Political Risk Assessment: Matrix, Example and Template (2026)

How UK companies assess political risk before a market entry, partnership or investment: what to cover, how to score it on a likelihood and impact matrix, a worked example and a template you can copy.

By {AUTHOR_NAME}, {AUTHOR_TITLE} Published 1 October 2026 · Updated 1 October 2026 · 13 min read

Key Takeaways

A political risk assessment identifies how government action, instability, sanctions and stakeholder pressure could affect one decision, scores each risk and sets out what you will do about it.
Score each risk on two 1–5 scales, likelihood and impact, and multiply them: 1–4 is low, 5–9 moderate, 10–14 high and 15–25 critical. Escalate any risk with an impact of 5, whatever its likelihood.
Indices benchmark the country, not the decision. ICRG, the World Bank's governance indicators and the OECD classification say nothing about who owns your distributor.
Every score needs a source, an owner and an indicator that would make you re-score it. Unsourced scores do not survive a board or an auditor.
Update on triggers as well as on a calendar: at least once a year, and whenever an election, a sanctions designation, a change in the law or a change of ownership moves a score.
Bring in a consultancy when the decision depends on who owns, controls or influences the other side, or when the records that matter are thin or in another language.

What Is a Political Risk Assessment?

A political risk assessment is a structured judgement of how government action, political instability, regulation, sanctions, conflict and stakeholder pressure could affect a specific investment, market entry, partnership or operation, with each risk scored and linked to a response.

It answers three questions about one decision: what could go wrong for political reasons, how likely and how damaging each risk is, and what you will do about it. The output is usually a scored risk register, a short narrative and a set of indicators to watch.

The term overlaps with political risk analysis. Analysis is the research and reasoning: who holds power, what they want and how policy may move. Assessment is the scored, decision-linked result of that work.

ISO 31000:2018, the international risk management guideline, describes a process of identifying, analysing, evaluating, treating, monitoring and communicating risk. A political risk assessment applies the first three steps to political risks and feeds the rest. ISO 31000 is guidance: organisations cannot be certified against it.

Political risk assessment in international business

For companies trading or investing across borders, the assessment sits at the point of commitment: before entering a market, appointing a distributor or agent, forming a joint venture, buying a company, bidding for a public contract or opening a new supply route. It covers the host country and, just as important, the people and companies you will depend on there.

When Does a Company Need One?

Before any decision that is large, hard to reverse and exposed to government action, such as market entry, a new partner, an acquisition, a public contract or a new supply route, and again whenever the politics around it changes.

Entering a new country, or expanding in one where the government is changing
Appointing a distributor, agent or joint-venture partner with possible state or political links
Acquiring or investing in a company whose value depends on licences, tariffs or public contracts
Moving production or sourcing to a new country or route
Ahead of an election, a referendum or a new regulatory regime in a key market
When lenders, insurers or the board ask for a documented view

UK companies have a compliance reason too. The Ministry of Justice's Bribery Act 2010 guidance makes risk assessment one of six principles of adequate procedures and names country risk as one of five broad groups of external risk. The Home Office guidance on failure to prevent fraud also lists risk assessment among its six principles. A well-documented political risk assessment can feed both.

What Should the Assessment Cover?

The host government's stability and policy direction, regulation and tax, sanctions and trade controls, security and political violence, corruption and state influence over your counterparties, reputational exposure and, where capital is at stake, transfer, expropriation and contract risk.

Areas a political risk assessment covers
Area	What you assess	Typical evidence
Stability and policy direction	The chance of a change of government or policy that affects your sector	Election calendar, coalition arithmetic, party programmes
Regulation, licensing and tax	Rules that could change the economics of the deal	Draft laws, regulator decisions, tax rulings
Sanctions and trade controls	Exposure of counterparties, owners, goods and routes to UK, EU and US measures	UK Sanctions List, export control rules, customs data
Security and political violence	Threats to people, sites and supply routes	FCDO travel advice, incident reporting, local media
Corruption and state influence	Who owns, controls or influences the counterparty and the regulator	Company registries, procurement records, court files
Reputation	Associations that could damage you with customers, investors or regulators	Local-language media, NGO reports, litigation
Transfer, expropriation and contract	Whether you can move money out, protect assets and enforce contracts	Central bank rules, investment treaties, arbitration record

The last row matches what political risk insurers cover. MIGA, the World Bank Group's insurer, offers cover for currency inconvertibility and transfer restriction, expropriation, war and civil disturbance, and breach of contract.

How Do You Carry Out the Assessment?

Define the decision, identify the risks, gather evidence, score likelihood and impact, choose a response for each risk, and set indicators, owners and review dates.

Define the decision. What you are committing, where, for how long and how much is at stake.
Identify the risks. Work through the areas above and the actors who could change the outcome.
Gather evidence. Country sources for context; records and local-language research for the counterparty.
Score each risk. Likelihood and impact on fixed scales, with the source and your confidence recorded.
Choose a response. Avoid, reduce, transfer or accept, with a named owner.
Set indicators and review dates. What would make you re-score, and when you will look again.

Our step-by-step guide to assessing political risk covers each step in detail, including scenarios and how to put a money value on a risk.

What Is a Political Risk Assessment Matrix?

A grid that scores each risk from 1 to 5 for likelihood and from 1 to 5 for impact. The product, from 1 to 25, places the risk in a low, moderate, high or critical band, and the band decides how it is handled.

Likelihood scale (over the assessment horizon)
Score	Label	Indicative probability	Meaning
5	Almost certain	Above 80%	Expected to happen unless something changes
4	Likely	50–80%	More likely than not
3	Possible	20–50%	A real chance; plan for it
2	Unlikely	5–20%	Could happen; watch for it
1	Rare	Below 5%	Only in exceptional circumstances

Impact scale (set the thresholds for your own decision)
Score	Label	Financial (share of value at risk)	Operations	Legal and reputation
5	Severe	Over 40%, or loss of the asset or licence	Exit from the market	Sanctions breach, criminal exposure or lasting damage
4	Major	15–40%	Project or contract suspended	Enforcement action; damage with customers or investors
3	Moderate	5–15%	Disruption for months	Regulatory enquiry; national press
2	Minor	1–5%	Delays of weeks	Local complaints or press
1	Minimal	Under 1%	Delays of days	No regulatory interest

Bands and responses (likelihood × impact)
Score	Band	Response
15–25	Critical	Board decision; do not commit until the risk is treated
10–14	High	Named executive owner and a treatment plan before commitment
5–9	Moderate	Managed within the project; indicators monitored
1–4	Low	Accepted and reviewed at the next scheduled update

Escalation rule. Multiplying scores under-weights rare but severe risks: a sanctions link scored 2 × 5 lands in the same place as a routine delay. Send every risk with an impact of 5 to the board, whatever its likelihood.

How to build a political risk assessment matrix

Fix the decision, horizon and unit of impact. Name the decision and the period the assessment covers, such as the first three years of a contract, and express impact in money, time and legal exposure.
Write a five-point likelihood scale. Give each point a label and a probability range for that horizon, so that “likely” means the same thing to every reader.
Write a five-point impact scale. Set thresholds for financial loss, disruption, legal or regulatory exposure and reputation, sized to the decision.
Set bands and escalation rules. Multiply likelihood by impact, group the 1–25 scores into low, moderate, high and critical bands, and escalate every risk with an impact of 5.
Score each risk against evidence. Record the source behind each score, your confidence in it and the indicator that would change it.
Plot, act and review. Place each risk on the grid, agree a response and an owner for anything high or critical, and re-score when a trigger fires.

The probability ranges above are illustrative. If your organisation already has a risk matrix, use its scales so that political risks sit on the same register as everything else. If your reports use words such as “likely”, define them; our guide to what a political risk report includes sets out the UK intelligence community's probability yardstick.

Political Risk Assessment Example: A UK Manufacturer Entering a New Market

In this fictional example a UK manufacturer scores six risks before appointing an exclusive distributor abroad. One is critical, one high and four moderate, and the critical risk becomes a condition of signing.

Fictional scenario. A UK maker of industrial pumps plans to enter “Country X” through a five-year exclusive agreement with a local distributor, committing about £2m in stock, training and marketing over two years. A presidential election is due in 14 months. The assessment horizon is three years.

Illustrative political risk register (fictional company and country)
#	Risk	Likelihood	Impact	Score	Band	Response (owner)	Indicator
1	A minority owner of the distributor is a close relative of a serving deputy minister	4	4	16	Critical	Enhanced due diligence on the owners and their public contracts before signing; keep the second-choice distributor warm (commercial director)	Public contracts won by the owner's other companies
2	An owner or lender of the distributor is linked to a designated person	2	5	10	High (escalated: impact 5)	Screen owners and lenders against the UK Sanctions List and EU and US lists; sanctions termination clause (general counsel)	New designations in the distributor's network
3	Import duties or local-content rules tightened after the election	3	3	9	Moderate	Price-adjustment clause; model a 10% rise in duty (finance director)	Candidates' trade pledges; draft customs legislation
4	Customs delays and demands for unofficial payments at the port	4	2	8	Moderate	Licensed customs broker; written no-payments policy; buffer stock (operations director)	Clearance times reported by other exporters
5	Restrictions on moving hard currency delay payment	2	3	6	Moderate	Payment in sterling against letters of credit; credit insurance (finance director)	Central bank rationing of foreign exchange; gap between official and parallel rates
6	Protests around the election disrupt deliveries	3	2	6	Moderate	Alternative delivery routes; FCDO travel advice alerts for visiting staff (operations director)	Protest activity; changes to FCDO travel advice

What the board sees. Proceed with Country X, but not yet with this distributor. Risk 1 is a condition of signing: if enhanced due diligence confirms the link and the owner's companies are winning public contracts, switch to the second-choice distributor. Risk 2 needs a clean screening result before signature. The four moderate risks are handled through the contract and the operating plan, and all six are re-scored after the election.

All names, figures and scores in this example are invented to show the method.

Political Risk Assessment Template: Which Fields Should You Include?

A header with the decision, horizon, author and evidence date, then one row per risk: description, category, likelihood, impact, score and band, evidence, confidence, current controls, response, owner, indicator and review date.

Template fields, with risk 3 from the example
Field	What to enter	Example
Decision (header)	The commitment being assessed	Five-year exclusive distribution agreement in Country X
Horizon and evidence date (header)	Period covered; date sources were last checked	Three years; sources checked 1 October 2026
Risk description	One sentence: event, cause, effect	Import duties rise after the election, cutting margin
Category	One of the areas assessed	Regulation and tax
Likelihood and impact	1–5 on your scales	3 and 3
Score and band	Likelihood × impact, and its band	9, moderate
Evidence	Where the score comes from	Leading candidates' trade pledges; draft customs bill
Confidence	High, moderate or low, and why	Moderate: pledges are public, the result is not
Current controls	What already reduces the risk	None
Response	Avoid, reduce, transfer or accept, and the action	Reduce: price-adjustment clause
Owner	One named person	Finance director
Indicator and trigger	What would make you re-score	Draft customs bill passes first reading
Review date and status	Next check; open, treated or closed	After the election; open

A spreadsheet is enough: one tab for the scales and bands, one for the register, and a formula that multiplies likelihood by impact. Keep superseded scores, so you can show how the view changed and why.

Which Data Sources and Indices Should You Use?

Benchmark the country with indices and free government sources such as PRS Group's ICRG, the World Bank's Worldwide Governance Indicators, the OECD country risk classification and FCDO travel advice; then use registries, court and procurement records and local-language media for the decision itself.

Country-level sources for a political risk assessment (checked 1 October 2026)
Source	What it gives you	Access	Watch-out
PRS Group ICRG	Monthly political, financial and economic risk ratings; political risk is scored out of 100 across 12 components	Paid; most risk tables $700 a year each	Country level only
World Bank Worldwide Governance Indicators	Six dimensions of governance, including political stability, for more than 200 economies from 1996	Free	Perception-based estimates, with margins of error
OECD country risk classification	Eight categories, from 0 to 7, of country credit risk for officially supported export credits	Free	Measures credit risk, not political risk as such
FCDO travel advice	Safety and security advice for 226 countries and territories, with email alerts	Free	Written for British travellers, not investors
UK Sanctions List	All UK designations of people, entities and ships; the only UK source since 28 January 2026	Free, with email alerts	Screen owners and lenders, not just the company
UK Export Finance country cover policy	UKEF's risk appetite and the cover it offers, market by market	Free	Guidance only; can change at any time

None of these tells you who owns your distributor or whom its owners know. For that you need company registries, court and procurement records, local-language media and, where lawful, interviews. That is where most of the time in a decision-specific assessment goes.

Our guide to political risk indices compares the main ratings in more detail.

Should You Score Qualitatively or Quantitatively?

Both. Qualitative work explains who could act and why; quantitative scoring makes risks comparable and puts money on them. Most corporate assessments use 1–5 scores backed by written reasoning.

Qualitative. Narrative analysis, stakeholder maps and scenarios. Best for understanding intent and the actors behind a risk; hard to compare across countries.
Semi-quantitative. The 1–5 matrix above. Quick and comparable, but the scores are ordinal: a 12 is not exactly twice as bad as a 6.
Quantitative. Expected loss (probability × loss), scenario-weighted cash flows or a country risk premium in the discount rate. A 25% chance of losing £2m is an expected loss of £500,000, which you can set against the cost of mitigation.

Treat precise numbers with care. The World Bank reports a confidence range alongside every governance estimate (WGI 2025 methodology), a reminder that even well-known indices are estimates.

Should You Assess Political Risk In-House or Hire a Consultancy?

Do it in-house when the risks are country-level and well documented. Hire a consultancy when the decision depends on who owns, controls or influences a counterparty, when the records are thin or in another language, or when the board wants an independent evidence trail.

In-house, consultancy or both
Option	Works best when	Limits
In-house	Risks are country-level and you have analysts and index subscriptions	Hard to verify owners and political links abroad; optimism about your own deal
Consultancy	One high-stakes decision with ownership, stakeholder or sanctions questions	Cost; needs a clear brief
Hybrid	You run the register; a consultancy answers the two or three questions you cannot	Needs one owner to combine the results

Firms package the work differently. Molfar Intelligence, for example, delivers a source-referenced Country and Market Risk Picture and Stakeholder and Influence Mapping, and quotes 10 business days to one month for investigative work. Control Risks and the EIU are stronger for benchmarking many countries at once. We compare the top political risk consulting firms in London on method, speed and evidence.

For the buying side, see what political risk consulting involves and how to choose a political risk consultancy.

How Often Should You Update the Assessment?

Review it at least once a year and before each major commitment, and re-score as soon as a trigger fires: an election or change of government, a new sanctions designation, a change in law or tax, unrest, or a change in a counterparty's ownership.

An election, coup, change of government or reshuffle that affects your sector
A new designation touching your network on the UK Sanctions List or the EU or US lists
A draft law, tax change or regulator decision in your sector
A change in FCDO travel advice for areas where your staff or sites are
A change in the owners, managers or lenders of a key counterparty
A deal milestone: signing, closing, renewal or a new phase of investment

The Home Office's failure to prevent fraud guidance, for an offence in force since 1 September 2025, expects risk assessments to be dynamic, documented and regularly reviewed, typically every one or two years, and warns that a court may find an outdated assessment unfit for purpose. The same discipline suits political risk. Free email alerts from the UK Sanctions List and FCDO travel advice cover two of the triggers above.

What Are the Most Common Mistakes?

Assessing the country instead of the decision, scoring without evidence, letting multiplication bury rare but severe risks, leaving probability words undefined, treating index scores as forecasts, never updating, and ending without owners.

Country, not decision. A rating for Country X says little about your distributor's owners.
Scores without sources. If no one can say why a risk is a 4, the score will not survive challenge.
Burying severe risks. A sanctions link scored 1 × 5 looks low unless impact-5 risks are escalated.
Undefined words. “Possible” means 10% to one reader and 60% to another. Put ranges on the scale.
Indices as forecasts. Most indices are perception-based and lag events.
Static registers. An assessment written at entry and never revisited.
No owners. A high risk without a named owner and a date is a description, not a plan.

How Does Political Risk Assessment Link to Political Risk Management?

Assessment tells you which risks matter and how much; management decides what to do about each one, whether to avoid, reduce, transfer or accept it, and then monitors the result.

From assessment to response
Response	Examples	When it fits
Avoid	A different partner, market or structure	Critical risks you cannot reduce
Reduce	Due diligence, contract clauses, phased investment	Most high and moderate risks
Transfer	Political risk insurance, letters of credit, treaty protection	Expropriation, transfer and violence risks to capital
Accept	Monitor indicators and hold a contingency budget	Low risks, or where treatment costs more than the expected loss

The findings and decisions are then written up for the board. See what a political risk report includes for the structure.

Our guide to political risk management covers each response in more depth.

For how insurance sits alongside advice, see political risk consulting vs insurance.

Political Risk Consultancies in London That Can Help

These London firms do this kind of work. Scores, strengths and watch-outs for each are in our 2026 ranking.

Molfar Intelligence

Delivers a source-referenced Country and Market Risk Picture and Stakeholder and Influence Mapping, with a published turnaround of 10 business days to one month for investigative work.

Read our review

Control Risks

Its geopolitical risk and corporate strategy practice offers country-risk benchmarking and market-entry assessments, supported by more than 100 geopolitical analysts.

Read our review

Economist Intelligence Unit (EIU)

Publishes standardised country risk ratings, five-year forecasts and country reports, useful for benchmarking the country layer of an assessment.

Read our review

Compare the Best Political Risk Consulting Firms in London

We score ten London firms on nine weighted criteria, from evidence traceability and sanctions-exposure mapping to Chambers recognition, and show every sub-score.

See the full 2026 ranking

Frequently Asked Questions

What is the difference between a political risk assessment and political risk analysis?

Analysis is the research and reasoning about political actors, interests and trends. Assessment is the scored, decision-linked output that ranks those risks and sets a response for each. See our guide to political risk analysis.

How do I build a political risk assessment matrix in Excel?

Create columns for the risk, likelihood (1–5), impact (1–5) and score, set the score as likelihood multiplied by impact, and use conditional formatting for the bands: 1–4 low, 5–9 moderate, 10–14 high, 15–25 critical. Add a rule that flags any impact of 5.

Can you give a simple political risk assessment example?

A UK exporter appointing a distributor abroad might score “owner related to a serving minister” at likelihood 4 and impact 4 (16, critical) and “tariff rise after the election” at 3 and 3 (9, moderate), then make the first a condition of signing.

Is there a free political risk assessment template?

Yes. The fields in the template section above can be copied into any spreadsheet. Free country data is available from the World Bank's governance indicators, the OECD classification, FCDO travel advice and the UK Sanctions List.

What does political risk assessment mean in international business?

It is the check a company runs before trading or investing across borders. It covers the host government, regulation, sanctions, security and the political links of local partners, so that the decision and the contract reflect those risks.

How long does a political risk assessment take?

An in-house desk assessment of one country can take a few days. A bespoke assessment with ownership and stakeholder research usually takes two to six weeks, depending on the number of countries and the depth of research.

Which political risk indices should I use in an assessment?

Use PRS Group's ICRG for monthly ratings, the World Bank's Worldwide Governance Indicators for free long-run governance data and the OECD classification for country credit risk. Combine them, because each measures something different.

Does ISO 31000 tell you how to assess political risk?

Not specifically. ISO 31000:2018 sets out principles, a framework and a process for managing any kind of risk, which a political risk assessment can follow. It is a guideline and cannot be used for certification.

Who should own the political risk assessment in a company?

The executive accountable for the decision, with risk, compliance or legal teams running the process and the board seeing every critical and high risk before the company commits.

Which firms carry out political risk assessments in London?

Evidence-led specialists, global firms such as Control Risks and S-RM, and data providers such as the EIU all do this work. See our 2026 ranking for scores and strengths.

Sources

All sources checked 1 October 2026. Company statements are first-party and not independently audited. See our editorial policy and disclosures.

Related guides

About the author

{AUTHOR_NAME}, {AUTHOR_TITLE} at {PUBLISHER_NAME}. {AUTHOR_BIO_ONE_SENTENCE}

LinkedIn · Editorial policy · Corrections