Security and operational continuity are prerequisites for doing business in Ukraine. Martial law remains in force, and all corporate decisions regarding operations must be structured, documented, and defensible so that Canadian boards, insurers, and compliance officers can clearly understand the basis for risk acceptance. Companies should treat safety, resilience, and regulatory compliance as a single integrated framework guiding all project planning and execution.
Every project or site should undergo a structured security screening process before implementation:
1. Conduct location screening: Operations must not take place on the occupied territories. As a corporate governance baseline, companies should avoid placing personnel or critical assets within 50 km of the active line of hostilities unless they are explicitly contracted by defence authorities and have appropriate insurance and governance for frontline operations. The target region’s risk profile should also be assessed, including proximity to high-value critical infrastructure that may attract aerial attacks, as well as the status of demining and unexploded-ordnance clearance.
2. Ensure resilience engineering: Projects must be designed to function even during infrastructure disruption. This requires investment in backup power generation, redundant communications systems such as satellite internet, and decentralized data backup solutions capable of maintaining operations during energy or connectivity outages.
3. Establish human capital protection measures: Personnel safety planning should include:
- curfew compliance procedures
- access to verified air-raid shelters
- pre-identified medical support
- clearly defined evacuation triggers tied to changes in the security environment
4. Integrate demining and unexploded ordnance (UXO) clearance into project planning where relevant: For greenfield construction, agricultural activity, or linear infrastructure development, technical surveys for unexploded ordnance and systematic demining must be included in the project schedule, budget, and liability framework. These activities should be conducted only by certified international or accredited local operators.
5. Define incident response governance: Companies must clearly specify decision-making authority for operational stop/go calls, establish reporting protocols for incidents, and coordinate response procedures with local authorities and project partners.
Companies should anticipate wartime disruptions by:
- ensuring access to alternative suppliers and logistics routes
- maintaining reliable data backups
- ensuring that operations can be suspended and resumed without violating contractual obligations
Alongside these operational safeguards, companies must enforce strict compliance and risk-management standards. All contracts should assume wartime disruptions, including:
- air-raid interruptions
- energy-grid instability
- logistics bottlenecks
- curfews
- labour-market volatility linked to conscription
Each counterparty (joint-venture partners, subcontractors, suppliers, and logistics intermediaries) must undergo sanctions screening and verification of ultimate beneficial ownership. Transfers of dual-use technologies, including telecommunications equipment, energy infrastructure components, or drone-adjacent products, should be treated as board-level compliance issues under Canada’s export-control regime.
Taken together, these security, continuity, and compliance practices form the minimum operational framework for responsible corporate engagement in Ukraine’s wartime economy.
Conscription considerations: Labour‑market tightness and conscription‑related turnover can affect subcontractor capacity and project schedules. For Ukrainian entities, “employee reservation” (deferral from conscription) may be available for eligible “critically important” enterprises via the Diia portal; eligibility and limits can change, so regulations in effect should be verified early, and approval should not be presumed granted.