Suro Senen
In the modern era of hyper-connectivity, the traditional definition of "duty of care"—the legal and moral obligation of an organization to ensure the safety and well-being of its employees—is undergoing a seismic shift. As the boundaries between peace and localized conflict blur, the expectation for corporate agility has evolved from periodic check-ins to near-real-time protective intervention.
For decades, duty of care was viewed through the lens of static policy: pre-departure briefings, basic insurance coverage, and annual security audits. Today, that framework is insufficient. With nearly five billion smartphone users globally, the ability to track, communicate with, and warn a traveler is no longer a luxury—it is a baseline expectation. When the technology exists to see a threat and communicate that knowledge to an employee, the law and public expectation increasingly view that threat as "foreseeable." Consequently, foreseeability creates an ironclad obligation to act.
The Evolution of Risk: A Chronology of Modern Volatility
The threat landscape has shifted from predictable, long-term geopolitical tensions to high-order, "no-notice" violence. Understanding this transition is essential for any organization operating internationally.
- The Pre-Digital Era (Pre-2010): Risk management was reactive. Organizations relied on local news reports and embassy circulars. If a crisis occurred, response times were measured in hours or days.
- The Connectivity Pivot (2010–2020): The rise of ubiquitous mobile data and messaging platforms (WhatsApp, Slack) enabled the first wave of real-time communication. Situational awareness tools began to integrate GPS tracking, allowing companies to see their travelers’ proximity to known incidents.
- The "No-Notice" Era (2020–Present): We are currently in an environment where spontaneous violence—such as the rapid escalation of civil unrest during the 2025 Nepal protests or the sudden shifts in Middle Eastern nation-state conflicts—can erupt without warning. Unlike regional instability that builds over weeks, these events are immediate, requiring an organization to shift from a "monitoring" posture to an "active mitigation" posture in minutes, not hours.
Supporting Data: The Technology-Obligation Nexus
The convergence of global mobile phone coverage and advanced geospatial intelligence has created a "transparency trap" for corporations. According to recent industry security reports, over 80% of multinational organizations now possess the technical capability to locate their traveling workforce in real time.
When an organization possesses the technological infrastructure to identify a threat—such as a protest near a government building or an attack on critical infrastructure—and simultaneously holds the capacity to reach the affected employee via a smartphone, the legal standard of "reasonability" changes.
If an organization has the data, the communications suite, and the personnel to warn an employee, claiming that an event was an "act of God" or "force majeure" is becoming an increasingly difficult defense. The existence of AI-driven risk assessment tools means that even mid-sized companies can now access high-fidelity intelligence that was once the domain of state actors. Therefore, the "Reasonability Standard" is no longer about what a company did do; it is about what a company had the capability to do and failed to execute.
The Human-Machine Synthesis: Why Algorithms Aren’t Enough
While technology facilitates speed, it lacks the nuance required for high-stakes crisis management. The "noise" of modern information—where social media rumors often outpace verified intelligence—can lead to paralysis by analysis.
The Role of Human Oversight
Technology can provide the "what" and the "where," but human instinct provides the "so what." Decision-makers must be able to:
- Contextualize: Determine if a protest is a local anomaly or a precursor to a wider uprising.
- Verify: Filter out misinformation that could lead to unnecessary or dangerous traveler movements.
- Exercise Judgment: Know when to override automated alerts that might be misleading and when to authorize emergency extraction protocols.
Human expertise, honed by training and field experience, remains the final gatekeeper of safety. Relying solely on AI prompts or static "shelter-in-place" templates is a recipe for failure in an active, fluid crisis.
Official Responses and Industry Standards
Legal experts and risk management consultants are currently watching how courts interpret "duty of care" in the wake of recent global conflicts. While no single landmark statute has yet codified a "real-time response" mandate, the trend in civil litigation is clear.
In recent depositions following security-related incidents, plaintiffs’ attorneys have begun focusing on the "Time-to-Inform" metric. They are asking: When did the organization know? When did the technology notify them? And how many minutes passed before the traveler was contacted?
Organizations that have attempted to shift liability to technology platforms—arguing that their automated alert system "glitched" or that they were waiting for "official confirmation"—have found little sympathy from juries. The prevailing sentiment is that if a company is large enough to operate in high-risk zones, it is large enough to maintain a human-in-the-loop security desk capable of verifying threats and acting on them.
Implications for Corporate Strategy
The transition to a proactive, real-time duty of care model requires three fundamental pillars:
1. Moving Beyond "Stock" Guidance
Generic messages like "Stand Fast" are no longer sufficient. Travelers expect, and are increasingly owed, actionable intelligence. Organizations must provide specific instructions tailored to the traveler’s exact location, the nature of the threat, and the nearest safe haven.
2. The Integration of Intelligence and Communication
Situational awareness must be integrated into the traveler’s daily experience. If the organization can see the threat, the traveler must be able to see the guidance. This requires seamless integration between threat-monitoring software and internal communication channels.
3. Defensible Decision-Making
Organizations must document their processes. In the event of a crisis, the ability to demonstrate a clear, logical, and human-led decision-making process will be the difference between a minor operational failure and a major legal liability. Defending inaction by blaming a "lack of information" is no longer viable when the tools for information gathering are cheap, abundant, and universally available.
Conclusion: Heeding the Poet’s Warning
The Austrian poet Rainer Maria Rilke famously wrote: "Be ahead of all parting, as if it had already happened." In the context of global security, this is the ultimate mantra for the modern era.
We are moving toward a future where the standard of care will be judged not by the policies written in an employee handbook, but by the responsiveness of the organization during the first five minutes of a crisis. As the threat landscape continues to evolve at an exponential rate, those organizations that view duty of care as a static, check-the-box exercise will find themselves exposed.
Conversely, those that invest in the synergy of advanced situational awareness and human judgment will not only protect their most valuable asset—their people—but will also build a resilient foundation capable of weathering the inevitable volatility of the coming decade. The technology to protect our people exists; the only question remaining is whether leadership will muster the will to integrate it fully into the corporate ethos. The era of "foreseeability" is here. It is time to act accordingly.
Raul Delapena Setiawan
Asro
