Know your risks.
Decide what comes next.

A missile or long-range drone damages an occupied office or interrupts its work in Kyiv City.

Long-range attack remains the dominant direct-harm pathway for the stated Kyiv office posture. The Air Force identified Kyiv as the main direction of the 22 October attack; the UN’s September casualty figures remain monthly context, not an October count. A 27 October metro-operator notice reported attack-related damage to above-ground infrastructure and changed train operations after an overnight attack. This dated disruption supports checking current bridge and metro notices before cross-river journeys; it does not establish that the reference office was targeted or that a particular site or route is cleared.

Identify usable shelter and its entry route; set clear stop-work and relocation triggers, and keep staff away from fresh strike sites.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability.

A glide bomb, FPV or short-range UAV used from a frontline operating area directly harms staff during an ordinary Kyiv City workday.

The October 29 report documents frontline aerial munitions elsewhere and no detected northern offensive grouping. Retain this conditional Kyiv office scenario. It does not establish local deployment or frontline distance. Long-range strikes remain in C1.1.

Keep ordinary office travel within the assessed urban area. Require a fresh assessment before any frontline assignment.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability.

Conventional frontline artillery or mortar fire reaches staff or the office inside Kyiv City.

The October 29 report locates artillery fire in Sumy border communities and reports no detected offensive grouping in Volyn or Polissia. Retain the conditional Kyiv scenario with low confidence. This is regional context, not a weapons-location survey or measured zero of city incidents.

Treat any move toward a combat area as a change of scope. Review the operating footprint if official reporting places ground fires near Kyiv.

This score is a conditional scenario judgement. It does not indicate current frontline fighting in Kyiv. Likelihood is an ordinal input, not a percentage probability.

A rapid deterioration brings ground fighting to the Kyiv office operating area or forces an unplanned crossing of a combat boundary.

The October 29 report identifies ground engagements in other named sectors and no detected offensive grouping in Volyn or Polissia. Retain the office relocation contingency. This conditional judgment does not clear travel or rule out future northern escalation.

Set relocation decision triggers and identify who can suspend office attendance if the ground situation changes.

An accident or attack-related loss of containment at a nuclear or radioactive-material facility creates protective-action requirements affecting the Kyiv office.

According to the nuclear regulator, a September 30 strike hit the Kyiv research institute premises. The reactor and safety systems were undamaged and radiation remained at natural background. The reactor had been shut down and its core unloaded since 2022. This dated account does not establish a release or current Kyiv contamination. Retain the conditional protective-action plan.

Assign one person to official radiation and emergency instructions; keep an indoor sheltering and staff-accountability procedure ready.

Unexploded ordnance remaining after an attack exposes staff entering or returning to an urban site.

Police documented a live missile warhead among homes in Darnytskyi district on 7 October and its subsequent specialist removal. This dated case supports a post-strike site-entry hazard. It does not establish contamination at the reference office or a new weekly incident rate; the provisional score is retained.

Keep staff outside cordons and away from debris; obtain competent-authority release before returning to an affected site.

A staff road movement enters a recently struck or uncleared urban area and encounters explosive remnants.

The 7 October Darnytskyi removal supports keeping staff away from fresh strike debris and cordoned approaches. It provides no route-specific mine survey or frequency for Kyiv roads. The retained provisional score addresses entry into a recently struck, uncleared location.

Keep staff outside cordons and away from debris; obtain competent-authority release before returning to an affected site.

An undetonated munition or explosive remnant detonates after the initial strike while staff approach, assist nearby or re-enter a damaged site.

The 7 October removal shows that a missile warhead can survive the initial strike. The case did not involve a secondary detonation. Subsequent civilian approach remains the assessed scenario; the retained score is a conditional judgment, with clearance reserved for specialists.

Keep staff outside cordons and away from debris. Require competent-authority release of an affected site before re-entry.

A recruited person damages an organisational vehicle or asset, or compromises staff information.

A dated Kyiv truck-arson allegation supports deployed capability. Reference-organisation targeting is not established; actors remain subject to active investigation and arrest.

Verify contractor and visitor access, maintain a staff check-in process and define who manages suspicious approaches or a missing employee.

A deliberately selected staff member or office is attacked outside a general aerial strike.

The 15 October investigation describes vehicle arson in Kyiv and Bila Tserkva. It supports a deliberate-targeting mechanism involving defense or volunteer-linked vehicles, without establishing an attack on a comparable international office. The low intent prior and provisional score are retained.

Verify contractor and visitor access, maintain a staff check-in process and define who manages suspicious approaches or a missing employee.

A politically motivated improvised explosive device harms staff or blocks access near the office or a routinely visited city location.

The 11 February vehicle bombing and the plot reported on 22 June establish historical IED mechanisms involving Kyiv institutional targets. Arrests and interdiction are also documented. These cases do not establish current targeting of an international civilian office or a weekly frequency; the conditional score is retained.

Control visitor and contractor access, define suspicious-item reporting, and keep staff away from an unattended suspect object.

A staff member is unlawfully confined or taken hostage during a routine Kyiv City activity.

The 18 April Kyiv hostage case is a dated instance of local capability and severe consequences. It does not establish targeting of foreign workers, a kidnap-for-ransom pattern, or recurrence in October. Police rescue is relevant counterevidence.

Use a staff check-in and overdue-person process, retain police and consular contacts, and define who manages a suspected detention or abduction.

An armed offender takes organisational equipment, cash or supplies during a routine urban delivery or authorised site visit.

The June Kyiv contractor case confirms weapon-backed access abuse. The source concerns a home rather than office assets or cargo, so it is used as mechanism evidence only. No large cash movement or high-value logistics is assumed.

Verify contractors before entry, limit visible cash and equipment, and brief staff to prioritise personal safety during a robbery.

A staff member authorises a fraudulent payment or discloses sensitive financial information during work.

The Kyiv fraud investigation establishes organised financial deception; victim rates for resident organisations were not measured.

Provide safe journey options and confidential reporting, protect devices and accounts, and independently verify payment-detail changes.

A phishing or impersonation approach compromises staff credentials or a business transaction.

Online deception is documented; ransomware prevalence or a specific corporate breach is not inferred from the call-centre case.

Provide safe journey options and confidential reporting, protect devices and accounts, and independently verify payment-detail changes.

A staff member is assaulted during an ordinary commute, public activity or interpersonal dispute in Kyiv City.

A fatal access-dispute assault was reported by Kyiv Police on 17 October. It demonstrates consequences and local offending capability, not a representative rate or targeting of office staff. Security-guard exposure is not assumed for every employee.

Plan late travel and safe pickup points, provide a simple emergency contact process, and avoid requiring staff to intervene physically in disputes.

Personal or company devices, documents or other portable assets are stolen during routine work, travel or shelter use.

The 29 September police case covers theft in ordinary café, vehicle and shelter settings directly relevant to routine office activity. It supplies specific examples, not a population-normalised crime rate; recovery and detention are counterevidence.

Keep devices and documents secured during sheltering and travel; enable device locks and remote access revocation.

A staff member experiences sexual assault or harassment in work-related interactions or routine Kyiv travel.

The official 9 October police notice documents an alleged assault during a routine walk home. It supports a local civilian exposure pathway, not prevalence or a conclusion about workplace harassment frequency. This combined taxonomy entry requires individual support options and careful reporting.

Provide confidential reporting and rapid access to appropriate care, and offer safer journey arrangements where staff identify an exposure.

A local gathering or disorder blocks staff access or exposes a nearby office movement to confrontation.

The dated Teremky incident supports localised disorder. No citywide closure or systematic targeting of the reference posture is established.

Check specific local gatherings and access constraints; give staff an accessible reporting route and act on credible behaviour or threats.

A local protest obstructs a worksite approach or supplier access.

This is a bounded inference from a local dispute, not evidence of an active citywide blockade; confidence is low.

Check specific local gatherings and access constraints; give staff an accessible reporting route and act on credible behaviour or threats.

A dispute between ethnic, religious or other communities escalates into violence affecting staff or access to the office.

Council of Europe monitoring supports retaining bias-related violence as a standing exposure. No current Kyiv inter-communal mobilisation or attack on a comparable office is established. The rating is a low-confidence scenario judgement, not a claim of active community conflict.

Monitor relevant local gatherings without profiling communities, respond to specific credible threats, and keep alternative access arrangements.

A staff member is threatened, harassed or obstructed because of actual or perceived foreign nationality.

FCDO guidance notes that some racially motivated incidents against foreigners occurred before the full-scale invasion, but it establishes no current Kyiv pattern. Retain this only as a low-confidence precautionary scenario for international staffing, not as a measured or present anti-foreigner trend.

Give international staff an accessible reporting route and local support contact; respond to specific behaviour and credible threats rather than generalising about communities.

An eligible national employee becomes unavailable for work through mobilisation or required administrative attendance.

MoD guidance supports employer record-keeping, notification and responsibility duties, while its standing framework distinguishes foreign nationals from Ukrainian citizens subject to military duty. Plan staffing cover and HR compliance; neither source establishes an employee's eligibility, mobilisation incidence or an enforcement case.

Have qualified local counsel and HR verify staff availability, document validity and renewal dates before relying on travel or a critical role.

A compliance inspection or legally authorised search diverts management or temporarily restricts access to records or assets needed for the Kyiv office’s work.

MoD's current employer guidance establishes record-keeping, notification and personal-responsibility duties. That supports a conditional compliance-review planning pathway only; it does not document a Kyiv office inspection, search or seizure pattern, and those consequences remain hypothetical pending a specific legal basis or case.

Keep required records organised, identify qualified local counsel and define who receives officials and records any formal request.

A national or international employee is detained during a document or security check in Kyiv without adequate procedural safeguards, interrupting their availability and access to support.

The 2023 Kyiv oversight case and October 2026 reports elsewhere support a credible safeguard exposure. They do not establish a current pattern against ordinary international offices in Kyiv. Intent and capability remain at or below 3; lawful summons or mobilisation alone are not classified as arbitrary detention.

Keep current identity and applicable registration records accessible; appoint a check-in escalation contact and identify qualified legal and consular assistance.

A staff member based in Kyiv cannot complete a planned departure, return or stay because their citizenship, age, documentation or residence basis does not meet applicable requirements.

Border eligibility remains individual and document-dependent. The Ukrainian government's stated 18–22 exception, subject to passport and military-registration documents and specified official-position exceptions, rules out a blanket restriction covering every male employee. Verify each traveller's citizenship, age, documents and applicable exceptions; this is not individual legal clearance.

Check citizenship, age, passport, residence and applicable exit grounds for each traveller before booking or relying on relocation; keep a remote handover option.

A foreign employee or the reference organisation loses a permit or registration basis required for lawful residence or work in Kyiv, interrupting an otherwise routine engagement.

DMS guidance states that specified temporary residence permits had to be exchanged between 7 May and 4 August 2026. A reported case outside Kyiv illustrates consequences after a specific residence basis was cancelled and a return decision was not followed. These sources support individual permit-compliance checks, not targeted revocation against Kyiv offices.

Keep a renewal calendar and named owner for residence, employment and organisational permissions; recheck permissions whenever the underlying employment or activity changes.

A routine staff road journey within Kyiv is involved in a collision.

The 2 October fatal pedestrian collision and 5 October two-minibus collision are dated Kyiv examples of potentially severe road consequences. They provide no exposure-normalized collision rate or evidence of a new weekly increase. The provisional score is retained; journey controls remain the practical decision.

Confirm timing, documents, a suitable route and an alternative crossing or connection for each essential journey.

An air-threat suspension or transport-infrastructure disruption interrupts an essential staff arrival, departure or urban connection in Kyiv.

Kyiv City reported a temporary Kyiv City Express suspension during heightened air threat on 25 October. After the 27 October Southern Bridge strike, the city reported on 28 October that the Osokorky–Chervonyi Khutir metro segment had resumed after priority cable work while other restoration and inspection continued. On 29 October, three buses were rerouted because of a separate Podilskyi Bridge closure. These dated examples support flexible, route-specific planning, not a continuing rail suspension or citywide transit unavailability.

Confirm timing, documents, a suitable route and an alternative crossing or connection for each essential journey.

A routine planned movement falls within the applicable city curfew without an authorised arrangement.

The dated municipal notice is a documented restriction; its existence is observed, while likelihood of disruption to this reference office remains judged.

Confirm timing, documents, a suitable route and an alternative crossing or connection for each essential journey.

A strike-related restriction or other bridge closure interrupts essential planned movement between Kyiv's banks or access to a required crossing.

The 27 October strike damaged Southern Bridge road, metro and utility infrastructure; on 28 October the city reported partial metro restoration while other work and structural assessment continued. Separately, on 29 October buses 110, 111 and 112 were routed via the Northern Bridge because of a Podilskyi Bridge closure. These examples support checking the specific crossing and approach before essential staff or cargo movements. They do not establish that all crossings are closed or provide live route clearance.

Check current official crossing, transit and traffic notices before essential staff or cargo movements; identify a suitable alternative and allow for detours. A public notice is not clearance for a particular vehicle, itinerary or delivery.

An employee’s routine road movement in Kyiv is interrupted by an authorised check or temporary restricted-access decision because their documents or the journey’s purpose cannot be verified.

The 31 July 2024 document explanation and 22 September 2026 employer guidance establish standing documentation and checking mechanisms. They do not measure current Kyiv checkpoint delays or establish a new access restriction. The low-confidence score remains a judgment about administrative movement interruption; individual document validity requires a separate check.

Carry the documents applicable to the individual and keep an accessible readable backup; confirm any special-access permission and allow time for lawful checks.

Loss of grid supply at the reference office interrupts work beyond basic UPS endurance.

A 24 October DTEK notice documented emergency cuts in parts of Holosiivskyi and Solomianskyi districts and later reported that the emergency cuts were cancelled. Earlier October operator and municipal notices also document attack-related outages. These reports sustain grid-dependence exposure but do not establish outage duration or loss of supply at the reference office.

Test critical loads and recovery, verify independent communications and replenishment options, and set a clear trigger for changing workspace.

Power or infrastructure disruption removes usable water or heat at the office long enough to change working arrangements.

A Kyivvodokanal response reported on October 27 said facilities were operating normally at that time and approximately half had backup power; the utility supplied no autonomous operating duration or districts guaranteed water during a blackout. This post-period report sharpens the power-dependence pathway but is not an October 19–25 water failure. Upper-floor pumping remains power-dependent; site conditions are not established.

Test critical loads and recovery, verify independent communications and replenishment options, and set a clear trigger for changing workspace.

Power-related loss of connectivity prevents essential work or staff accountability.

Backup power for communications remains an official resilience priority, and a Kyiv internet provider reported a DDoS incident on 22 October with short-lived effects for some subscribers that it said were neutralized. No measured Kyiv internet-outage duration or effect on the reference organization is established; this remains a dependence-based judgment.

Test critical loads and recovery, verify independent communications and replenishment options, and set a clear trigger for changing workspace.

Attack damage, electricity loss or distribution disruption prevents timely replenishment of vehicle fuel, backup-power fuel or an essential office supply in Kyiv.

A September fuel-reservoir strike demonstrates local supply-chain exposure; October electricity restrictions add distribution dependence. These are not evidence of a current citywide fuel shortage. Generator ownership is not assumed: the event also covers vehicle fuel and contracted backup/workspace dependencies.

Confirm two practical supply options, realistic replenishment lead time and safe storage limits; check fuel availability before essential journeys and backup-power commitments.

Malicious code or account compromise disables the office’s essential systems or data in Kyiv, interrupting delivery and recovery.

CERT-UA’s 6 October bulletin identifies an active national compromise campaign and more than 100 affected websites in September. That measured campaign scale is not an office-compromise probability. Basic IT and UPS do not establish tested restoration; fraud loss is kept distinct in C4.

Use multifactor authentication, patch exposed systems and test recovery from an isolated backup; brief staff not to run commands from unexpected verification prompts.

A seriously injured employee cannot reach suitable trauma care in the time their injury requires.

National health-system strain and alert protocols create a credible planning exposure. Citywide ambulance failure is not documented; the October bus response is counterevidence that care remains available.

Confirm suitable care, referral and transport arrangements; maintain role cover and practical workload, rest and sickness arrangements.

Repeated alert disruption and sustained stress reduce staff availability or capacity to work.

The completed Kyiv City record contains 49.4 hours of air-threat warnings during 11–17 October. Together with WHO findings, this supports reviewing repeated disruption and staff welfare. Warning hours are exposure context: they do not measure employee fatigue, diagnosis, absence or attrition, and no measured likelihood conversion has been applied.

Confirm suitable care, referral and transport arrangements; maintain role cover and practical workload, rest and sickness arrangements.

A seriously ill or injured Kyiv employee who requires care elsewhere cannot secure timely clinical acceptance, suitable transport or cross-border transfer.

WHO documents a functioning but multi-stage evacuation pathway, including stabilisation and movement through Lviv. This is counterevidence to a claim that evacuation is impossible. The reference organisation has no pre-validated evacuation capability; standard commercial insurance does not establish provider acceptance or coverage. No local failure rate is claimed.

Pre-agree clinical referral, payment and transport arrangements with the insurer or assistance provider, including eligibility, acceptance and overland transfer; retain a local hospital plan.

Concurrent incidents, unsafe access or disrupted communications delay suitable fire, rescue or medical assistance to the reference office in Kyiv.

Kyiv reports substantial rescue staffing, active response and expanded left-bank coverage, alongside repeated attack-response demands. Those measures are mitigation counterevidence. Cumulative callouts are not response-time data, and the assessment does not claim citywide service collapse or a measured late-response rate.

Confirm the office’s exact address and access instructions, emergency contact routes and basic first-response capability; keep a second communication method for summoning help.

Communicable respiratory illness spreads among the Kyiv office’s staff or contacts, creating clustered absence or severe illness that disrupts work.

City surveillance recorded 7,070 cases for 5–11 October, a 5.6% increase, while incidence remained 56.2% below the average intensity level. This supports seasonal transmission exposure, not a declared epidemic or an office attack rate. Recorded adult cases and hospitalisations are measurable context; likelihood remains judged without a calibrated exposure conversion.

Enable symptomatic staff to stay away from shared work, review ventilation and maintain role cover; direct individual vaccination or clinical questions to a qualified clinician.

Strong wind or storm conditions create falling-debris hazards or interrupt the office’s urban access and routine activity in Kyiv.

The city relayed a yellow warning for forecast gusts of 15–20 m/s on 9 October; it is an expired forecast, not an observed wind measurement. The 17 October forecast was milder. These dated warnings support a LOW judged storm exposure, not a claim of a continuing storm or measured storm damage. Fog-related collision risk remains in C7.1.

Check official weather warnings before exposure to trees, overhead equipment or outdoor work; adjust movement when a warning or local damage affects the route.

Outdoor temperature itself makes ordinary office access or work unsafe in the reference period.

The October 17 daytime forecast is mild; no extreme-temperature event is verified. Heating supply failure is scored in C8 rather than duplicated here.

Use local air-quality and weather notices, check drainage and building access, and change outdoor work or workspace when conditions require it.

Ground shaking affects the Kyiv office building or access route, causing unsafe occupancy, falling objects or interruption while the structure is checked.

National geophysical evidence places active southern sources and distant Vrancea influence and stresses monitoring and prediction limits. Kyiv’s period exposure is judged low for this office posture, not zero. No site-specific ground study, building inspection or numerical return-period model was obtained, so the low score is not a structural-safety certificate.

Keep heavy items secured, maintain clear exits and verify the building’s emergency procedure; seek a qualified structural check following felt shaking or visible damage.

Intense rainfall or local water accumulation floods the Kyiv office’s entrance, basement equipment or usual access route.

The city identifies recurrent pluvial flooding in Bortnychi and ongoing drainage preparedness elsewhere. Vulnerability is therefore location-specific; a planned drainage project is not assumed complete. No citywide river-flood emergency is established in this period. Upstream-dam attack is not silently treated as ordinary rainfall flooding.

Check whether access or equipment sits below ground or in a known low point; keep critical equipment above flood-prone levels and identify a dry alternative entrance or workspace.

Smoke or hazardous material from a nearby fire or industrial release reaches the Kyiv office or routine route, requiring reduced outdoor exposure or a temporary change of workspace.

The city’s September 30 notice identified a temporary smoke-related deterioration in two districts; it is not evidence of continuing pollution. A report published October 27 attributed elevated PM2.5 readings to IQAir, after the review window; this is a current signal to check conditions before outdoor activity, not an October 19–25 event or an office measurement. Worker dose and site filtration remain unmeasured. Direct strike injury remains in C1; this entry concerns the secondary environmental pathway.

Check the city’s live air-quality service and local official notices before outdoor work; follow local instructions, manage air intake and use an unaffected workspace when conditions require it.