Know your risks.
Decide what comes next.

A missile or long-range drone damages an occupied office or interrupts its work in Kyiv City.

Repeated city harm and multi-district effects demonstrate reach. Intent is held at 3 because no dated attack on the reference organisation is established; standard alert awareness offers limited prevention.

Identify usable shelter and its entry route; set clear stop-work and relocation triggers, and keep staff away from fresh strike sites.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability.

A glide bomb, FPV or short-range UAV used from a frontline operating area directly harms staff during an ordinary Kyiv City workday.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability. The current official sector report places frontline activity away from the Kyiv office posture. National use establishes intent and capability elsewhere; it does not establish this mechanism in Kyiv. Long-range strike exposure remains in C1.1.

Keep ordinary office travel within the assessed urban area. Require a fresh assessment before any frontline assignment.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability.

Conventional frontline artillery or mortar fire reaches staff or the office inside Kyiv City.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability. The checked bulletin identifies shelling in active northern, eastern and southern sectors rather than routine Kyiv office exposure. This is a conditional geographic assessment. Missile attack is separately scored; no claim of zero city incidents is made.

Treat any move toward a combat area as a change of scope. Review the operating footprint if official reporting places ground fires near Kyiv.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability.

A rapid deterioration brings ground fighting to the Kyiv office operating area or forces an unplanned crossing of a combat boundary.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability. Officially reported ground engagements remain in other named sectors. The reference posture involves no line-of-contact travel. A low likelihood score still combines with severe consequences; this conditional score is not a warning that Kyiv is currently a ground-combat zone.

Set relocation decision triggers and identify who can suspend office attendance if the ground situation changes.

An accident or attack-related loss of containment at a nuclear or radioactive-material facility creates protective-action requirements affecting the Kyiv office.

The IAEA documented a near-strike at a Kyiv nuclear research facility on 30 September and explicitly reported no release. The hazard is retained without assuming every nuclear-site disruption creates Kyiv contamination; dispersion and protective actions remain event-specific.

Assign one person to official radiation and emergency instructions; keep an indoor sheltering and staff-accountability procedure ready.

Unexploded ordnance remaining after an attack exposes staff entering or returning to an urban site.

The October 7 city removal establishes the hazard and an effective response. The score judges an ordinary office exposure, not area-wide mine contamination.

Keep staff outside cordons and away from debris; obtain competent-authority release before returning to an affected site.

A staff road movement enters a recently struck or uncleared urban area and encounters explosive remnants.

The relevant city case supports post-strike remnants; rural mine density and Kyiv-oblast contamination are not assigned to city roads.

Keep staff outside cordons and away from debris; obtain competent-authority release before returning to an affected site.

An undetonated munition or explosive remnant detonates after the initial strike while staff approach, assist nearby or re-enter a damaged site.

The 7 October Kyiv removal of a live missile warhead shows that dangerous explosive material can survive the initial strike. It does not document a secondary detonation. The score addresses subsequent civilian approach, with professional clearance outside the reference posture.

Keep staff outside cordons and away from debris. Require competent-authority release of an affected site before re-entry.

A recruited person damages an organisational vehicle or asset, or compromises staff information.

A dated Kyiv truck-arson allegation supports deployed capability. Reference-organisation targeting is not established; actors remain subject to active investigation and arrest.

Verify contractor and visitor access, maintain a staff check-in process and define who manages suspicious approaches or a missing employee.

A deliberately selected staff member or office is attacked outside a general aerial strike.

The arson case provides a relevant targeting mechanism, but no attack on a comparable international office is verified. Intent therefore remains a low prior.

Verify contractor and visitor access, maintain a staff check-in process and define who manages suspicious approaches or a missing employee.

A politically motivated improvised explosive device harms staff or blocks access near the office or a routinely visited city location.

Two dated Kyiv investigations establish an IED mechanism and attempted generator attack. Their targets differ from a civilian international office. Arrests and an interrupted plot constrain the score; no organisational targeting or citywide frequency is inferred.

Control visitor and contractor access, define suspicious-item reporting, and keep staff away from an unattended suspect object.

A staff member is unlawfully confined or taken hostage during a routine Kyiv City activity.

The 18 April Kyiv hostage case is a dated instance of local capability and severe consequences. It does not establish targeting of foreign workers, a kidnap-for-ransom pattern, or recurrence in October. Police rescue is relevant counterevidence.

Use a staff check-in and overdue-person process, retain police and consular contacts, and define who manages a suspected detention or abduction.

An armed offender takes organisational equipment, cash or supplies during a routine urban delivery or authorised site visit.

The June Kyiv contractor case confirms weapon-backed access abuse. The source concerns a home rather than office assets or cargo, so it is used as mechanism evidence only. No large cash movement or high-value logistics is assumed.

Verify contractors before entry, limit visible cash and equipment, and brief staff to prioritise personal safety during a robbery.

A staff member authorises a fraudulent payment or discloses sensitive financial information during work.

The Kyiv fraud investigation establishes organised financial deception; victim rates for resident organisations were not measured.

Provide safe journey options and confidential reporting, protect devices and accounts, and independently verify payment-detail changes.

A phishing or impersonation approach compromises staff credentials or a business transaction.

Online deception is documented; ransomware prevalence or a specific corporate breach is not inferred from the call-centre case.

Provide safe journey options and confidential reporting, protect devices and accounts, and independently verify payment-detail changes.

A staff member is assaulted during an ordinary commute, public activity or interpersonal dispute in Kyiv City.

A fatal access-dispute assault was reported by Kyiv Police on 17 October. It demonstrates consequences and local offending capability, not a representative rate or targeting of office staff. Security-guard exposure is not assumed for every employee.

Plan late travel and safe pickup points, provide a simple emergency contact process, and avoid requiring staff to intervene physically in disputes.

Personal or company devices, documents or other portable assets are stolen during routine work, travel or shelter use.

The 29 September police case covers theft in ordinary café, vehicle and shelter settings directly relevant to routine office activity. It supplies specific examples, not a population-normalised crime rate; recovery and detention are counterevidence.

Keep devices and documents secured during sheltering and travel; enable device locks and remote access revocation.

A staff member experiences sexual assault or harassment in work-related interactions or routine Kyiv travel.

The official 9 October police notice documents an alleged assault during a routine walk home. It supports a local civilian exposure pathway, not prevalence or a conclusion about workplace harassment frequency. This combined taxonomy entry requires individual support options and careful reporting.

Provide confidential reporting and rapid access to appropriate care, and offer safer journey arrangements where staff identify an exposure.

A local gathering or disorder blocks staff access or exposes a nearby office movement to confrontation.

The dated Teremky incident supports localised disorder. No citywide closure or systematic targeting of the reference posture is established.

Check specific local gatherings and access constraints; give staff an accessible reporting route and act on credible behaviour or threats.

A local protest obstructs a worksite approach or supplier access.

This is a bounded inference from a local dispute, not evidence of an active citywide blockade; confidence is low.

Check specific local gatherings and access constraints; give staff an accessible reporting route and act on credible behaviour or threats.

A dispute between ethnic, religious or other communities escalates into violence affecting staff or access to the office.

Council of Europe monitoring supports retaining bias-related violence as a standing exposure. No current Kyiv inter-communal mobilisation or attack on a comparable office is established. The rating is a low-confidence scenario judgement, not a claim of active community conflict.

Monitor relevant local gatherings without profiling communities, respond to specific credible threats, and keep alternative access arrangements.

A staff member is threatened, harassed or obstructed because of actual or perceived foreign nationality.

ECRI monitoring identifies hate-motivated conduct as an area requiring review; the cited sources do not establish a present Kyiv anti-foreigner pattern. The score is a precautionary, low-confidence judgement for international staffing and unverified local support, not a measured incidence estimate. Individual circumstances require a separate assessment.

Give international staff an accessible reporting route and local support contact; respond to specific behaviour and credible threats rather than generalising about communities.

An eligible national employee becomes unavailable for work through mobilisation or required administrative attendance.

The national regime is directly documented, but no specific employer enforcement case is cited. Intent and capability stay below the dated-case ceiling; staff eligibility and deferment are unknown.

Have qualified local counsel and HR verify staff availability, document validity and renewal dates before relying on travel or a critical role.

A compliance inspection or legally authorised search diverts management or temporarily restricts access to records or assets needed for the Kyiv office’s work.

Current employer compliance duties establish an inspection pathway. Search or temporary seizure is retained as a conditional consequence requiring qualified legal review, not an asserted current pattern against international offices. No comparable Kyiv office seizure rate is established.

Keep required records organised, identify qualified local counsel and define who receives officials and records any formal request.

A national or international employee is detained during a document or security check in Kyiv without adequate procedural safeguards, interrupting their availability and access to support.

The 2023 Kyiv oversight case and October 2026 reports elsewhere support a credible safeguard exposure. They do not establish a current pattern against ordinary international offices in Kyiv. Intent and capability remain at or below 3; lawful summons or mobilisation alone are not classified as arbitrary detention.

Keep current identity and applicable registration records accessible; appoint a check-in escalation contact and identify qualified legal and consular assistance.

A staff member based in Kyiv cannot complete a planned departure, return or stay because their citizenship, age, documentation or residence basis does not meet applicable requirements.

Border eligibility is legally conditional and foreign residence requires a valid basis. The 2025 age-specific exception prevents a blanket assertion that every male staff member is prohibited from leaving. The score concerns staffing and contingency-movement consequences; the reference office’s routine work remains within Kyiv.

Check citizenship, age, passport, residence and applicable exit grounds for each traveller before booking or relying on relocation; keep a remote handover option.

A foreign employee or the reference organisation loses a permit or registration basis required for lawful residence or work in Kyiv, interrupting an otherwise routine engagement.

DMS publishes current documentation rules and a dated case of cancellation after loss of the qualifying basis. This demonstrates conditional permissions rather than targeted restrictions against international offices. Press/frontline accreditation is not assumed for this office posture; residence and work permissions provide the applicable pathway.

Keep a renewal calendar and named owner for residence, employment and organisational permissions; recheck permissions whenever the underlying employment or activity changes.

A routine staff road journey within Kyiv is involved in a collision.

Two dated city incidents support potentially severe consequences; no exposure-normalised collision rate or M threshold is available.

Confirm timing, documents, a suitable route and an alternative crossing or connection for each essential journey.

A staff arrival, departure or urban connection is delayed by strike-related disruption or operating restrictions.

Official notices document delays on selected Kyiv suburban and regional routes on every day of 11–17 October, including a published delay of 5 h 30 on 14 October. Existing city transport evidence establishes additional interruption and connection constraints. This supports planning for delayed arrivals and missed connections; the selected notices do not measure whole-network punctuality or the likelihood of disruption to a particular booked journey. No routine maritime movement is assumed.

Confirm timing, documents, a suitable route and an alternative crossing or connection for each essential journey.

A routine planned movement falls within the applicable city curfew without an authorised arrangement.

The dated municipal notice is a documented restriction; its existence is observed, while likelihood of disruption to this reference office remains judged.

Confirm timing, documents, a suitable route and an alternative crossing or connection for each essential journey.

An essential urban road or Dnipro crossing on a staff journey is closed after a strike, hazard response or emergency repair, preventing planned access to work or support.

The 4 October attack and 6 October repair provide a concrete Kyiv bridge case. Restoration is retained: the Northern Bridge is not described as currently closed. The assessment is about dependence on constrained crossings and short-notice closures, not congestion from ordinary roadworks alone.

Identify a second suitable crossing and work location on each bank; check current city traffic notices before essential trips and avoid relying on a single crossing.

An employee’s routine road movement in Kyiv is interrupted by an authorised check or temporary restricted-access decision because their documents or the journey’s purpose cannot be verified.

MoD describes identity and military-registration checks and the legal equivalence of valid electronic/paper records. The evidence establishes the mechanism; no current Kyiv checkpoint-delay distribution is available. This entry scores movement denial, while extended loss of liberty and mobilisation belong in C6.

Carry the documents applicable to the individual and keep an accessible readable backup; confirm any special-access permission and allow time for lawful checks.

Loss of grid supply at the reference office interrupts work beyond basic UPS endurance.

Multiple dated Kyiv outages and suspended schedules demonstrate attack effects and grid reach. A grid-dependent office without a tested generator cannot absorb repeated loss of supply.

Test critical loads and recovery, verify independent communications and replenishment options, and set a clear trigger for changing workspace.

Power or infrastructure disruption removes usable water or heat at the office long enough to change working arrangements.

Water restoration on October 12 is retained as counterevidence. Upper-floor pumping remains power-dependent; a current citywide loss of water or heat is not claimed.

Test critical loads and recovery, verify independent communications and replenishment options, and set a clear trigger for changing workspace.

Power-related loss of connectivity prevents essential work or staff accountability.

Backup supply for communications is an official resilience priority. No observed Kyiv internet-outage duration was collected; the score is a dependence-based judgement.

Test critical loads and recovery, verify independent communications and replenishment options, and set a clear trigger for changing workspace.

Attack damage, electricity loss or distribution disruption prevents timely replenishment of vehicle fuel, backup-power fuel or an essential office supply in Kyiv.

A September fuel-reservoir strike demonstrates local supply-chain exposure; October electricity restrictions add distribution dependence. These are not evidence of a current citywide fuel shortage. Generator ownership is not assumed: the event also covers vehicle fuel and contracted backup/workspace dependencies.

Confirm two practical supply options, realistic replenishment lead time and safe storage limits; check fuel availability before essential journeys and backup-power commitments.

Malicious code or account compromise disables the office’s essential systems or data in Kyiv, interrupting delivery and recovery.

CERT-UA’s 6 October bulletin identifies an active national compromise campaign and more than 100 affected websites in September. That measured campaign scale is not an office-compromise probability. Basic IT and UPS do not establish tested restoration; fraud loss is kept distinct in C4.

Use multifactor authentication, patch exposed systems and test recovery from an isolated backup; brief staff not to run commands from unexpected verification prompts.

A seriously injured employee cannot reach suitable trauma care in the time their injury requires.

National health-system strain and alert protocols create a credible planning exposure. Citywide ambulance failure is not documented; the October bus response is counterevidence that care remains available.

Confirm suitable care, referral and transport arrangements; maintain role cover and practical workload, rest and sickness arrangements.

Repeated alert disruption and sustained stress reduce staff availability or capacity to work.

The completed Kyiv City record contains 49.4 hours of air-threat warnings during 11–17 October. Together with WHO findings, this supports reviewing repeated disruption and staff welfare. Warning hours are exposure context: they do not measure employee fatigue, diagnosis, absence or attrition, and no measured likelihood conversion has been applied.

Confirm suitable care, referral and transport arrangements; maintain role cover and practical workload, rest and sickness arrangements.

A seriously ill or injured Kyiv employee who requires care elsewhere cannot secure timely clinical acceptance, suitable transport or cross-border transfer.

WHO documents a functioning but multi-stage evacuation pathway, including stabilisation and movement through Lviv. This is counterevidence to a claim that evacuation is impossible. The reference organisation has no pre-validated evacuation capability; standard commercial insurance does not establish provider acceptance or coverage. No local failure rate is claimed.

Pre-agree clinical referral, payment and transport arrangements with the insurer or assistance provider, including eligibility, acceptance and overland transfer; retain a local hospital plan.

Concurrent incidents, unsafe access or disrupted communications delay suitable fire, rescue or medical assistance to the reference office in Kyiv.

Kyiv reports substantial rescue staffing, active response and expanded left-bank coverage, alongside repeated attack-response demands. Those measures are mitigation counterevidence. Cumulative callouts are not response-time data, and the assessment does not claim citywide service collapse or a measured late-response rate.

Confirm the office’s exact address and access instructions, emergency contact routes and basic first-response capability; keep a second communication method for summoning help.

Communicable respiratory illness spreads among the Kyiv office’s staff or contacts, creating clustered absence or severe illness that disrupts work.

City surveillance recorded 7,070 cases for 5–11 October, a 5.6% increase, while incidence remained 56.2% below the average intensity level. This supports seasonal transmission exposure, not a declared epidemic or an office attack rate. Recorded adult cases and hospitalisations are measurable context; likelihood remains judged without a calibrated exposure conversion.

Enable symptomatic staff to stay away from shared work, review ventilation and maintain role cover; direct individual vaccination or clinical questions to a qualified clinician.

Strong wind or storm conditions create falling-debris hazards or interrupt the office’s urban access and routine activity in Kyiv.

The city relayed a yellow warning for forecast gusts of 15–20 m/s on 9 October; it is an expired forecast, not an observed wind measurement. The 17 October forecast was milder. These dated warnings support a LOW judged storm exposure, not a claim of a continuing storm or measured storm damage. Fog-related collision risk remains in C7.1.

Check official weather warnings before exposure to trees, overhead equipment or outdoor work; adjust movement when a warning or local damage affects the route.

Outdoor temperature itself makes ordinary office access or work unsafe in the reference period.

The October 17 daytime forecast is mild; no extreme-temperature event is verified. Heating supply failure is scored in C8 rather than duplicated here.

Use local air-quality and weather notices, check drainage and building access, and change outdoor work or workspace when conditions require it.

Ground shaking affects the Kyiv office building or access route, causing unsafe occupancy, falling objects or interruption while the structure is checked.

National geophysical evidence places active southern sources and distant Vrancea influence and stresses monitoring and prediction limits. Kyiv’s period exposure is judged low for this office posture, not zero. No site-specific ground study, building inspection or numerical return-period model was obtained, so the low score is not a structural-safety certificate.

Keep heavy items secured, maintain clear exits and verify the building’s emergency procedure; seek a qualified structural check following felt shaking or visible damage.

Intense rainfall or local water accumulation floods the Kyiv office’s entrance, basement equipment or usual access route.

The city identifies recurrent pluvial flooding in Bortnychi and ongoing drainage preparedness elsewhere. Vulnerability is therefore location-specific; a planned drainage project is not assumed complete. No citywide river-flood emergency is established in this period. Upstream-dam attack is not silently treated as ordinary rainfall flooding.

Check whether access or equipment sits below ground or in a known low point; keep critical equipment above flood-prone levels and identify a dry alternative entrance or workspace.

Smoke or hazardous material from a nearby fire or industrial release reaches the Kyiv office or routine route, requiring reduced outdoor exposure or a temporary change of workspace.

The city’s 30 September notice identifies smoke-related deterioration in Podilskyi and Sviatoshynskyi, with live monitoring available. This is recent contextual evidence, not a claim of continuing pollution on 18 October. Worker dose and site filtration performance are unmeasured. Direct strike injury remains in C1; this entry concerns the secondary environmental pathway.

Check the city’s live air-quality service and local official notices before outdoor work; follow local instructions, manage air intake and use an unaffected workspace when conditions require it.