There's a particular kind of dread that settles over a risk manager when breaking news flashes across their screen at 6 a.m.
Not panic — but urgency. The kind that makes your hand move toward your phone before your coffee is even poured. Because you know what comes next: a message from the HR director, General Counsel, or the CEO herself, all asking the same question, in slightly different ways.
"Who do we have over there right now?"
As military strikes, retaliatory threats, and airspace closures have accelerated across the Middle East — with the United States, Israel, and Iran at the center of a rapidly shifting geopolitical landscape — that question is not rhetorical. This is immediately on the heels of a similar scramble in Mexico just a week prior.
It is not a quarterly planning exercise. It is operational and immediate, and the organizations that can answer it in seconds will respond with clarity. The ones that can't will spend hours scrambling.
In a crisis, hours are not available.
Duty of Care Is Not a Policy. It's a Capability.
Every organization with traveling employees has a duty of care obligation that is legal, ethical, and reputational. That means knowing where your people are, being able to reach them, making informed decisions about their safety, and acting on those decisions quickly.
But here's what many organizations discover only in a moment of crisis: having a duty of care policy is not the same as having a duty of care capability. A policy lives in a document. A capability lives in your systems — and it shows up, or fails to, when it matters most.
Right now, risk and travel management teams are fielding real pressure from executive leadership. Flights are being rerouted. Airspace closures are cascading across the region. Government travel advisories are updating faster than most internal teams can track. Business travelers who booked trips weeks ago are waking up to a different world.
Families and loved ones are waiting for updates. And risk teams are pulling reports, cross-referencing spreadsheets, and making calls to build a picture that should already exist.
The Framework That Holds Under Pressure
There's a decision-making model used in high-stakes environments — military, emergency response, and increasingly enterprise risk management — called the OODA Loop: Observe, Orient, Decide, Act.
It's referenced in ISO 31030, the global standard for travel risk management, for good reason. Under pressure, it works.
Applied to travel risk, it looks like this:
-
Observe — A news event signals danger. Strikes. Airspace closures. An embassy alert.
-
Orient — You identify exactly who is affected. Where are your employees? Who is in-region? What are their itineraries?
-
Decide — Based on what you know, you determine the appropriate response: evacuation support, rebooking, shelter-in-place guidance, or direct outreach.
-
Act — You execute. You communicate. You move.

In a travel crisis, your competitor is not another company. It is time. Every minute between Observe and Orient is a minute you are not deciding, not acting, not protecting your people.
And here is the hard truth that most corporate travel programs have yet to fully reckon with: the Orient step is the bottleneck.
You cannot decide until you know. You cannot act until you know. And knowing — really knowing, completely and confidently — requires data that most organizations simply don't have.
The Blind Spot Most Programs Don't Know They Have
The majority of corporate travel programs rely primarily on TMC booking data to account for traveler whereabouts. It's a reasonable starting point, but in a crisis, it's insufficient.
Why? Because business travel today is fragmented. Travelers book directly with airlines. They use consumer platforms. They make last-minute changes outside approved channels. Regional programs operate in silos. Data feeds are delayed or incomplete.
In global organizations, the picture that lives in your TMC represents only a portion of where your people actually are.
In normal times, these gaps are inconvenient. In a crisis, they are a critical vulnerability. An incomplete roster is not a minor data problem — it's a traveler you cannot reach, a risk you cannot assess, a decision you are making without the information you need.
Complete Visibility Isn't a Nice-to-Have. It's the Foundation.
This is precisely the gap that Traxo AutoDetect is built to close.
AutoDetect captures bookings from every channel, not just the TMC. It automatically and continuously consolidates travel data across your global program, eliminating blind spots that leave travelers invisible during a crisis.
No manual reconciliation. No gaps. No guessing.
AutoDetect automatically sends all non-TMC booking data to your duty of care solution, no matter which one you use.
When a crisis breaks out, AutoDetect-equipped risk teams don't start with a fragmented dataset. They start from a complete one. And that changes everything about what comes next, because when the data is whole, the OODA Loop moves fast.
Risk teams can filter by region, country, city, date range, or traveler group within seconds. Map-based visualization shows precisely where people are. Leaders gain the clarity they need to make decisions with confidence, not assumptions.
The difference is not just efficiency. It's the difference between a coordinated response and a chaotic one. Between hours of scrambling and seconds of visibility.
Preparedness Is an Act of Respect
No one wants geopolitical conflict to disrupt global mobility. International business travel builds relationships, opens markets, and connects people across cultures.
The goal of travel risk management is not to create fear. Instead, it is to create the conditions in which travel can continue safely, and in which organizations are genuinely ready when conditions change.
The world is showing us, again, how quickly things can shift.
If you lead risk management for your organization, take a moment to ask yourself honestly: Could we identify every traveler in the affected region in under 60 seconds?
If the answer is anything other than a confident yes, it may be time to examine whether your data foundation is strong enough — and whether you have the visibility infrastructure in place to fulfill the duty of care your people deserve.
Because when the news breaks and the calls start coming in, the question "Who do we have over there?" deserves a real answer, not a best guess.
Connect with Traxo
