Strait of Hormuz Risk: Gulf Duty of Care Briefing August 2026
On August 14, two merchant vessels were struck by projectiles in the Strait of Hormuz. The Iran ceasefire had been in force for 56 days.
If your organisation sent teams back to the Gulf after the June 19 peace deal and assumed the risk had reset to pre-war levels, those two ships are a hard reminder that it hasn’t. The situation in the strait - and by extension the duty of care environment for every company with operations in the UAE, Qatar, Kuwait, Bahrain, Oman, or Saudi Arabia - is more complicated than the ceasefire headline suggested.
This post updates our June analysis of Gulf travel risk. A lot has changed in the past two months. Some of it has changed for the worse.
What the Ceasefire Actually Did (and Didn’t Do)
The Islamabad Memorandum, signed June 19, formally ended active hostilities between the US, Israel, and Iran. It was a genuine diplomatic achievement. Military strikes stopped. Iranian airspace reopened in phases. Flights began returning to Gulf hubs. Several large corporations that had suspended Gulf operations issued statements about resuming normal business travel.
What the ceasefire didn’t do was resolve the Strait of Hormuz.
Iran re-closed the strait almost immediately after the ink dried. The stated reason: Israeli strikes on Abu al-Duhur Air Base in Syria, which Iran characterised as a ceasefire violation. Whether that interpretation holds weight under the Memorandum’s terms is a matter for diplomats. What matters operationally is that the closure stuck.
By June 27, the US Navy’s Joint Maritime Information Center announced a widened transit corridor through the strait - an escort route intended to get commercial shipping moving again. Results have been mixed, at best. Since July 6, the UKMTO has recorded 18 projectile strike incidents on vessels attempting the southern Omani corridor. Sixteen of those 18 incidents occurred on that single route.
Two more ships were struck on August 14. The following day, CNN reported that the US naval blockade remains in effect, barring specific categories of vessels. On August 18, the UAE military detected what it described as a missile threat in the region. President Trump told reporters the same day that no talks were currently underway with Iran.
This is not a post-conflict environment. This is a hot conflict that changed form.
The Operational Footprint at Risk
Any organisation with people, assets, or operations in the following areas needs to treat this as an active threat situation.
The Strait of Hormuz and Gulf of Oman. Maritime and port operations remain dangerous. If your organisation works in shipping, energy logistics, offshore facilities, or port operations anywhere in the Persian Gulf or Gulf of Oman, your people are operating in a zone where 17 seafarers and one port worker have been killed since February and incidents continue weekly.
UAE. The August 18 missile threat detection is not an anomaly - the UAE has been intermittently targeted since the conflict began. Abu Dhabi and Dubai remain operational, flights are running, and the overall risk level is lower than at peak crisis. But your teams need to know that missile threats have not ended and the UAE military remains on elevated alert.
Qatar. Doha’s diplomatic role as a mediator has provided some protection, but Qatar reported 13 killed and 86 injured during the active conflict. Operations in Ras Laffan industrial city - home to the world’s largest LNG complex - require specific risk assessment given the continuing Strait disruption affecting gas exports.
Oman. Muscat has been relatively stable, but Oman’s southern coast is now being used for Hormuz transits and is seeing the highest concentration of projectile incidents in the region. If your teams are operating anywhere near Salalah, Sur, or Duqm, that context matters.
Saudi Arabia. The ceasefire has held better on the Saudi front than in the strait. That said, the Houthi threat from Yemen - a persistent background risk for Saudi operations - has not diminished, and Saudi air defence remains at elevated readiness.
The Insurance Problem Nobody Is Asking About
Here is a question your risk manager should be asking right now: does your malicious risk insurance actually cover your Gulf-based staff under current conditions?
Most war risk and malicious risk policies contain provisions that adjust coverage when a ceasefire is declared. Some policies reset exclusions automatically on ceasefire. Others require a confirmed period of peace - typically 30 or 90 days with no hostilities - before full coverage resumes. A few policies define “hostilities” narrowly enough that maritime attacks on commercial vessels in the Strait might not trigger exclusion language at all.
The problem is that most corporate risk managers don’t know which category their policy falls into. They saw the ceasefire headline, their travel manager sent a note saying Gulf travel was resumed, and the insurance question never got asked.
With attacks continuing through August, you need a straight answer from your broker before your next team flies into the region. Specifically:
- Is your malicious risk policy currently providing full coverage for Gulf-based operations?
- Does the current Strait of Hormuz situation trigger any active exclusions?
- What evidence of normalisation does your policy require before exclusions lift?
- If a covered incident occurred today in the UAE or Qatar, would you receive a full payout?
If you can’t answer those questions from memory, pick up the phone.
What Government Advisories Are Currently Saying
Travel advisories matter beyond their practical guidance. When advisories are elevated and you send staff anyway, you need documentation showing the decision was deliberate, risk-informed, and backed by appropriate mitigation. Without it, you are exposed.
As of August 24, 2026:
UK FCDO maintains “advise against all but essential travel” for areas within 30km of the Iran-Oman maritime boundary in the Gulf of Oman. The broader UAE, Qatar, and Kuwait carry “exercise a high degree of caution.” The FCDO has not lifted its enhanced Gulf advisory despite the ceasefire.
US State Department maintains Level 2 for the UAE and Qatar, Level 3 for Oman and Kuwait. Iran remains Level 4. State added language in late July noting that the maritime security situation in the Gulf of Oman “remains highly dynamic.”
Australian DFAT follows similar lines, with “reconsider your need to travel” applying to maritime zones near Iran and sections of the Gulf of Oman.
Sending staff into a Level 2 or Level 3 advisory region without documented pre-trip risk assessments, traveller tracking, and emergency communication plans is an ISO 31030 compliance failure - and a potential legal liability if something goes wrong.
The Six Steps That Can’t Wait
If you have staff in the Gulf right now, or you’re planning to send teams in the next 30 to 60 days, here is what needs to happen.
Update your threat intelligence. The situation is changing week by week. If your organisation relies on monthly briefings or ad hoc news monitoring, that cadence is not good enough. You need a platform pushing real-time alerts when incidents occur near your people’s locations.
Re-run your pre-trip risk assessments. Any assessment completed before July 6 - when the current wave of Hormuz incidents began - is materially out of date. Update them before the next departure.
Call your insurance broker this week. See above. This is not something to defer to next quarter.
Confirm emergency extraction plans are current. The evacuation window in March was measured in hours. Extraction contracts with vetted providers, and pre-established communication trees, need to be verified and live - not assumed to still work because they existed in February.
Brief your travellers honestly. The teams heading back to Dubai or Doha deserve to know that the Strait is still seeing incidents, that the UAE flagged a missile threat on August 18, and that the environment is not what it was in 2024. Brief them. Document that you briefed them.
Apply heightened scrutiny to maritime and offshore roles. If you have staff working in ports, on vessels, on offshore platforms, or in logistics roles in the Gulf of Oman or Persian Gulf, they are in a materially different risk category than office-based workers in Dubai. They need to be treated that way.
The Harder Conversation
For organisations that sent people back to the Gulf in July and August without updating their risk frameworks, this briefing is probably uncomfortable reading.
If something goes wrong in the coming weeks and the incident connects to the ongoing maritime conflict, the question that will be asked is: what did you know, and when did you know it?
“We saw the ceasefire announcement and assumed the risk was resolved” is not going to satisfy an employment tribunal, an insurance adjuster, or a grieving family. The duty of care obligation doesn’t pause because a peace deal was signed. If anything, the post-ceasefire period is when duty of care programmes get tested hardest - because the pressure to resume normal operations is high, and institutional memory of the risk fades faster than the risk itself.
The Strait of Hormuz situation is that dynamic playing out in real time.
Three Indicators to Watch
These will tell you whether the Gulf situation is genuinely stabilising, rather than just quieter.
Hormuz incident frequency. If weekly UKMTO incident reports drop to zero for two consecutive weeks, the maritime risk is meaningfully reduced. One week of quiet means nothing.
FCDO and State Department advisory downgrades. Government advisories are lagging indicators, but a formal downgrade signals that intelligence services believe the risk has durably changed. Watch for movement on the Gulf of Oman restriction specifically.
Iran-Oman talks outcome. Reports as of August 18 suggest that Iran and Oman were close to an agreement on Hormuz management. If a deal is reached and independently verified, that changes the maritime risk calculus significantly - but “close to an agreement” is not an agreement.
Until you see movement on all three fronts, treat the Gulf as what it currently is: a region in ongoing conflict with a contested international waterway at its centre, a US naval blockade still in effect, and projectile attacks still occurring on the primary transit corridor.
HAAVYN’s Radar platform monitors threat activity across the Gulf region in real time, surfacing alerts when situations change near your travellers’ locations. If you want to understand what that looks like for your specific operational footprint, book a call with our team.
