Likelihood → | 1 Remote | 2 Unlikely | 3 Possible | 4 Likely | 5 Almost certain |
|---|---|---|---|---|---|
| 5 Severe | [ ] | [ ] | [ ] | [ ] | [ ] |
| 4 Major | [ ] | [ ] | [ ] | [ ] | [ ] |
| 3 Moderate | [ ] | [ ] | [ ] | [ ] | [ ] |
| 2 Minor | [ ] | [ ] | [ ] | [ ] | [ ] |
| 1 Negligible | [ ] | [ ] | [ ] | [ ] | [ ] |
Register note: [The concentration in the register/heat map - where the residual risk clusters, the count above the client’s tolerance line, and the single risk most driving the rating.]
14. Overall Country Risk Rating & Trajectory
The headline rating and where it is heading. Derive the overall rating from the domain scores (state the aggregation logic - e.g., weighted by the client’s exposure, not a naive average; the highest-impact residual risks dominate). Give the per-domain summary scores, the aggregate rating and band, and the rating trajectory with likelihood and confidence stated separately. Identify the structural and proximate drivers pushing the rating up or down and the pivotal indicators/events that would mark a step-change.
| Domain (§) | Domain Risk Summary | Peak Residual Sub-Risk | Domain Band | Trend |
|---|---|---|---|---|
| Political (§6) | [ ] | [ ] | [Low/Mod/Elev/High/Crit] | [↑/→/↓] |
| Security (§7) | [ ] | [ ] | [ ] | [ ] |
| Economic (§8) | [ ] | [ ] | [ ] | [ ] |
| Regulatory/Legal (§9) | [ ] | [ ] | [ ] | [ ] |
| Operational/Infra (§10) | [ ] | [ ] | [ ] | [ ] |
| Societal (§11) | [ ] | [ ] | [ ] | [ ] |
| Environmental (§12) | [ ] | [ ] | [ ] | [ ] |
| Trajectory Path | Description | Likelihood | Analytic Confidence | Key Watch Indicators |
|---|---|---|---|---|
| Most likely | [ ] | [ICD 203 term] | [HIGH/MOD/LOW] | [ ] |
| Most dangerous (rating step-up) | [ ] | [ICD 203 term] | [HIGH/MOD/LOW] | [ ] |
| Improving / de-escalation | [ ] | [ICD 203 term] | [HIGH/MOD/LOW] | [ ] |
Overall rating judgment: [The aggregate rating, its band, the aggregation logic, the principal drivers, and the trajectory - the figures used in the BLUF and Snapshot. Cross-reference the pivotal indicators to §16.]
15. Key Findings Summary
Consolidated register of the load-bearing findings behind the scores, each graded by evidentiary status and confidence so the reader can see what is established vs. assessed vs. contested. Materiality flags the findings that most drive the rating.
| # | Finding | Status | Confidence | Materiality |
|---|---|---|---|---|
| 1 | [ ] | [Established / Assessed / Contested] | [H/M/L] | [ ] |
16. Risk-Escalation & Early-Warning Indicators
The risk-product analog of a red-flag register: specific, observable indicators whose movement would signal a residual-risk score rising (or a new risk emerging) - the tripwires the client should monitor. Each indicator is tied to the risk/domain it bears on, the score-change it would signal, a severity, and a disposition (watch / notify client / re-score / route to a deeper product or sibling). These feed Continuous Country Risk Monitoring and any I&W program.
| # | Indicator (observable) | Risk / Domain (§) | Score-Change Signalled | Severity | Current Status | Disposition |
|---|---|---|---|---|---|---|
| 1 | [ ] | [ ] | [e.g., Security residual 12→16] | [Crit/High/Med/Low] | [Not present / Emerging / Present] | [Watch / Notify client / Re-score / Route to a Geopolitical Risk Assessment sibling / Continuous Country Risk Monitoring] |
Severity definitions: Critical - would push the overall rating into a higher band and warrants immediate client notification (e.g., outbreak of conflict, coup, capital-control imposition, sanctions designation). High - would materially raise a domain score and warrants prompt notification. Medium - significant development requiring a re-score. Low - note and monitor.
17. Risk Treatment & Mitigation Options (Advisory)
Advisory, analytic options that would reduce residual risk - mapped to the ranked risks in §13, by the standard treatment categories (avoid / reduce / transfer / accept). This is direction and category only, not an operational plan: it states what kind of measure would lower a given residual score and roughly how much, and routes implementation to the appropriate separately scoped product (protective operations, evacuation planning, business continuity, compliance/legal, insurance/risk transfer). Do not write operational TTPs, protective-detail plans, or evacuation procedures here.
| Ranked Risk (§13) | Treatment Category | Advisory Option (direction only) | Expected Residual Effect | Implementation Route (separate product) |
|---|---|---|---|---|
| [ ] | [Avoid / Reduce / Transfer / Accept] | [ ] | [e.g., residual 16→10 if adopted] | [Protective ops / Evacuation plan / BCP / Counsel & compliance / Insurance / Operational Risk Assessment] |
Treatment note: [The highest-leverage risk reductions available, what residual risk remains after plausible mitigation (the irreducible floor), and the items that must go to qualified in-country, legal, or insurance advisers. Reiterate that this is advisory, not an operational plan.]
18. Analysis of Competing Hypotheses (ACH)
Apply to the central risk judgment - typically the trajectory of the overall rating (e.g., risk holds at the current band vs. escalates a band vs. de-escalates over the horizon), or the single most consequential and contested sub-risk. State the competing hypotheses, array the diagnostic evidence for/against each, and identify the most consistent explanation and what evidence would overturn it. Use ACH to discipline the rating against confirmation bias and against the client’s preferred answer; do not pad the apparatus where the evidence is one-sided - say so and close.
| Evidence / Indicator | H1: [Risk holds at current band] | H2: [Risk escalates a band] | H3: [Risk de-escalates] |
|---|---|---|---|
| [ ] | [C/I/N] | [C/I/N] | [C/I/N] |
(C = consistent · I = inconsistent · N = neutral.) Most consistent hypothesis: [ ] - [rationale + the diagnostic evidence that would overturn it].
19. Key Assumptions Check (KAC)
The assumptions underpinning the scores and the rating - about data reliability, the durability of current conditions, the credit given to existing mitigations, the client’s exposure profile, and the absence of exogenous shock - each with its basis, confidence, and the impact on the rating if it proves wrong. Linchpin assumptions (those that, if wrong, move the rating a band) are flagged.
| # | Assumption | Basis | Confidence | Impact if Wrong | Linchpin? |
|---|---|---|---|---|---|
| 1 | [e.g., The client’s stated exposure profile is complete and current] | [ ] | [H/M/L] | [ ] | [Y/N] |
| 2 | [e.g., Existing mitigations credited in the residual scores are in place and effective] | [ ] | [ ] | [ ] | [ ] |
| 3 | [e.g., No major exogenous shock (conflict, coup, commodity collapse, pandemic) intervenes] | [ ] | [ ] | [ ] | [ ] |
20. Collection Gaps & RFIs
Where coverage is thin or contested, the impact on the scores/rating, the collection that would close the gap, and where to escalate. Risk-product gaps are typically access, official-data reliability, contested information space, or a domain needing a deeper or sibling product.
| Gap | Domain (§) | Impact on Rating | Recommended Collection | Escalation Target | Priority |
|---|---|---|---|---|---|
| [ ] | [ ] | [ ] | [ ] | [ Regional Study / Operational Risk / Investment Risk / K&R / Supply-Chain / In-country HUMINT / Continuous Country Risk Monitoring] | [H/M/L] |
21. Assessment & Recommendations
21.1 Risk Assessment
Overall assessment of country risk to the client - the headline rating and band, the trajectory, the domains and residual risks that most drive it, the most consequential uncertainties, and the implications for the client’s stated exposure and purpose. State the figures used in the BLUF and Snapshot, and the coverage/confidence caveats that bound them. Be explicit about the irreducible residual risk that remains even after plausible mitigation.
[ASSESSMENT]
21.2 Recommendations
- For decision-makers / principals: [What the rating means for the client’s stated purpose (go/no-go, posture, exposure limits, insurance); the planning assumption the assessment supports; the conditions under which it should be revisited.]
- For risk owners / operators: [The priority residual risks to treat, the highest-leverage mitigations (by category, per §17), and the indicators to put under watch.]
- For analysts (next intelligence steps): [Which domains or sub-risks warrant a deeper or sibling product, which watch indicators to track, and the recommended re-score cadence.]
- Escalations / downstream products: [Items routed to the Regional Study, Country-Entry Risk, Market-Entry Risk, K&R Risk, Supply-Chain & Logistics Risk, Continuous Country Risk Monitoring, or operational/protective/legal implementation products.]
- Conditions for reliance / refresh: [The perishability window and the indicators/events (per §16) that should trigger a re-score before reliance on this rating.]
22. Annex A - Sources & Methodology
Collection methods and scope; the source register graded with the Admiralty two-axis code; the reference scales (below); statement of the likelihood-vs-confidence separation and the 1–5 ↔ ICD 203 mapping; the risk taxonomy and scoring methodology (inherent → mitigation → residual; impact scored against client exposure; aggregation logic for the overall rating); the frameworks applied (PMESII-PT mapping; OCOKA where security-relevant) and any tailoring; coverage and currency limitations (access, language, official-data reliability, contested information environment); and the treatment of official statistics and state-controlled media as potentially self-interested and corroborated against independent sources.
Source reliability (Admiralty, A–F): A Completely reliable · B Usually reliable · C Fairly reliable · D Not usually reliable · E Unreliable · F Reliability cannot be judged.
Information credibility (Admiralty, 1–6): 1 Confirmed by other sources · 2 Probably true · 3 Possibly true · 4 Doubtful · 5 Improbable · 6 Truth cannot be judged. (Each sourced datum carries a two-character grade, e.g., B2.)
Estimative probability / likelihood (ICD 203): almost no chance / remote (01–05%) · very unlikely (05–20%) · unlikely (20–45%) · roughly even chance (45–55%) · likely (55–80%) · very likely (80–95%) · almost certain (95–99%).
Analytic confidence (evidence base - kept separate from likelihood): HIGH (multiple independent reliable sources, primary documentation, no significant contradiction) · MODERATE (some corroboration, gaps, minor unresolved inconsistency) · LOW (single/uncorroborated source, significant gaps, plausible alternatives open). Never combine a likelihood term and a confidence level in the same sentence.
Risk scoring (the load-bearing scale of this product): Likelihood (1–5) × Impact (1–5) = 1–25; band key: 1–5 Low · 6–10 Moderate · 11–15 Elevated · 16–20 High · 21–25 Critical. Likelihood is scored 1 Remote / 2 Unlikely / 3 Possible / 4 Likely / 5 Almost certain (mapped to ICD 203 bands in §5). Impact is scored 1 Negligible / 2 Minor / 3 Moderate / 4 Major / 5 Severe, against the client’s defined exposure (define each band concretely for this client below). Inherent score is before existing mitigations; residual score credits mitigations assessed to be in place and effective. The overall country rating is derived from the domain residual scores weighted by the client’s exposure (state the weighting), not a naive average.
Coverage confidence (product-level): HIGH (strong access, diverse independent sources across all domains, current data, low contested-information distortion) · MODERATE (adequate coverage with gaps in some domains, partial access, some reliance on official/contested sources) · LOW (significant access/language barriers, thin or heavily contested sourcing, material domains under-covered, currency degraded).
Impact-band definitions (client-specific - complete for this engagement): [Define what Negligible/Minor/Moderate/Major/Severe mean concretely for each exposure type the client holds - e.g., people-safety, financial, operational-continuity, reputational, legal/regulatory.]
Analytic-framework note: The assessment scores risk to the client’s defined exposure across a seven-domain taxonomy mapped to PMESII-PT; the collection logic is PIR → risk-domain → indicator → source. Scores are structured analytic judgments calibrated to the stated scales, not measurements; the rating is independent and policy-neutral per ICD 203 and is not adjusted to suit a client-preferred answer.
Searched sources (record source type, provider/title, as-of date, coverage scope, limitations, and any self-interest/reliability caveat): [TABLE]
23. Annex B - Appendices
- Appendix A - Client Exposure Profile: the assets, people, capital, operations, and reputation at risk, as the basis for impact scoring.
- Appendix B - Full Scored Risk Register: the complete §6–§13 register with inherent score, mitigation, residual score, trend, confidence, and source grade for every sub-risk.
- Appendix C - Risk Heat Maps: inherent and residual 5×5 distributions, and per-domain heat maps.
- Appendix D - Risk-Escalation & Early-Warning Matrix: the §16 indicators with current status, score-change signalled, and monitoring notes.
- Appendix E - Treatment & Mitigation Register: the §17 advisory options with treatment category, expected residual effect, and implementation route.
- Appendix F - Scoring Methodology & Scale Definitions: the likelihood/impact scales, client-specific impact-band definitions, inherent/residual logic, and the overall-rating aggregation/weighting rule.
- Appendix G - Environmental Baseline Reference: pointer to the Regional Study or the compressed environmental picture used as input.
- Appendix H - Full Source Register: every source, Admiralty grade, access date, reference, and any coverage/limitation note.
- Appendix I - Glossary & Abbreviations.
- Appendix J - Revision History.
END OF REPORT.
Verification disclaimer: This country risk assessment is a point-in-time, purpose-scored analytic rating based on open, licensed, and lawfully accessed sources current as of the baseline date; it is not legal, investment, insurance, security, or travel advice, a sovereign or credit rating, or a guarantee of future conditions. The risk scores are the firm’s independent, policy-neutral structured analytic judgments calibrated to the stated scales - an aid to prioritisation, not precise measurements or actuarial probabilities. Risk-treatment content is advisory and is not an operational, protective, evacuation, continuity, or compliance plan. Country risk is perishable - scores are time-sensitive and should be re-verified against current reporting before any consequential or time-critical decision. Official statistics and state-controlled sources were treated as potentially self-interested and corroborated where possible. No classified, unlawfully obtained, or out-of-licence material was used in the production of this report.
Document control footer: [REF-YYYY-### · Version · Classification/TLP · Prepared/Reviewed/Approved · Distribution].
Model wiring
Generated from cell frontmatter at publish time.