Security for Africa Business Travel: Corporate Guide 2026

Sub-Saharan Africa accounts for a significant and growing share of global corporate travel, driven by the region’s commodity markets, infrastructure investment, NGO operations, and expanding tech sector. Lagos, Nairobi, and Johannesburg are three of the continent’s largest commercial cities and three of its most demanding security environments. Accra, Dar es Salaam, and Addis Ababa have all grown as business destinations while their security profiles have simultaneously shifted.

This guide covers the security landscape across the primary Sub-Saharan Africa business destinations, operator vetting in the region’s fragmented regulatory environment, and the operational priorities that experienced practitioners apply to Africa deployments.

The regional risk picture

Sub-Saharan Africa is not a single risk environment. The security conditions in Lagos are not the same as in Accra. Nairobi and Dar es Salaam present different threat profiles despite both being East African coastal capitals. Johannesburg’s organised crime sector is structurally different from the political violence risks that appear in Addis Ababa or Kinshasa.

The common thread across most of the region is the quality gap in local security provision. Unlike Western Europe or Singapore, where the licensed security market provides a meaningful quality signal, in most Sub-Saharan markets a registered company is not necessarily a competent one. OSAC and Control Risks both document this gap explicitly in their regional assessments.

Source: OSAC Sub-Saharan Africa Country Security Reports 2024. Control Risks RiskMap 2025.

Nigeria and Lagos

Lagos is a city of 15 to 20 million people with a correspondingly large criminal economy. Kidnap-for-ransom targets both foreign executives and affluent Nigerian nationals. The methodology ranges from opportunistic street snatches to planned abductions with surveillance. Express kidnapping (short-duration, ATM-focused) operates alongside longer negotiated abductions.

The NSCDC (Nigeria Security and Civil Defence Corps) registers private security companies under the Private Guard Companies Act. An estimated 1,500+ registered companies operate in Lagos. The variance in quality between the top tier and the average is large. Verifying NSCDC registration is a minimum step, not a quality assurance mechanism.

Traffic in Lagos is one of the highest continuous risk factors. Journey times measured in hours on the same route are common during peak periods. Prolonged vehicle immobility creates predictable patterns and exposure. Security drivers in Lagos must have city-specific knowledge and maintain alternative route awareness at all times.

FCDO advises against all travel to specific states in Nigeria’s north and delta regions. For Lagos operations, FCDO maintains a standard travel advisory with specific crime warnings. For the full regulatory picture on security in Nigeria, see our Nigeria security regulations guide.

Kenya and Nairobi

Nairobi has one of Africa’s more structured private security industries. Kenya’s Private Security Regulatory Authority (PSRA) administers a registerable database of licensed companies and individual operators. This creates a verifiable compliance check that most of the region lacks.

The security threat in Nairobi covers three categories that require separate planning responses:

Al-Shabaab terrorism. The 2013 Westgate Mall attack and the 2019 DusitD2 hotel complex attack both demonstrated Al-Shabaab’s capacity to conduct high-impact attacks on crowded commercial premises in Nairobi. FCDO maintains an elevated terrorism warning for Kenya. Venue selection and crowd management for high-profile events in Nairobi incorporates counter-terrorism planning as a baseline.

Kidnapping. OSAC documents criminal kidnapping in Nairobi, including express kidnapping variants. The risk is higher for known affluent targets, international NGO staff, and executives in sectors associated with wealth.

Carjacking. High-value vehicle theft and carjacking are documented particularly around Westlands, Upper Hill, and the Mombasa Road corridor. Anti-surveillance driving and route variation are operational standards.

For the full Kenya regulatory framework, see our Kenya security regulations guide.

South Africa and Johannesburg

South Africa’s kidnap-for-ransom market has grown sharply since 2020. Statistics South Africa and the South African Police Service (SAPS) document a significant increase in reported kidnapping cases since 2021. Cape Town and Johannesburg both feature in the current assessment.

The methodology in South Africa is increasingly sophisticated. Surveillance precedes abduction. Targets include business owners, executives, and affluent residential area residents. The perpetrators are not always opportunistic. Planned targeting with surveillance observation is documented in SAPS case records.

PSIRA (Private Security Industry Regulatory Authority) provides a searchable register of South Africa’s licensed security companies and Grade A operators. Grade A is the required minimum for close protection work. PSIRA’s register is one of the more reliable quality filters in Sub-Saharan Africa, though it still only confirms minimum compliance. For the South Africa regulatory overview, see our South Africa security regulations guide.

Tanzania and Dar es Salaam

Express kidnapping in Dar es Salaam is a financially motivated, short-duration methodology. The risk is concentrated around airport arrivals, ATM locations, and hotels in the central business district. Average payments reported are around GBP 5,000 based on documented cases. Victims are typically released after payment.

Tanzania has no centralised private security licensing register equivalent to Kenya’s PSRA. Operator vetting requires direct reference checks, employment history verification, and background screening rather than a licence number query. This increases the time required for proper pre-deployment vetting.

Ghana and Accra

Accra’s security environment has deteriorated since 2021. Robbery, including armed robbery, has increased. Criminal kidnapping has been documented across Accra, Takoradi, and Kumasi. JNIM activity in Burkina Faso has moved the terrorism threat closer to Ghana’s northern border, though this does not directly affect Accra operations.

Ghana Police Service registration covers private security companies in Ghana. Verifying current registration and checking operator backgrounds against Ghana’s INTERPOL-connected criminal database is the starting point for operator vetting.

The Kotoka International Airport arrival process is the primary high-exposure moment for visiting executives. Pre-arranged vetted transport from a trusted provider eliminates the main vulnerability.

The operator vetting challenge across the region

Sub-Saharan Africa’s regulatory fragmentation means that operator quality verification is more demanding here than in Western Europe or Southeast Asia. The practical steps for any Africa deployment:

Regulatory register check. Use the relevant national register (NSCDC for Nigeria, PSRA for Kenya, PSIRA for South Africa) to confirm registration status.

Insurance verification. Contact the insurer directly. Do not accept operator-provided documents as sole confirmation.

Employment history. Request the operator’s employment history for the past five years and verify through direct contact with previous clients or employers, not through references provided by the operator themselves.

Specific city knowledge. Ask a city-specific operational question. A Lagos security driver who does not know the difference between the Third Mainland Bridge and the Eko Bridge traffic patterns at different times of day is not the right operator for a Lagos deployment.

For the vetting framework that applies across all markets, see our security vetting and background checks guide.

Ground transport as the primary risk management tool

Across all Sub-Saharan Africa business destinations, the security driver is the most consistently important security asset. The airport arrival is when the visiting principal is most exposed. A pre-vetted driver with a confirmed identity, a tracked vehicle, no taxi markings, and knowledge of the current security environment on the airport exit routes eliminates the primary vulnerability window.

This is not a cost-cutting variable. A savings decision on the airport transfer is the highest-risk decision any Africa traveller can make.

For the close protection operations framework covering Africa as a whole – including the licensing patchwork across PSIRA, NSCDC, and PSRA jurisdictions, armed vs unarmed decisions by sub-region, convoy protocols, and contractor vetting standards – see the close protection operations in Africa guide. For West Africa specifically – the Sahel jihadist corridor and its southward coastal expansion, Ghana and Côte d’Ivoire as regional operating bases, Gulf of Guinea maritime security, and the licensing framework across West African states – see our close protection in West Africa guide. For the Horn of Africa subregion – Ethiopia, Djibouti, Somalia, and Eritrea – including the distinct threat environments, MEDEVAC planning requirements, and the specialist framework for Somalia operations – see our close protection in the Horn of Africa guide.

Source: OSAC Sub-Saharan Africa Country Security Reports 2024 (Nigeria, Kenya, South Africa, Tanzania, Ghana). FCDO Travel Advisories 2025. Control Risks RiskMap 2025. SAPS Annual Crime Statistics 2023-24. Statistics South Africa kidnapping data 2024.