Conflict, Security and Cross-Border Threats

Introduction

International business operates within political spaces that are also security environments. A factory, port, data centre, logistics corridor or financial institution may be affected by war occurring hundreds of kilometres away, domestic unrest in a host country, disruption to shipping lanes, cyber operations, terrorism, forced migration, climate-related conflict or the spread of weapons technology. These threats rarely occur in isolation. A civil conflict may generate refugee movements; displacement may intensify political tensions; sanctions may alter supply chains; and cyber operations may accompany conventional military action.

For international managers, geopolitical risk assessment is therefore not limited to predicting whether two states will go to war. It involves identifying how conflict and insecurity can affect people, assets, markets, institutions, legal obligations and strategic objectives. The central managerial task is to convert uncertain political and security developments into decisions about investment, sourcing, personnel, insurance, continuity, compliance and corporate responsibility.

A useful starting point is the distinction between hazard, exposure, vulnerability and risk. A hazard is a potentially harmful event, such as an armed attack or port closure. Exposure concerns the people, assets or activities located where the hazard may occur. Vulnerability describes the susceptibility of those exposed entities to harm. Risk emerges from the interaction of these elements and from the organisation’s capacity to prepare, respond and recover.

A simplified conceptual expression is:

Likelihood refers to the estimated probability or plausibility of an event within a defined period. Consequence refers to the magnitude of its effects. This expression is not a universal statistical law: it is a screening device. It should be supplemented by scenario analysis, uncertainty ranges and consideration of cascading effects. A low-probability event with catastrophic consequences may deserve attention even when its expected value is modest.

Learning Objectives

By the end of this chapter, students should be able to:

1. Distinguish interstate conflict, civil unrest, terrorism, hybrid warfare, cyber conflict, maritime insecurity, migration, climate-security risks and weapons proliferation.
2. Apply analytical frameworks to assess threats across countries, sectors and supply chains.
3. Explain how security events create direct, indirect and systemic consequences for international business.
4. Design practical mitigation, resilience and escalation procedures.
5. Evaluate ethical, legal and governance challenges in security-related decision-making.
6. Critically assess the limitations of forecasting and the danger of politicised or biased risk analysis.

1. The Security Environment of International Business

1.1 Conflict as a system rather than a single event

Conflict is a contested relationship in which actors pursue incompatible objectives. It may remain below the threshold of open warfare, become violent, or develop into sustained armed conflict. Relevant actors include states, insurgent organisations, criminal networks, private military companies, political movements, diaspora groups and online communities.

Conflict affects business through at least four channels:

• Physical destruction: damage to plants, roads, ports, power systems and housing.
• Political and regulatory disruption: emergency laws, sanctions, expropriation, curfews, border controls and changes of government.
• Market disruption: falling demand, inflation, currency volatility, shortages and insurance withdrawal.
• Human and reputational consequences: injury, displacement, labour disruption, allegations of complicity and loss of social licence.

The distinction between direct and indirect exposure is important. A firm may have no operations in a conflict country but depend on a supplier, shipping route, financial institution, rare mineral or digital service located there. Global value chains distribute both efficiency and vulnerability.

1.2 Levels of analysis

A sound assessment examines three levels:

The levels interact. Great-power rivalry can produce export controls; export controls can affect domestic prices; price shocks can trigger unrest; unrest can close a facility. Analysts should avoid treating national risk ratings as complete substitutes for site- or corridor-level investigation.

2. Interstate Conflict and Strategic Competition

Interstate conflict involves confrontation between sovereign states. It can include diplomacy, economic coercion, proxy warfare, blockade, limited military action or full-scale war. Contemporary conflict often combines conventional forces with economic, informational, cyber and legal instruments.

2.1 Security dilemmas and escalation

A security dilemma arises when one state’s measures to increase its security—such as military deployments or alliances—are interpreted by another state as threatening. The second state responds with its own preparations, producing mutual insecurity even when neither initially seeks war.

Escalation may be:

1. Vertical, involving increasingly severe actions within the same conflict.
2. Horizontal, spreading geographically or into new domains such as cyberspace, finance or maritime trade.
3. Inadvertent, caused by miscalculation, accidents or misunderstood signals.
4. Deliberate, used to impose costs or alter an opponent’s behaviour.

For business, escalation indicators include diplomatic expulsions, military exercises near contested areas, mobilisation, airspace restrictions, sanctions, unusual cyber activity, emergency legislation and interruptions to inspections or communications. No single indicator is determinative; the value lies in pattern recognition and triangulation.

2.2 Economic statecraft

States use economic tools to influence other states. These include sanctions, tariffs, export controls, investment screening, asset freezes, financial restrictions, technology denial and procurement bans. Economic statecraft creates compliance risks because a transaction may be lawful under one jurisdiction but prohibited under another.

Managers should map:

• ownership and control of counterparties;
• beneficial owners and politically exposed persons;
• currencies and payment channels;
• origin and destination of goods;
• dual-use technology classifications;
• applicable sanctions regimes; and
• contractual rights if trade becomes unlawful or impossible.

A compliance programme should not rely only on static lists. Ownership changes, trans-shipment, shell companies and indirect procurement can create evasion risks. At the same time, excessive de-risking may harm legitimate trade and vulnerable populations. Proportionality and documented due diligence are essential.

3. Civil Unrest, Insurgency and Terrorism

3.1 Civil unrest

Civil unrest includes demonstrations, strikes, riots, blockades and violent clashes involving state authorities or non-state groups. It can arise from elections, corruption, austerity, ethnic exclusion, food prices, environmental disputes or contested legitimacy.

Unrest is not automatically terrorism or civil war. Classification matters because legal, operational and ethical responses differ. A protest may be protected political expression, while violent attacks on civilians may constitute terrorism or criminal conduct. Businesses should avoid political assumptions and focus on observable behaviour, legal requirements and human rights.

Operational indicators include protest frequency, geographic spread, participation by organised groups, police posture, transport closures, internet restrictions, attacks on commercial property and elite defections. A practical response plan may include flexible working, route variation, employee check-ins, secure transport, inventory repositioning and temporary suspension of operations.

3.2 Terrorism

Terrorism generally refers to the use or threat of violence against civilians or other protected targets to create fear and achieve political, ideological or religious objectives. Definitions vary across legal systems, so organisations must use the relevant domestic and international legal frameworks rather than rely solely on media labels.

Terrorist risk assessment should consider target attractiveness, local capability, intent, accessibility and protective controls. High-profile foreign businesses, transport infrastructure, energy facilities, hotels, diplomatic locations and crowded venues may be attractive because they offer symbolic or economic value. Threats may be physical, digital or blended.

Good practice includes:

• context-sensitive travel and site security;
• emergency communications that work during network outages;
• drills that include medical and family-support arrangements;
• protection of workers without discriminatory profiling;
• liaison with competent authorities; and
• post-incident psychological and operational support.

Security measures must respect privacy, labour rights and the principle of non-discrimination. Profiling people by nationality, religion or ethnicity is both ethically harmful and analytically unreliable.

4. Hybrid Warfare and Grey-Zone Competition

Hybrid warfare describes coordinated use of military and non-military instruments, often combining conventional force, proxies, cyber operations, disinformation, economic coercion, lawfare and political influence. Grey-zone activity refers to coercive competition below the perceived threshold of conventional war.

The challenge is attribution. A state may use intermediaries, criminal groups or deniable cyber operators. Ambiguity can delay an effective response and divide political coalitions. A business may observe symptoms—false narratives, suspicious acquisitions, cyber intrusions, regulatory pressure or sabotage—without knowing whether they are connected.

An effective organisational approach is to assess convergence rather than demand immediate proof of a single perpetrator. Analysts should ask:

• Do incidents affect strategically important assets?
• Do they occur in a coordinated time pattern?
• Are narratives and operational disruptions mutually reinforcing?
• Who benefits from the resulting confusion or political pressure?
• What alternative explanations remain plausible?

Resilience measures include trusted information channels, media-literacy training, supplier verification, insider-risk controls, independent backups, crisis communications and clear authority for reporting suspicious activity. Companies should not conduct retaliation or public attribution without legal, technical and governmental coordination.

5. Cyber Conflict and Digital Dependence

Cyber conflict includes state-sponsored espionage, disruption, destructive attacks, influence operations, criminal activity tolerated or supported by states, and attacks on critical infrastructure. The distinction between cybercrime and cyber conflict may be difficult because tools and actors overlap.

A firm’s cyber exposure consists not only of its own systems but also of cloud providers, software dependencies, managed service providers, payment systems, logistics platforms and industrial control systems. A supplier’s compromise can become the customer’s crisis.

A mature cyber-risk programme includes:

1. Asset identification and classification.
2. Access control and multifactor authentication.
3. Network segmentation and least-privilege permissions.
4. Secure, tested backups separated from production networks.
5. Vulnerability management and timely patching.
6. Supplier assurance and incident-notification clauses.
7. Detection, logging and incident-response procedures.
8. Exercises involving legal, communications and executive teams.

The objective is not perfect prevention. It is to reduce the probability and impact of compromise, detect it quickly, maintain essential functions and recover safely. Artificial intelligence can assist anomaly detection, translation and threat-intelligence triage, but it can also generate convincing phishing, automate disinformation and produce false positives. Human validation, auditability and data protection remain necessary.

6. Maritime Insecurity and Global Trade

Maritime insecurity includes piracy, armed robbery, blockade, naval confrontation, mines, illegal fishing, port disruption and attacks on commercial vessels. Maritime risks are particularly important because a small number of chokepoints connect global production systems.

A disruption may increase voyage time, fuel use, insurance premiums, inventory requirements and working capital. It may also create contractual disputes concerning delay, force majeure and delivery obligations. Firms should understand the difference between a vessel’s physical route and the broader logistics network, including ports, canals, rail links and inland distribution.

A maritime assessment should examine:

• route-specific incident history;
• coastal-state capacity and jurisdiction;
• naval presence and escort arrangements;
• port congestion and alternative terminals;
• vessel, cargo and crew vulnerability;
• war-risk insurance and contractual allocation; and
• sanctions and documentation requirements.

Diversification is not always cheap or immediately available. Alternative routes may be longer and less secure, while just-in-time inventory may be incompatible with uncertain transit. Scenario planning should compare cost, service levels, safety and resilience rather than assume that the shortest route is optimal.

7. Migration, Displacement and Business Responsibility

Migration may be voluntary, forced, temporary, circular or irregular. Conflict, persecution, economic collapse and disasters can drive displacement across borders. Large movements can place pressure on housing, schools, health systems, labour markets and political institutions.

Businesses may be affected through labour supply, consumer demand, border controls, public services, security concerns and social tensions. They may also have responsibilities toward migrant and refugee workers. Ethical practice requires fair recruitment, prevention of forced labour, safe accommodation, wage protection and access to grievance mechanisms.

A simplistic narrative that treats migrants only as a security threat can produce discriminatory policies and poor analysis. Migration can create workforce capacity, entrepreneurship and demographic renewal, while unmanaged displacement can strain institutions. The appropriate assessment is contextual and evidence-based.

8. Climate–Security Links

Climate change is best understood as a threat multiplier, not a mechanical cause of conflict. Heat, drought, flooding, sea-level rise and ecosystem degradation can intensify competition over land, water, food and public resources. Whether this produces violence depends on governance, inequality, adaptation capacity, political institutions and the presence of armed actors.

Climate-security pathways relevant to business include:

• physical damage to sites and transport infrastructure;
• water and energy shortages;
• crop and commodity volatility;
• displacement and labour disruption;
• disputes over extraction and land use; and
• regulatory transition risks associated with decarbonisation.

Assessment should combine climate projections with political and supply-chain analysis. A flood map alone cannot show whether a disruption will become a security crisis. Managers should identify critical dependencies, assess adaptation options, maintain emergency suppliers and avoid investments that intensify local resource conflict.

9. Weapons Proliferation and Dual-Use Technology

Weapons proliferation is the spread of nuclear, chemical, biological, radiological and conventional weapons, delivery systems and enabling technologies. Dual-use goods have both civilian and military applications. Examples include advanced sensors, encryption, machine tools, navigation systems, laboratory equipment and certain computing technologies.

International businesses face risks involving export controls, sanctions, end-use violations, diversion, bribery and reputational damage. A responsible control system includes product classification, end-user screening, licensing, employee training, recordkeeping and escalation for unusual orders or destinations.

The challenge is to balance security with legitimate scientific exchange and commercial innovation. Overly broad restrictions may impede health, research and development, while weak controls can enable atrocities or destabilising military programmes. Governance should therefore be risk-based, transparent and consistent with applicable law.

10. An Integrated Geopolitical Security Assessment Framework

A practical framework can be organised into seven stages.

Stage 1: Define the decision

Specify whether the organisation is assessing market entry, facility location, sourcing, travel, project finance, acquisition or crisis response. The same country can present different risks for a data centre, a mine, a retail operation and a transit corridor.

Stage 2: Map assets and dependencies

Identify people, sites, suppliers, customers, data, utilities, ports, financial channels and regulatory dependencies. Include second- and third-tier suppliers where feasible.

Stage 3: Identify threat actors and drivers

Consider states, armed groups, criminal networks, protest movements, insiders, competitors and opportunistic actors. Analyse objectives, capability, access, constraints and likely incentives.

Stage 4: Build scenarios

Use at least three scenarios: a baseline continuation, a severe but plausible disruption and a high-impact escalation. Scenarios should specify triggers, time horizon, affected assets, operational consequences and early-warning indicators.

Stage 5: Evaluate exposure and vulnerability

Assess physical, financial, legal, cyber, human and reputational dimensions. Consider concentration risk: dependence on one port, supplier, country, cloud provider or payment route can magnify disruption.

Stage 6: Select controls and contingencies

Controls may be preventive, detective, responsive or restorative. Examples include diversification, physical protection, insurance, inventory buffers, crisis teams, evacuation plans, alternative communications and contractual safeguards.

Stage 7: Monitor and revise

Risk assessment is continuous. Indicators, assumptions and mitigation effectiveness should be reviewed as political conditions change. A dashboard should distinguish facts, assessments, assumptions and unknowns.

A useful qualitative matrix is shown below.

The matrix supports discussion but should not conceal uncertainty. Scores can create false precision, especially where information is sparse or politically manipulated.

11. Applied Case: The Meridian Components Corridor

This is an illustrative case, not a description of a single real company.

Background

Meridian Components, a European manufacturer of industrial control units, depends on a supplier in Country A, assembly in Country B and maritime shipment through a regional strait. It has 600 employees in the region and uses a cloud-based logistics platform operated by a third-party provider.

Problem

Country A experiences mass demonstrations after a contested election. At the same time, vessels near the strait report harassment, and Meridian detects phishing emails directed at procurement staff. Social-media accounts accuse the company of supporting the incumbent government. Management must decide whether to continue operations, reroute shipments or suspend production.

Analysis

The threats are interconnected but should not be assumed to have one cause. Civil unrest may affect employee safety and inland transport. Maritime harassment threatens delivery reliability and insurance costs. Phishing may be criminal opportunism, espionage or part of a coordinated hybrid campaign. The reputational campaign may increase the likelihood of protests near company premises.

Meridian maps critical dependencies and identifies that the Country A supplier is the sole source for a specialised component, while the cloud provider has administrative access to shipment records. It develops three scenarios:

• Contained disruption: demonstrations remain local; production continues with modified travel and communications.
• Extended disruption: roads and ports close intermittently for four weeks; production falls and customer delivery obligations are threatened.
• Escalation: violence spreads, maritime insurance is withdrawn and the cyber incident compromises shipment data.

Approach and solution

Meridian establishes a cross-functional crisis team, separates verified information from rumours, increases authentication requirements, validates supplier payment instructions by a second channel and moves sensitive backups offline. It negotiates partial production from an alternative supplier, increases safety stock for essential components and changes employee travel procedures. It also consults insurers, authorities, customers and worker representatives.

The company does not publicly attribute the cyber activity without evidence. Its communication states that employee safety and lawful continuity are priorities, rejects discrimination and commits to respecting human rights. It reviews whether any security contractor has used excessive force near company premises.

Outcome

In the illustrative outcome, unrest subsides after several weeks, but maritime delays continue. Meridian avoids a complete shutdown because it had identified the single-source dependency and tested alternate communications. Costs rise through expedited freight, inventory and cyber controls, yet the firm preserves key customer relationships and avoids a misleading public accusation.

Learning points

1. Country-level stability does not capture corridor or supplier risk.
2. Cyber, physical, maritime and reputational threats can reinforce one another.
3. Scenario planning is more useful than a single forecast.
4. Resilience requires investment before disruption occurs.
5. Human rights and evidence-based communication are part of security management, not external public-relations concerns.

12. Governance, Ethics and Critical Limitations

Security decisions can cause serious harm. Surveillance may invade privacy; armed protection may endanger civilians; evacuation decisions may privilege expatriates over local employees; sanctions may restrict humanitarian goods; and predictive systems may reproduce racial or political bias.

Corporate governance should assign clear accountability to boards, executives, security professionals, compliance officers and local managers. Decisions should be documented, reviewable and proportionate. Human-rights due diligence is especially important in conflict-affected areas. Firms should assess whether their taxes, procurement, security arrangements or technology sales contribute to abuses.

Forecasting also has structural limitations. Intelligence may be incomplete, manipulated or unavailable. Analysts can suffer from confirmation bias, availability bias and overconfidence. Early-warning systems may generate too many alerts, while rare catastrophic events remain difficult to predict. Quantitative scores should therefore be accompanied by narrative reasoning, alternative hypotheses, confidence levels and explicit information gaps.

Best practice is not to promise certainty. It is to improve preparedness, shorten detection and response times, preserve options and reduce avoidable harm.

Contemporary Developments

Several developments are reshaping the field:

• commercial satellite imagery and open-source intelligence make conflict monitoring more accessible;
• artificial intelligence accelerates analysis but also enables synthetic media and automated attacks;
• critical infrastructure is increasingly interdependent across physical and digital systems;
• supply-chain regulation is expanding due-diligence expectations;
• private firms are becoming important providers of communications, data and security services; and
• geopolitical fragmentation is encouraging regionalisation, friend-shoring and strategic stockpiling.

These trends do not eliminate the need for expert judgement. They increase the volume of information and the consequences of poor interpretation.

Chapter Summary

Conflict and cross-border threats affect international business through physical destruction, political disruption, market volatility, cyber exposure, human consequences and reputational damage. Interstate rivalry, civil unrest, terrorism, hybrid warfare, cyber conflict, maritime insecurity, migration, climate-related pressures and weapons proliferation are analytically distinct but often interconnected.

Effective assessment begins by separating hazard, exposure, vulnerability and consequence. It operates across the international, state and organisational levels; maps dependencies; identifies actors and drivers; develops scenarios; tests controls; and monitors changing indicators. Security decisions should incorporate continuity, compliance, human rights, privacy and responsible communication.

No risk matrix or forecast can remove uncertainty. The professional objective is disciplined judgement: identify what is known, state assumptions, consider alternative explanations, prepare for plausible disruption and preserve the organisation’s ability to respond ethically and lawfully.

Key Terms

Hazard: A potential source of harm.

Exposure: People, assets or activities located in a threat environment.

Vulnerability: Susceptibility to damage or disruption.

Interstate conflict: Conflict involving sovereign states.

Security dilemma: Mutual insecurity created when defensive actions appear threatening.

Economic statecraft: Use of economic instruments to pursue political or security objectives.

Civil unrest: Collective protest, disorder or violence within a society.

Terrorism: Violence or threats intended to create fear and pursue political objectives.

Hybrid warfare: Coordinated use of military and non-military instruments.

Grey-zone activity: Coercive competition below the perceived threshold of war.

Cyber conflict: Hostile activity in or through digital systems involving states or aligned actors.

Maritime insecurity: Threats affecting vessels, ports, sea lanes or maritime trade.

Forced displacement: Movement caused by conflict, persecution, disasters or serious threats.

Threat multiplier: A condition that intensifies existing sources of insecurity.

Dual-use technology: Technology with both civilian and military applications.

Scenario analysis: Examination of plausible alternative future conditions.

Resilience: Capacity to withstand, adapt to and recover from disruption.

Economic statecraft: Strategic use of sanctions, controls, tariffs or finance by states.

Review Questions

Short Answer Questions

1. Distinguish hazard, exposure and vulnerability in geopolitical risk assessment.
2. What is a security dilemma?
3. Identify four channels through which conflict affects international business.
4. Why are dual-use goods relevant to corporate compliance?
5. Why should climate change be treated as a threat multiplier rather than an automatic cause of conflict?

Long Answer Questions

1. Explain how hybrid warfare complicates attribution and corporate decision-making.
2. Discuss the major operational and contractual consequences of maritime insecurity.
3. Analyse the relationship between civil unrest, migration and business responsibility.
4. Evaluate the strengths and limitations of qualitative risk matrices.
5. Design an integrated geopolitical security assessment framework for a multinational enterprise.

Analytical / Application Questions

1. A firm depends on one supplier located near a contested border and one port exposed to maritime disruption. Develop three scenarios and recommend mitigation measures.
2. A company detects a cyber intrusion while facing an online disinformation campaign and protests outside its facility. Explain how it should investigate, communicate and govern its response.
3. Assess whether a proposed investment in a drought-affected, politically fragile country should proceed. Identify the evidence, assumptions, stakeholders and safeguards required before a decision.

Multiple Choice Questions with Answers

Question 1

Which combination best distinguishes hazard, exposure and vulnerability?

A. Hazard is potential harm; exposure is what is located in the threat area; vulnerability is susceptibility to harm

B. Hazard is the response plan; exposure is probability; vulnerability is insurance

C. Hazard is political legitimacy; exposure is attribution; vulnerability is deterrence

D. Hazard is consequence; exposure is mitigation; vulnerability is scenario design

Correct Answer: A. Hazard is potential harm; exposure is what is located in the threat area; vulnerability is susceptibility to harm

Question 2

A security dilemma occurs when:

A. A firm diversifies suppliers after a disruption

B. One state’s defensive measures are interpreted by another as threatening

C. A government removes all trade restrictions

D. A cybercriminal demands payment from a company

Correct Answer: B. One state’s defensive measures are interpreted by another as threatening

Question 3

Which is most characteristic of hybrid warfare?

A. Exclusive reliance on conventional military force

B. Coordinated use of military, cyber, informational and economic instruments

C. A purely domestic labour dispute

D. Routine commercial competition without coercion

Correct Answer: B. Coordinated use of military, cyber, informational and economic instruments

Question 4

Which control most directly reduces the impact of ransomware on critical business systems?

A. Untested online backups

B. Publicly attributing every intrusion

C. Segmentation and tested offline backups

D. Removing all incident-reporting procedures

Correct Answer: C. Segmentation and tested offline backups

Question 5

Why can a country-level risk rating be insufficient for an international business?

A. It always overstates risk

B. It cannot capture site, supplier or corridor-specific exposure

C. It measures only currency risk

D. It eliminates the need for scenario planning

Correct Answer: B. It cannot capture site, supplier or corridor-specific exposure

Question 6

Climate change is described in the chapter primarily as:

A. An automatic cause of civil war

B. A threat multiplier whose effects depend on governance and vulnerability

C. A purely environmental issue with no business relevance

D. A substitute for political analysis

Correct Answer: B. A threat multiplier whose effects depend on governance and vulnerability

Question 7

Which situation is most clearly a dual-use technology concern?

A. Selling ordinary office furniture domestically

B. Exporting advanced sensors to an unclear end user in a restricted destination

C. Hiring a local accountant

D. Changing a product’s packaging design

Correct Answer: B. Exporting advanced sensors to an unclear end user in a restricted destination

Question 8

What is the main purpose of scenario analysis?

A. To guarantee an accurate forecast

B. To replace all managerial judgement with a numerical score

C. To examine plausible alternatives and prepare appropriate responses

D. To prove that a crisis cannot occur

Correct Answer: C. To examine plausible alternatives and prepare appropriate responses

Question 9

Which response best reflects responsible cyber governance?

A. Retaliating immediately without attribution evidence

B. Combining technical response with legal, communications and executive coordination

C. Ignoring third-party providers

D. Publishing confidential employee data

Correct Answer: B. Combining technical response with legal, communications and executive coordination

Question 10

In the illustrative Meridian case, resilience was improved primarily by:

A. Depending more heavily on the sole supplier

B. Eliminating all communication with authorities

C. Testing alternatives, protecting systems and mapping dependencies

D. Making an unsupported public accusation

Correct Answer: C. Testing alternatives, protecting systems and mapping dependencies