Guide

Could you actually help a member of staff at 2am, in a country they don't know?

Most organisations have a travel policy. Far fewer have a travel risk management programme — and the difference only shows up when something actually goes wrong.

Sending someone abroad for work — a site visit, a conference, a new market — creates a legal and moral duty of care: a responsibility to take reasonable steps to protect their safety and wellbeing for as long as they're travelling on your behalf.

That duty doesn't stop at booking a flight and sending a destination briefing PDF. It means being able to show, if something happens, that you assessed the risk properly, prepared the traveller, and had a plan to respond.

The lifecycle of a trip

Three stages, three different failure points

Most gaps in travel risk management sit in one of these three windows.

Before

Plan and prepare

  • Destination and route risk assessment
  • Traveller-specific factors — health, experience, profile, seniority
  • Accommodation and transport vetting
  • Insurance that actually matches the risk, not a default policy
  • A destination and cultural briefing, not just a packing list
During

Monitor and support

  • Agreed check-in points, proportionate to risk level
  • Real-time monitoring against changing travel advice
  • A 24/7 contact point the traveller actually knows how to reach
  • Local support arranged in advance, not improvised on the day
If it goes wrong

Respond

  • Pre-agreed triggers for when to escalate
  • A clear crisis communication chain — who's told, in what order
  • Medical and evacuation options identified before they're needed
  • Family liaison considered, not just handled on the fly
The benchmark

Where ISO 31030 fits

ISO 31030:2021 is the international guidance standard for travel risk management. It's not a certifiable standard — there's no audit or badge — but it gives organisations a recognised structure for what "reasonable" looks like when duty of care is tested.

In practice, that means a documented programme covering:

  • A travel risk policy, with clear ownership
  • Risk assessment scaled to the destination and the traveller
  • Traveller preparation and briefing
  • Monitoring and support while travelling
  • Incident and crisis response capability
  • Regular review as risks and destinations change

The value isn't the paperwork — it's that when something goes wrong, you can show you took it seriously beforehand, not just after.

Who needs this

Not just high-risk destinations

Risk isn't only about the country on the map — it's about the traveller, the role, and what they're going there to do.

Staff travelling to unfamiliar locations High-risk or hostile destinations Executives and senior leaders Site visits and field work Conferences and events abroad Lone or first-time travellers
A travel policy tells people what to do. A travel risk programme is what happens when they can't.

Most organisations only discover the gap between the two after an incident, when it's too late to close it cheaply. The organisations that get this right treat travel risk as an ongoing responsibility, not a one-off document signed off before the first overseas trip.

Sending someone abroad?

Let's make sure duty of care means something

Fortitude Security provides travel risk assessments, destination briefings and planning support for staff travelling to unfamiliar or high-risk locations — built around what your organisation would actually need to do if something went wrong.

Talk to us about your next trip →

This page is general guidance on travel risk management, not legal advice on your organisation's specific duty of care obligations. For advice specific to your circumstances, speak to a qualified adviser.