How Far Corporate Responsibility Really Extends
If you do not define the limits of your duty of care before the next crisis, you will spend heavily, act inconsistently, and still disappoint people. This article sets a practical perimeter you can defend, communicate, and execute.
Direct Billing Agreements in International Healthcare
- The company has a responsibility to employees and contracted workers on company business.
- The company has a responsibility when it places people in a location, for example on assignment, and often for the household that moves with them.
- The company has a responsibility to inform, brief, and support staff so they can make good decisions.
Beyond that, ambiguity appears fast.
When conflict impacts an employee’s home country, staff will try to leave, return, or stay. If you have not drawn the line in advance, you will draw it under pressure, one family at a time, with different managers making different promises.
That is where cost, resentment, and legal questions start to grow.
Duty of care is about reducing risk to people and the organisation when people are moving around. The “trip” is rarely the asset. The asset is the person, the function they enable, and the exposure that follows them.
What recent conflicts exposed
Ukraine: scope expands quickly
In 2022, many organisations moved quickly. In practice, the response often expanded from “employees” to “employees plus households,” and in some cases beyond. Once you move one family group, you set a precedent. The logistics and cost scale quickly. Temporary relocations can become months, not weeks.
Israel, Gaza, Lebanon, Iran: the edge cases became the norm
Recent crises surfaced the same pressures repeatedly:
- Employees on personal travel who became stranded.
- Dual nationals seeking help for family movements the company never planned for.
- Staff returning to home countries during upheaval, then requesting support when airspace or borders tightened.
The consistent theme: where policy was vague, decisions were emotional, uneven, and expensive.
Who really decides
Security teams are often expected to “make it safe” and then criticised when the company decides it did too much or not enough. In most companies, the decision-makers are Employment Legal and Benefits, because this is where liability, precedent, and cost sit.
Security’s best role is enablement: collect facts early, read the room, find allies, and present leadership with options before the organisation backs itself into a corner. Travel risk management is a team-of-teams problem.
Governance, not heroics: if duty of care is decided “in the moment,” you have built a reaction machine.
Define movement, not just business travel
A practical way to reduce bleisure confusion is to define “movement” in policy. Movement includes the modality and the purpose.
- Modality: commercial air (TMC or self-booked), ground transport, ride share, train, bus, private aviation.
- Purpose: business travel, blended travel, long-term assignment, global mobility, job-function travel (sales, delivery, installation).
This avoids the most common argument after an incident: “Were they travelling for work or not.” Your policy should state how support is handled across these categories, and what changes when a trip shifts into personal time.
The real gap: “dependent” is not defined
In many companies, “dependent” only appears in tax or benefits language. That is not enough for crisis planning. Without a definition, “family” expands in a crisis to include spouses, adult children, parents, in-laws, extended relatives, domestic staff, carers, and pets.
You need a clear, written answer to four questions:
- Who do we classify as a dependent for security and evacuation purposes.
- In what locations and circumstances does that apply.
- What level of support do we offer each category.
- What sits outside company support and remains a personal decision.
Contractors: decide early, do not hide behind the parent company
Many organisations avoid extending duty of care to contractors by placing responsibility on the contractor’s parent company. Sometimes that is legitimate. Often it is a paper position that fails the moment something goes wrong.
If a contractor is critical to your operation, embedded in your projects, and exposed because of your footprint, the practical and reputational expectation will fall on you whether you like it or not.
Decide where you stand. Write it down. Communicate it as part of onboarding and mobilisation.
A tiered model that holds up under pressure
You need a framework that is easy to explain, and hard to misinterpret.
Tier 1: Employees and contracted workers on company business
- Covered by travel risk and crisis response as defined in policy.
- Eligible for evacuation, relocation, medical and security support under agreed triggers and limits.
- Aligned to insurance and assistance agreements.
Tier 2: Legal dependents on company-sponsored assignment
- Spouse or legally recognised partner, dependent children living with the employee at the posting location.
- Support mirrors the employee when the company is the reason the household is in-country.
- Terms written into assignment letters and mobility documentation.
Tier 3: Immediate family in country of origin
- Parents or children residing in a conflict-affected country but not on company assignment.
- Primary support is information, signposting, and defined HR benefits (leave, EAP, limited financial support where policy allows).
- Evacuation or relocation only if explicitly listed for defined categories of staff, with caps and criteria.
Tier 4: Extended family, pets, and others
- No automatic operational support from the company.
- Possible flexibility via HR measures (leave, remote work approvals, salary advances) and guidance.
- Any operational move is a documented exception, approved at senior level, not a default.
Exceptions are where programs break
The first exception becomes the story everyone repeats. If you allow exceptions, design them:
- Define who can approve exceptions and at what threshold.
- Require written documentation for rationale, cost, and risk acceptance.
- Set cost caps and duration limits.
- Record exceptions so they do not quietly become “the new normal.”
Kindness without controls turns into implied entitlement. That is where liability arguments start.
Bleisure and “I’m going home” travel
You cannot stop people going home. You can manage expectations and reduce organisational exposure.
Your policy should state:
- When corporate duty of care starts and ends on trips with a leisure element.
- Whether the company will assist during the personal segment, and on what basis (for example, best-efforts support, costs recharged, or defined limits).
- Whether all trip segments must be registered in the travel system, including self-funded legs.
- What happens if staff choose to enter or remain in locations under “do not travel” or equivalent advisories.
The aim is simple: avoid a gap between what staff assume and what the company is prepared to do.
Relocation is not just transport
Evacuation and relocation planning often fails on second-order realities:
- Visa and immigration status.
- Right-to-work constraints.
- Schooling and family welfare continuity.
- Medical continuity and prescriptions.
- Sanctions, payment routes, and the ability to contract locally.
Poorly planned moves can create long-term displacement. Nobody intends to create refugees, but open-ended support without triggers leads there.
Do not outsource your perimeter to vendors
Use travel and response vendors for feasibility and execution. Do not let them define who you cover. If your policy is undefined, vendor advice will naturally skew toward broader support options, because that is what they are built to deliver.
Set your perimeter first through governance, risk appetite, legal and HR, and insurance realities. Then ask vendors to execute inside those boundaries.
Bring insurers in early
Insurers are often brought in late. They should be brought in early. You need clarity on:
- Who is covered by your current travel, medical, evacuation, and liability arrangements.
- How policies treat dependents, personal travel, and blended trips.
- War and conflict exclusions, sanctions restrictions, and geographic constraints.
- Duration limits on relocation or temporary living support.
If you cannot describe the maximum duration and cost exposure in advance, you do not have a policy. You have an uncapped liability.
Remote work, displacement, and business impact
Once someone is moved out of a risk area, the next problem is time:
- How long will the company fund accommodation and living costs.
- Can the person realistically work remotely, and is it appropriate for their role.
- What triggers review, return, redeployment, or separation.
Link this to business continuity. If a team is displaced for months, that is not an HR issue alone. It is an operational resilience issue.
Make it a benefit through onboarding and briefings
The cleanest way to avoid drama later is to present duty of care boundaries during onboarding, mobilisation, and assignment briefings. When framed as a benefit with clear limits, people accept it. When revealed mid-crisis, it feels improvised.
For higher-risk assignments, consider a pre-deployment briefing that includes the household. It is one of the fastest ways to align expectations.
Test the edge cases before the next crisis
Policies fail at the edges. Tabletop exercises surface the edges early.
- Run scenarios on dependent definitions, bleisure, personal returns, and mass displacement.
- Include HR, Legal, Insurance/Risk, Finance, Global Mobility, Business Continuity, Travel, and Security.
- Force decisions on triggers, cost caps, approval rights, and communications.
What to have in place now
Before the next crisis, aim to have five things done:
- 1. A written duty of care perimeter for employees and contractors, approved and owned cross-functionally.
- 2. A clear definition of dependents for security and crisis purposes, backed by a tiered support model.
- 3. A movement and bleisure policy that removes ambiguity on personal legs of travel and “going home” decisions.
- 4. Pre-agreed triggers, limits, and decision rights for evacuation, relocation, exceptions, and duration of support.
- 5. A communications plan that sets expectations early, in plain language, and is used consistently across regions.
Bottom line
You cannot remove the human impulse to go home when conflict hits loved ones. You can remove most of the ambiguity that turns a crisis into improvisation.
Define the perimeter now. Communicate it early. Test it. Then, when the next crisis hits, you will be making decisions inside a framework, not negotiating the rules while people are already in motion.
Assess your organization's travel risk management program, duty of care readiness, and business travel safety posture against ISO 31030:2021 — the international standard for corporate travel security and traveler safety.
- 7 Core Domains
- 35 Requirements
- 15 Minutes
when it matters most.
Speak with our team about aligning governance, insurance, and operational reality into a single, defensible framework.