Integrated Geopolitical Risk Assessment Project

Introduction

Geopolitical risk assessment becomes most valuable when it moves beyond the description of events and supports a defensible organizational decision. A multinational enterprise must be able to explain not only what may happen, but also why it matters, how confident analysts are, which business activities are exposed, what strategic choices are available, and how management will know whether conditions are changing.

An integrated assessment therefore combines intelligence collection, structured analysis, quantitative estimation, scenario development, strategic choice, resilience planning, governance, and continuous monitoring. It is an organizational product rather than merely an analyst’s report. Its quality depends on analytical rigor, decision relevance, transparency of assumptions, and the ability to update conclusions as evidence changes.

This chapter presents an end-to-end method for producing and defending such an assessment for a multinational organization. The approach is suitable for board-level decision support, market-entry decisions, supply-chain redesign, investment screening, crisis preparedness, and enterprise-risk management.

Learning Objectives

By the end of this chapter, students should be able to:

1. Frame a geopolitical risk problem in terms of organizational decisions and exposure.
2. Integrate strategic intelligence, economic data, country analysis, and operational information.
3. Distinguish hazards, vulnerabilities, impacts, controls, and residual risk.
4. Construct scenarios and estimate their implications without creating false precision.
5. Compare strategic options using transparent criteria.
6. Design resilience measures, governance arrangements, and monitoring indicators.
7. Defend an assessment by explaining evidence, assumptions, uncertainty, and limitations.
8. Evaluate the ethical, legal, and political responsibilities associated with geopolitical intelligence.

1. From Event Reporting to Decision Intelligence

A geopolitical event is not automatically a business risk. A military confrontation, election, sanctions announcement, port closure, or diplomatic dispute becomes a material risk only through a transmission mechanism affecting the organization. These mechanisms may include changes in regulation, trade access, logistics, currency convertibility, labor availability, cyber exposure, customer demand, financing, reputation, or physical security.

A useful distinction is:

• Hazard: a potentially disruptive geopolitical condition or event.
• Exposure: the organization’s presence, assets, transactions, people, suppliers, or dependencies in the affected environment.
• Vulnerability: the degree to which exposure is susceptible to harm.
• Impact: the operational, financial, legal, strategic, or human consequence.
• Control: a measure that reduces likelihood, exposure, vulnerability, or consequence.
• Residual risk: risk remaining after controls are applied.

The central analytical chain is:

Geopolitical condition → transmission mechanism → exposed business activity → consequence → management response

For example, a deterioration in relations between two states may lead to export controls. Export controls may restrict a critical semiconductor component. The restriction may interrupt production, increase costs, delay customer delivery, and create contractual penalties. The organization’s appropriate response may involve licensing, redesign, inventory buffering, supplier diversification, or withdrawal from a market.

The assessment should begin with a decision question, not with a country profile. “Is Country X risky?” is too broad. Better questions include:

• Should the firm establish a second manufacturing site within the next eighteen months?
• Can the firm continue sourcing a controlled technology from the jurisdiction?
• What level of investment is justified under alternative sanctions scenarios?
• Which indicators should trigger relocation or temporary suspension?

Decision framing prevents the assessment from becoming a catalogue of political facts with no operational relevance.

2. The Architecture of an Integrated Assessment

An end-to-end project normally contains eight linked components:

1. Decision framing: define the decision, time horizon, scope, and risk appetite.
2. Intelligence baseline: establish political, economic, security, legal, and social conditions.
3. Exposure mapping: identify assets, flows, dependencies, and stakeholders.
4. Risk analysis: connect hazards to business consequences.
5. Scenario construction: explore plausible alternative futures.
6. Option analysis: compare strategic responses and trade-offs.
7. Resilience and governance design: assign controls, authorities, and escalation rules.
8. Monitoring and review: track indicators and update the assessment.

These components should not be treated as a one-way sequence. New intelligence may change exposure estimates; a proposed control may alter the strategic options; and scenario analysis may reveal that an apparently minor dependency is strategically critical.

2.1 Scope and analytical assumptions

The project charter should specify:

Assumptions must be explicit. For example, an assessment may assume that an existing trade agreement remains legally valid during the first year, while recognizing that political pressure could weaken its practical effect. Hidden assumptions are a major source of analytical failure.

3. Intelligence Collection and Evidence Evaluation

Integrated assessment requires multiple forms of intelligence:

• Political intelligence: leadership incentives, coalition stability, institutional capacity, elite competition, and foreign-policy direction.
• Economic intelligence: growth, inflation, fiscal capacity, exchange-rate conditions, capital controls, and sectoral dependence.
• Security intelligence: conflict activity, civil unrest, terrorism, maritime security, crime, and state coercion.
• Regulatory intelligence: sanctions, export controls, investment screening, licensing, procurement rules, and data regulation.
• Societal intelligence: public opinion, labor relations, demographic pressures, identity politics, and legitimacy.
• Commercial intelligence: supplier concentration, customer dependence, competitors’ actions, and contract structures.

Evidence should be assessed for reliability and relevance. A government decree may be authoritative about formal law but incomplete about enforcement. A supplier may have detailed operational knowledge but a commercial incentive to minimize concerns. Social-media material may provide early warning but require authentication and corroboration.

A practical source-evaluation record includes:

Analysts should distinguish facts, judgments, and assumptions. “The ministry published a licensing order” is a fact if verified. “The order is likely to be enforced aggressively” is an analytical judgment. “The firm will obtain an exemption” is an assumption unless supported by evidence.

Competing interpretations

A mature assessment records alternative explanations. For instance, a sudden military deployment could represent preparation for escalation, coercive signaling, domestic political theater, or routine exercises. Analysts should identify what evidence would discriminate among these interpretations. This practice reduces confirmation bias and makes disagreement productive.

4. Mapping Organizational Exposure

Country-level risk ratings are insufficient because the same geopolitical condition affects firms differently. Exposure mapping translates external conditions into organizational dependencies.

A complete map may include:

• legal entities and ownership structures;
• employees, contractors, and facilities;
• suppliers and sub-suppliers;
• transport routes, ports, energy systems, and digital infrastructure;
• critical technologies and intellectual property;
• customers and revenue concentration;
• banks, insurers, payment systems, and currencies;
• licenses, permits, and government relationships;
• data flows and cloud-service dependencies;
• reputational and human-rights stakeholders.

Dependency analysis should search beyond first-tier suppliers. A firm may have ten direct suppliers but discover that eight rely on one politically exposed refinery, port, software provider, or financial institution.

A useful classification is:

Criticality should be assessed by asking what happens if the dependency is unavailable, delayed, compromised, or legally prohibited. Time-to-impact and time-to-recover are often more useful than a general label such as “high risk.”

5. Risk Analysis and Prioritization

A simple risk model can support prioritization, provided it is not treated as an objective measurement of reality. Let:

where R_i is the priority score for risk i, P_i is an ordinal likelihood score, and I_i is an ordinal impact score. The values must use a defined scale, such as 1 to 5. Because the scales are ordinal, multiplication creates a prioritization convention rather than a true probability-weighted loss estimate.

For more rigorous financial analysis, expected loss can be represented as:

where EL is expected loss over the defined period, p_s is the probability assigned to scenario s, and L_s is the loss if that scenario occurs. The probabilities must sum to 1 across mutually exclusive and collectively exhaustive scenarios. Expected loss is useful for comparison, but it can conceal extreme outcomes and does not capture strategic discontinuities, human harm, or uncertainty about the probabilities themselves.

If losses occur over several periods and a discount rate is appropriate, the present value of expected losses may be estimated as:

Here EL_t is expected loss in period t, r is the discount rate per period, and T is the number of periods. This expression assumes that losses and the discount rate are measured consistently and that the decision-maker accepts discounted valuation. It should not be used to discount irreversible human or legal consequences mechanically.

Worked example: prioritizing a supply interruption

Suppose a multinational estimates three mutually exclusive outcomes for a critical component over the next year:

Expected loss is:

EL = (0.55 × 0.2) + (0.30 × 2.0) + (0.15 × 8.0) million

EL = 0.11 + 0.60 + 1.20 = 1.91 million.

The result is $1.91 million per year under the stated assumptions. However, management should not conclude that the risk is equivalent to a certain $1.91 million loss. The severe scenario may threaten safety, strategic access, or the firm’s license to operate. Scenario-specific consequences therefore remain essential.

6. Scenario Construction

Scenarios are coherent narratives about plausible futures, not forecasts and not predictions of a single inevitable outcome. They help decision-makers test whether strategies remain effective under different conditions.

A disciplined scenario process involves:

1. Identify the focal decision and time horizon.
2. List driving forces, such as elections, alliance behavior, economic stress, military posture, technology controls, and public legitimacy.
3. Assess each force by uncertainty and potential impact.
4. Select critical uncertainties that create meaningfully different futures.
5. Construct two to four internally consistent scenarios.
6. Describe triggers, pathways, business impacts, and management implications.
7. Identify signposts that indicate which scenario may be emerging.

A scenario should specify:

• starting conditions;
• causal mechanism;
• sequence of developments;
• affected stakeholders;
• operational and financial consequences;
• plausible duration;
• reversal or escalation conditions;
• early indicators.

For example, a firm considering a regional production investment might examine:

• Managed competition: tensions persist, but commercial channels and licenses remain available.
• Regulatory fragmentation: states introduce conflicting technology, data, and investment rules.
• Acute coercion: a crisis produces sanctions, transport disruption, and pressure on firms to choose sides.
• Partial stabilization: diplomatic arrangements reduce immediate risk but leave structural rivalry intact.

Scenarios should be stress-tested for internal consistency. An assessment should not assume simultaneously that borders are open, sanctions are comprehensive, and supply routes are unaffected unless a clear mechanism explains the combination.

7. Comparing Strategic Options

The purpose of analysis is not to recommend the most defensive option automatically. It is to compare choices across cost, opportunity, resilience, legality, reversibility, and strategic fit.

Potential options include:

• remain and monitor;
• diversify suppliers or markets;
• establish dual production capacity;
• hold strategic inventory;
• redesign products or technologies;
• restructure ownership or contractual arrangements;
• obtain licenses and compliance controls;
• form local partnerships;
• insure or hedge selected exposures;
• suspend, divest, or exit.

A weighted decision matrix can make trade-offs visible. Let:

where S_j is the score for option j, w_k is the weight assigned to criterion k, and x_jk is the normalized score of option j on criterion k. The weights should sum to 1, and all scores must use the same direction—for example, higher scores should consistently mean more desirable performance.

Illustrative criteria may include resilience, cost, legal feasibility, speed, reversibility, reputation, and strategic opportunity. The matrix does not replace judgment. It exposes assumptions and supports sensitivity analysis. If a recommendation changes whenever the resilience weight moves from 0.25 to 0.30, the decision is sensitive and should be escalated rather than presented as certain.

Real-options reasoning is particularly relevant under uncertainty. A staged investment, pilot facility, or renewable contract may have value because it preserves the ability to expand, delay, or withdraw as information improves. Conversely, an irreversible investment may require a higher evidence threshold.

8. Resilience Measures

Resilience is the capability to absorb disruption, maintain essential functions, adapt to changing conditions, and recover without unacceptable loss of mission or legitimacy. It is not identical to redundancy. Redundancy may increase resilience, but so may flexibility, substitutability, visibility, decentralization, and rapid decision-making.

A resilience plan should identify:

• critical services and maximum tolerable interruption;
• single points of failure;
• alternative suppliers, routes, technologies, and payment channels;
• minimum viable operations;
• emergency authorities and succession arrangements;
• communications protocols;
• workforce protection and evacuation procedures;
• cyber and data-continuity measures;
• legal and regulatory response procedures;
• recovery priorities and learning mechanisms.

Controls can be categorized as preventive, absorptive, adaptive, and restorative. Preventive controls reduce the chance of disruption; absorptive controls maintain operations during disruption; adaptive controls change the operating model; restorative controls return the organization to a stable state.

Resilience investments should be proportionate. Excessive duplication can create cost, complexity, and new security vulnerabilities. A strong plan therefore links each measure to a defined scenario, dependency, trigger, owner, and performance indicator.

9. Governance and Accountability

Geopolitical risk cannot be delegated entirely to a security or intelligence function. It requires cross-functional governance involving strategy, legal, compliance, finance, procurement, operations, technology, human resources, communications, and the board.

A governance design should clarify:

• who owns each risk;
• who produces analysis;
• who independently challenges assumptions;
• who authorizes exceptional action;
• who communicates with governments and stakeholders;
• who records decisions and rationales;
• who reviews the effectiveness of controls.

A three-level model is often useful:

1. Operational level: monitors exposures and executes controls.
2. Management level: integrates analysis, allocates resources, and manages trade-offs.
3. Board or executive level: approves risk appetite, major commitments, and crisis decisions.

The assessment should maintain an audit trail. Each major conclusion should be traceable to evidence, assumptions, analytical method, confidence level, and responsible analyst. Red-team review can challenge groupthink by asking how the recommendation could be wrong, what evidence has been ignored, and which actor benefits from the organization’s assumptions.

10. Monitoring Indicators and Escalation

Monitoring converts a static report into a living management system. Indicators should be linked to causal mechanisms rather than selected merely because data are available.

Useful indicators may include:

Indicators should have thresholds and owners. A green status may mean normal monitoring; amber may require management review or contingency preparation; red may activate crisis procedures. Thresholds should not be interpreted mechanically. A single indicator can be noisy, while several weak signals may together justify action.

Bayesian updating can describe how new evidence changes belief. If H is a hypothesis and E is new evidence:

Here P(H|E) is the posterior probability of the hypothesis after observing evidence, P(E|H) is the likelihood of the evidence if the hypothesis is true, P(H) is the prior probability, and P(E) is the overall probability of the evidence. The method requires carefully defined hypotheses and credible likelihood judgments. It does not eliminate analyst judgment, and weak or dependent evidence can produce misleading confidence.

11. Illustrative Case: Meridian Components Group

This is a fictional illustrative case.

Background

Meridian Components Group, a multinational manufacturer of industrial sensors, is considering a $120 million assembly and testing facility in State A. State A offers tax incentives, a skilled workforce, and access to a regional market. However, relations between State A and a major technology-producing State B are deteriorating. Meridian’s proposed facility would import specialized chips from State B, use cloud services hosted partly in State B, and export finished products to customers in both jurisdictions.

Problem

The board must decide whether to proceed with the investment, delay it, redesign the project, or locate the facility elsewhere. The decision horizon is ten years, but construction would begin within twelve months.

Analysis

The assessment identifies four transmission mechanisms:

1. Export controls could restrict chip shipments.
2. Political pressure could limit access to cloud services and technical support.
3. A regional crisis could disrupt ports and insurance availability.
4. Conflicting data and investment rules could create compliance costs and legal exposure.

Exposure mapping shows that the proposed plant would depend on one chip family, one major port, and one cloud architecture. The expected financial loss from a severe twelve-month interruption is estimated at $18 million, excluding reputational and safety consequences. The concentration is therefore more important than the average country-risk score.

Three scenarios are constructed:

Strategic options

Meridian compares four options: proceed unchanged, proceed with dual sourcing and modular cloud architecture, delay for twelve months, or locate the facility in State C. The weighted analysis gives high importance to resilience and legal feasibility, but management also tests alternative weights. The unchanged option performs well on cost but poorly under the acute-coercion scenario. State C reduces geopolitical exposure but has slower permitting and higher labor costs. The dual-source option has the strongest performance across scenarios and preserves the possibility of expansion.

Solution

The recommended strategy is a staged investment. Meridian proceeds with site preparation but makes final production investment conditional on three controls:

• qualification of a second chip supplier outside the exposed relationship;
• a cloud architecture capable of operating through a regional service disruption;
• contractual and legal review of sanctions, licensing, data, and exit provisions.

The company also establishes a twelve-month inventory buffer for the most specialized chip, subject to obsolescence controls, and creates a board reporting dashboard.

Monitoring and triggers

An amber trigger is set for repeated licensing delays, a material rise in military incidents near major transport routes, or evidence that either state is preparing sector-wide controls. A red trigger is set for formal export prohibition, payment-system exclusion, or confirmed physical disruption affecting the relevant port. These triggers initiate executive review rather than automatic withdrawal.

Outcome

In the first year, no acute crisis occurs, but licensing delays increase. Meridian activates the amber protocol, accelerates second-source qualification, and postpones the final expansion phase. The staged design prevents a premature full commitment while preserving market access.

Learning points

The case demonstrates that geopolitical assessment is not equivalent to assigning a country a risk score. The decisive issues were dependency concentration, reversibility, legal feasibility, and the connection between indicators and action. It also demonstrates the value of separating a commitment decision into stages.

12. Defending the Assessment

A professional defense should answer six questions:

1. What decision is being supported?
2. What evidence supports the key judgments?
3. What assumptions are necessary?
4. What could make the assessment wrong?
5. How do the recommended controls change exposure or consequence?
6. What indicators would cause the recommendation to change?

Analysts should present confidence explicitly. High confidence may be appropriate for a published legal rule but not for the future behavior of a political leader. Confidence should reflect evidence quality, source independence, analytical agreement, and stability of the underlying conditions.

A defensible presentation distinguishes facts from estimates, uses ranges where appropriate, explains scenario logic, and identifies unresolved questions. It should avoid unsupported precision, dramatic language, and recommendations that cannot be implemented by an accountable owner.

13. Limitations, Ethics, and Regulation

Geopolitical assessment faces structural limitations. Political systems are adaptive; actors conceal intentions; data may be incomplete or manipulated; causal chains may be nonlinear; and low-probability events can produce extreme consequences. Quantitative models may create an illusion of objectivity when inputs are subjective.

Ethical practice requires respect for privacy, human rights, source protection, non-discrimination, and proportionality. Corporate intelligence should not become political surveillance, unlawful collection, or a pretext for collective discrimination against employees or communities. Analysts must distinguish legitimate security concerns from stereotypes about nationality, ethnicity, religion, or political identity.

Legal issues may include sanctions compliance, export controls, anti-bribery law, data protection, competition law, labor rights, national-security review, and fiduciary duties. Legal counsel should be integrated early, but legal compliance does not by itself resolve strategic or ethical questions.

Artificial intelligence can assist with document classification, translation, anomaly detection, network mapping, and indicator monitoring. However, AI systems may reproduce source bias, hallucinate facts, miss sarcasm or context, and expose sensitive information. Human validation, provenance tracking, access controls, model testing, and clear accountability are essential. AI-generated conclusions should never be treated as intelligence without verification.

14. Best-Practice Checklist

A high-quality integrated assessment should:

• begin with a specific decision;
• define scope, time horizon, and risk appetite;
• map direct and indirect dependencies;
• use diverse, credible, and time-stamped sources;
• separate fact, judgment, and assumption;
• record alternative interpretations;
• connect geopolitical developments to business transmission mechanisms;
• use scenarios rather than a single forecast;
• distinguish expected loss from tail risk and irreversible harm;
• compare options using transparent criteria;
• test recommendations for sensitivity and reversibility;
• assign controls, owners, deadlines, and resources;
• establish indicators, thresholds, and escalation procedures;
• protect human rights and confidential information;
• document uncertainty and update the assessment regularly.

Chapter Summary

An integrated geopolitical risk assessment is a decision-support system linking external political conditions to organizational exposure, consequences, strategic choices, resilience measures, and governance. The process begins by framing a concrete decision and defining assumptions. Intelligence from political, economic, security, regulatory, societal, and commercial sources is then evaluated for reliability and relevance. Exposure mapping identifies assets, dependencies, and transmission mechanisms.

Risk prioritization tools such as ordinal matrices and expected-loss calculations can support comparison, but they must not disguise uncertainty or extreme outcomes. Scenarios provide coherent alternative futures, while weighted decision analysis makes strategic trade-offs visible. Resilience depends on diversification, flexibility, continuity planning, legal preparedness, and clear crisis authority. Monitoring indicators transform the assessment into an adaptive management process.

The strongest assessments are transparent, challengeable, ethically responsible, and operationally connected. They state what is known, what is uncertain, what could invalidate the conclusion, and what management should do next.

Key Terms

Geopolitical risk: The possibility that political or international developments will adversely affect an organization.

Hazard: A potentially disruptive geopolitical condition or event.

Exposure: The organization’s presence, dependency, or activity subject to a hazard.

Vulnerability: The susceptibility of an exposed activity or asset to harm.

Transmission mechanism: The causal pathway through which a geopolitical event affects a business.

Impact: The consequence of a risk for operations, finance, strategy, people, law, or reputation.

Residual risk: Risk remaining after controls are implemented.

Strategic intelligence: Analysis of external developments intended to support important organizational decisions.

Scenario: A coherent and plausible description of a possible future condition.

Signpost: An observable indicator suggesting that a scenario may be emerging.

Risk appetite: The amount and type of risk an organization is willing to accept.

Expected loss: The probability-weighted average loss across defined scenarios.

Tail risk: A low-probability event with unusually severe consequences.

Resilience: The ability to absorb, adapt to, and recover from disruption.

Redundancy: Duplication of resources or capabilities to reduce dependence on a single point of failure.

Critical dependency: An input or relationship whose disruption could materially impair essential operations.

Residual risk: Risk that persists after mitigation and control measures.

Red-team review: Structured challenge designed to identify weaknesses, bias, and alternative explanations.

Geopolitical risk governance: The allocation of authority, accountability, oversight, and escalation for geopolitical risks.

Review Questions

Short Answer Questions

1. Distinguish a geopolitical hazard from organizational exposure.
2. Why should an assessment begin with a decision question rather than a country profile?
3. What is the difference between a fact, an analytical judgment, and an assumption?
4. What purposes do scenario signposts serve?
5. Why is an ordinal risk score not the same as a probability-weighted financial loss?

Long Answer Questions

1. Explain the complete architecture of an integrated geopolitical risk assessment for a multinational organization.
2. Discuss how exposure mapping improves on country-level risk ratings.
3. Explain the benefits and limitations of expected-loss analysis in geopolitical risk assessment.
4. Evaluate how governance and red-team review improve the quality of strategic risk decisions.
5. Discuss the ethical, legal, and operational challenges of using artificial intelligence in geopolitical intelligence.

Analytical / Application Questions

1. A firm depends on one port, one payment channel, and one politically exposed supplier. Design an exposure map and recommend three resilience measures.
2. Construct two contrasting scenarios for a multinational entering a market affected by sanctions uncertainty. For each scenario, identify triggers, business consequences, and management actions.
3. Using the Meridian Components Group case, explain why a staged investment may be superior to both immediate full investment and complete withdrawal.

Multiple Choice Questions with Answers

Question 1

Which sequence best represents the central logic of an integrated geopolitical risk assessment?

A. Country score → publicity → budget → exit

B. Geopolitical condition → transmission mechanism → exposed activity → consequence → response

C. Forecast → accounting entry → audit → procurement

D. Supplier price → marketing plan → election result → insurance

Correct Answer: B. Geopolitical condition → transmission mechanism → exposed activity → consequence → response

Question 2

What is the main limitation of multiplying ordinal likelihood and impact scores?

A. It cannot produce a priority ranking

B. It always requires financial loss data

C. The result is a prioritization convention, not a true probability-weighted loss

D. It is valid only for military risks

Correct Answer: C. The result is a prioritization convention, not a true probability-weighted loss

Question 3

In the worked supply-interruption example, what is the expected loss?

A. $0.91 million

B. $1.20 million

C. $1.91 million

D. $8.00 million

Correct Answer: C. $1.91 million

Question 4

Which feature most clearly distinguishes a scenario from a forecast?

A. A scenario is a coherent description of a plausible future, not a claim that one future will occur

B. A scenario never contains assumptions

C. A scenario must use only historical data

D. A scenario eliminates uncertainty

Correct Answer: A. A scenario is a coherent description of a plausible future, not a claim that one future will occur

Question 5

What is the purpose of a signpost?

A. To calculate annual revenue

B. To indicate whether a scenario may be emerging

C. To replace legal review

D. To determine employee salaries

Correct Answer: B. To indicate whether a scenario may be emerging

Question 6

Which option is an example of an adaptive resilience measure?

A. Ignoring supplier concentration

B. Changing the operating model after a disruption alters market access

C. Removing all monitoring indicators

D. Assuming contracts cannot change

Correct Answer: B. Changing the operating model after a disruption alters market access

Question 7

In a weighted decision matrix, what should the weights normally do?

A. Sum to 1 and represent the relative importance of criteria

B. Be assigned only after the decision is implemented

C. Use different scoring directions for each criterion

D. Exclude legal feasibility

Correct Answer: A. Sum to 1 and represent the relative importance of criteria

Question 8

Which practice most improves the defensibility of an assessment?

A. Presenting one confident forecast

B. Hiding assumptions to avoid confusion

C. Tracing major conclusions to evidence, assumptions, confidence, and ownership

D. Using only publicly popular sources

Correct Answer: C. Tracing major conclusions to evidence, assumptions, confidence, and ownership

Question 9

Why can a country-risk score be misleading for a multinational organization?

A. All firms face identical exposure within a country

B. It may ignore firm-specific dependencies and transmission mechanisms

C. Countries have no political risks

D. Country scores measure only employee morale

Correct Answer: B. It may ignore firm-specific dependencies and transmission mechanisms

Question 10

Which is an appropriate control for responsible use of AI in geopolitical intelligence?

A. Accepting AI-generated claims without verification

B. Removing provenance records

C. Human validation, source tracking, access controls, and model testing

D. Allowing unrestricted input of confidential data

Correct Answer: C. Human validation, source tracking, access controls, and model testing