Full Report
Russia is hitting warehouses, workshops, logistics hubs, exhibitions, and trains far from the front line. Many organizations working in Ukraine are not updating their duty of care as fast as the risks are changing, and make decisions on gut instinct.On Sept. 13, a Russian drone struck the locomotive of
Analysis Summary
# Best Practices: High-Risk Environment Duty of Care & Risk Assessment
## Overview
These practices address the evolving security landscape in high-risk zones (specifically Ukraine), where traditional "safe zones" based on distance from the front line no longer exist. They focus on transitioning from "gut instinct" decision-making to structured, data-driven safety protocols that account for long-range drone strikes, infrastructure instability, and logistical vulnerabilities.
## Key Recommendations
### Immediate Actions
1. **Discard Proximity-Based Safety Assumptions:** Cease using "distance from the front line" as the primary safety metric. Treat all locations (warehouses, logistics hubs, and transport junctions) as potential targets regardless of geography.
2. **Audit Neighborhood Vulnerabilities:** Identify "secondary risks" by mapping what is stored in adjacent buildings (e.g., fuel, industrial equipment) and identifying other tenants in shared facilities.
3. **Establish Real-Time Warning Links:** Connect field teams directly to local monitoring and alert systems (e.g., official Telegram channels like Ukrzaliznytsia or emergency apps) rather than relying on delayed corporate communications.
### Short-term Improvements (1-3 months)
1. **Formalize Medical Logistics:** Map the nearest facility specifically capable of treating blast injuries for every site. Verify ambulance response times and validate that insurance evacuation clauses are active for the specific region.
2. **Deploy Structured Risk Assessments:** Replace informal "peer advice" with a mandatory, written personal risk assessment worksheet for every deployment.
3. **Implement Connectivity Redundancy:** Develop a "blackout plan" for communication and navigation, assuming power and cellular networks will fail during strikes.
### Long-term Strategy (3+ months)
1. **Institutionalize HEAT/HEFAT Training:** Mandate Hostile Environment Awareness Training (HEAT) and drone-specific awareness courses for all staff entering the region.
2. **Shift Safety Culture:** Move decision-making authority from the most "senior" person to the person with the most current, localized situational awareness.
3. **Dynamic Policy Review:** Update travel and security policies quarterly to reflect changes in adversary tactics (e.g., the shift from night-only to daylight drone strikes).
## Implementation Guidance
### For Small Organizations
- **Resource Utilization:** Use free or low-cost resources like the Daily Humanity personal risk assessment worksheet.
- **Peer Networks:** Partner with larger NGOs or newsrooms to share real-time security updates.
### For Medium Organizations
- **Specialized Training:** Invest in trauma first aid and drone-awareness training for team leads.
- **Route Validation:** Require "alternate route" planning for every trip to account for damaged infrastructure.
### For Large Enterprises
- **Intelligence Integration:** Incorporate real-time threat intelligence into corporate travel dashboards.
- **Audit & Compliance:** Conduct regular risk assessment audits to ensure field teams are not bypassing protocols due to "deployment fatigue."
## Configuration Examples
*While the article focuses on physical security, the following operational "configurations" are recommended:*
- **Alert Hierarchy:** Categorize drone/missile alerts (e.g., Level 1: Surveillance, Level 2: Jet-powered/Long-range, Level 3: Immediate Strike) and pre-define specific movements for each level.
- **Communication Buffers:** Configure mobile devices with offline maps (e.g., Organic Maps, Google Offline) and encrypted, low-bandwidth messaging apps (e.g., Signal).
## Compliance Alignment
- **ISO 31030:** Travel Risk Management – Guidance for organizations.
- **Duty of Care Standards:** Legal obligations to ensure staff safety in hostile environments.
- **NIST SP 800-34:** While for IT, the "Contingency Planning" principles align with the article’s focus on infrastructure resilience.
## Common Pitfalls to Avoid
- **The "Last Time" Fallacy:** Assuming a route or location is safe because "nothing happened during the last visit."
- **Gut Instinct Decision-Making:** Relying on seniority or intuition rather than structured data and local alerts.
- **Neglecting the "Rear":** Failing to secure warehouses, workshops, and exhibitions in cities like Lviv or near borders.
## Resources
- **Daily Humanity Duty of Care Resources:** [hxtp://dailyhumanity[.]dk/duty-of-care]
- **Ukrzaliznytsia Official Alerts:** [hxtps://t[.]me/UkrzalInfo]
- **Risk Assessment Worksheets:** Available via Daily Humanity for media and NGOs.