Why “complex” doesn’t capture it, and what corporate leaders actually need to decide before, during and after a return.
The Middle East has always been “complex.” But, that word alone does not survive contact with a real decision. Complex implies you can study your way to confidence. Re-entry after a pause, an evacuation, a pull-back to essential staff, or a full draw-down is different. It is a series of judgement calls about people, money, contracts and reputation, taken inside a moving picture, with a clock running on opportunity and a tail of liability if you get it wrong.
We are watching capable companies hesitate at the threshold and others charge in without the wiring. Both fail in different ways. The first leaves money on the table and cedes ground to competitors who moved earlier. The second discovers, too late, that “we have a plan” and “we can deliver the plan” are not the same sentence.
Re-entry rewards organisations that have been honest about their risk appetite, scrutinised their insurance, drilled their people, and built a response that actually works at the speed events move. This piece sets out what the corporate level needs to consider, what the on-the-ground questions actually are, what signals turn intent into timing, and what well-drilled, well-funded resilience looks like in practice.
1. The questions only the board can answer
1.1 Duty of care, with edges
Duty of care has stopped being an HR slide. It is a legal and reputational instrument now, measured by what you did, when you did it, and how you proved it. ISO 31030 has tightened expectations. Insurers, regulators, courts and the press are aligned on one point: it is not enough to have a policy….you have to show the trail. Re-entry forces the duty of care question to its sharpest form. You are choosing to re-introduce risk. Be deliberate. Document the decision. Brief the people travelling. Equip them properly, and maintain the audit trail.
1.2 Governance… who is actually deciding?
A re-entry decision sits awkwardly across the executive team. It looks like a country-management call, but the consequences sit at the board. Establish, in writing, who is accountable for the go/no-go, who holds the trigger to pull people out again if hostilities resume, and what authority sits with the in-country lead. Without that clarity, you will re-discover the ambiguity at the worst possible moment.
1.3 HQ domicile shapes the rules you follow
US, UK, EU, Asia-Pacific or Gulf-headquartered companies operate under different sanctions regimes, foreign-corrupt-practices exposure, export-control footprints and disclosure obligations. Re-entry sequencing: who flies first, what gets shipped, which contracts resume, which clients you can serve – is partly a function of where your registered office sits. A French parent and a UK parent looking at the same opportunity may reach different conclusions, for entirely valid reasons. Your legal and compliance functions need to be in the room before, not after, the operational plan is built.
1.4 In-country contracts that don’t pause when you do
Middle East contracts often contain force majeure language that is more favourable to the principal than to the contractor. Pause is rarely neutral. Liquidated damages, termination rights, performance bonds, parent guarantees and joint-and-several liabilities can all run in the background while your operations are suspended… Not to mention damage to reputation, and the impact that has on Principals rushing back, without preparing thoroughly. Some contracts get worse on resumption ie. the work resumes, the schedule didn’t. Game out those obligations now. Negotiate where you can. Price the rest in…
1.5 Tax – the cost many overlooked
Pulling people out and bringing them back has both corporation, and individual tax consequences in most Middle East jurisdictions and in the home country. Statutory Presence Test triggered, Permanent establishment risk, employee residence days, social-security treaties, VAT on services rendered remotely, withholding on temporarily-relocated staff – none of these stop because you stopped. Re-entry should be designed with tax counsel in the room. The cost of getting this wrong is a multi-year unwind.
1.6 Risk appetite… yours, your insurer’s, your people’s
What ultimately matters is what you are legally, financially, reputationally, and physically prepared to live with when something has happened. Firms that have not stress-tested their risk appetite against a live scenario drift to both ends of the spectrum – either doomsday, or utopia… neither is advised.
Equally important: your people have their own risk appetite. Senior expats with families have different math than single junior staff, and that math changes again if the staff member is a third-country national whose passport gives them fewer options. The nationality mix of your in-country team shapes who follows whose government advisory, who can be moved fastest, and who needs the most support to stay.
1.7 Insurance — what you bought, what it covers, who responds
Insurance is the area most consistently glossed over and most consistently mis-sold. Three questions, asked plainly:
- Does your broker know what they sold you and how it actually works under load?
- Do you know what you bought, who responds, and how long that response takes?
- Have you got political violence and terrorism cover that pays out for the events you are exposed to today — including drones, kinetic actions short of declared war, cyber-physical, and supply-chain interruption?
If those answers are vague, you do not have insurance. You have a brochure. Re-entry is the moment to test the wiring, not the moment to discover it doesn’t carry current.
2. On the ground: premises, people, drills
The corporate questions answered, the ground questions begin. These, despite seeming tactical are the points at which a strategic decision either becomes survivable or becomes a headline.
2.1 Premises – has anyone actually walked it since we departed?
A site survey is an honest look at what will trip under what stress.
- Has the firefighting equipment been serviced and do the people in the building know how to use it?
- Is there a smoke hood in every cabinet, and has anyone trained on it?
- Where is the muster point for fire? Outside, in the open. Where is the muster point for a drone or kinetic threat? Inside, in the basement, away from glass. Are both points designated, signed, drilled?
- Glazing – anti-shatter film applied? Blast-rated where it needs to be?
- Power, water and comms continuity – generators serviced, fuel contracted, water stored, satellite or backup channel tested?
If the building is leased, who in the landlord’s organisation is your counterpart when something happens? The answer needs to be a name and a number, not a department.
2.2 Drills – funded and repeated
A drill that has been done once is not a drill. Drills need to be funded, scheduled, observed and corrected. Different scenarios produce different actions… a fire might send people out and up; a drone or shelter-in-place sends people in and down.
People will do the wrong one if they have only practised the other. Local nationals, expats and visiting executives all need to be in the same drill, because in a real event, they will all be in the same building.
2.3 Personal safety, told, and sold straight
A coherent personal safety brief is not a document. It is two clear messages people can repeat back: what to do when X, who to call when Y. Phones charged. Lights, fuel, water, cash, comms, route, rendezvous. A family plan that is synchronised with the corporate plan. Local national staff included, not assumed. Third-country nationals briefed on their consular options, which are not the same as yours…
2.4 Insurance, second time around
Insurance shows up twice… or not at all. At the corporate level (what is on the policy) and at country or site level (what the policy assumes about your premises and your people). A political violence policy that assumes a robust evacuation plan – or a drilled, hardened site behaves differently when the the plan doesn’t existi, and the site is neither. Brokers and Responders should be walked through your premises, your drills, your response posture to get you the right cover – and if they cannot tell you how to activate the policy, and their named responder cannot describe what actions they will take when the alarm goes, you are paying for a paper, not transferring the risks you think you are.
3. Indicators: turning intent into timing
Re-entry is a timing decision, and timing is built on signals. Read in isolation, any one signal is noise and will skew your decisions. Read together, against your own thresholds, they are a forecast.
- Government advisories from the home and host nation — with the granularity that matters: which provinces, which categories of traveller, which carve-outs.
- Insurance underwriting posture: premiums, exclusions, capacity withdrawal, sub-limit changes. The market often moves before the news does.
- Local schools — open, hybrid, closed. A reliable indicator of how host-country professional families are reading the situation.
- Workforce posture in peer organisations: full operations, work-from-home, essential staff only, full pause.
- Banking and FX channels, supply-chain confidence, port and air operations.
- Local political signalling, military posture, regional escalation language — read in original-language sources, not just wire copy.
The CHARIS Trigger Tracker, a free tool from Sicuro Group exists because no single executive has time to read all of that, every day, and decide whether today is different from yesterday. It does the reading and the comparing, against your standing thresholds, and tells you when something has materially changed and what your pre-agreed decisions say to do about it.
If hostilities resume, the question your board will be asked is not “did you know?” It is “how soon did you act?” The answer to that is built before, not during.
4. What well-drilled, correctly-funded resilience actually looks like
We say resilience and we mean it specifically. It is not a brochure word. It is the gap between an organisation that gets caught and one that keeps trading.
The only metric of resilience that matters is how long you go from being impacted by an event to back to business as usual – our job is to minimize that impact and reduce that timeline.
A resilient re-entry programme has six signs of life:
- A board-approved decision framework, written down and pre-rehearsed, with named owners for go, hold and pull.
- A duty-of-care backbone aligned to ISO 31030 and ISO 22301, with the audit trail to prove it.
- Insurance that has been scrutinised, stress-tested with the broker and underwriter, and matched to your actual exposure – including modern threats.
- Premises that have been surveyed, hardened and drilled, with separate plans for fire, drone, shelter-in-place, evacuation and medical.
- People who have been briefed, equipped, drilled and trusted with information they can act on — including local-national, expat and third-country-national variation.
- A live indicator picture that is read for you, daily, against your own thresholds.
This is the model we have been delivering. The CHARIS Trigger Tracker reads the picture. SicuroResponse provides the 24/7 operations centre, the credit line to get things moving before insurance activates, the regional network, the responders, the medical, the transport, the comms. Our consultants own the corporate-level work with you – governance, contracts, insurance scrutiny, surveys, drills, and stay through implementation. We do not write a plan and leave. We become your risk and resilience advisor and responder.
That is the position we are taking, and it is why clients are signing on. Larger firms tell you how to do it. Many of them do not implement, and most of them cannot respond. We do both, and we own the outcome.
The maths, plainly
Re-entry is not a risk-reduction exercise…It is a profitability exercise that has risk inside it.
The companies that win in the Middle East over the next 18–36 months will be the ones that re-enter sooner, with earned confidence from a risk management programme that is real. They will move while their competitors are still stumbling and doing things just as they did pre-conflict.
At very minimum – firms who work with us will not pay reputational tax for the avoidable. They will not pay financial tax for the uninsured, and they will not pay opportunity tax for hesitating.
We are working with boards, general counsel, CFOs, COOs, country leads, underwriters and brokers to make those moves possible – to balance legal, financial, reputational and physical risk against the size of the prize, and to put the wiring in place that lets the decision-makers act with peace of mind.
If you are looking at the Middle East and thinking “we should be there, but…” that “but” is the conversation. Let’s have it…
Sicuro Group is a global risk management and resilience partner, headquartered in Dubai with delivery across 140+ countries. We help boards, family offices, governments and multinationals operate — and re-enter — the markets others step away from. Learn more about Business Resilience and Continuity, explore our Insights & Resources, or ask us about the CHARIS Trigger Tracker and SicuroResponse.
Assess your organization's travel risk management program, duty of care readiness, and business travel safety posture against ISO 31030:2021 — the international standard for corporate travel security and traveler safety.
- 7 Core Domains
- 35 Requirements
- 15 Minutes
Scott Wilcox is the founder of Sicuro Group, an international risk management firm operating through 12 offices across 140+ countries. A former Royal Marines Commando, he has spent over 20 years advising executives, family offices, and senior leaders in markets where information is incomplete and the margin for error is minimal. Scott serves on the ASIS International Travel Risk Management Steering Committee and the U.S. State Department’s OSAC MENA and Afghanistan Steering Committees, and was named a Top 30 Global Security Influencer by the International Security Journal in 2024 and 2025.




