Foreign Correspondent Toolkit
If you are a UK foreign correspondent — staff or freelance, conflict-zone or soft-posting — this toolkit brings together the safety, digital security and source-protection knowledge that should be second nature before every deployment. It is built around the practical decisions you face on assignment, not abstract security principles.
Last reviewed: Next review due:
Start here
Foreign correspondents face a set of risks that most UK journalists never encounter: physical danger in conflict zones, digital surveillance at borders, source compromise through local intermediaries, and legal jeopardy under foreign laws that have no equivalent in the UK. The three areas that cause the most preventable harm are inadequate pre-deployment security planning, poor digital OPSEC leading to source compromise, and insufficient insurance cover — particularly for freelancers.
The Safety hub and Digital Security hub are your two most important reference hubs. The guides and tools below are the ones foreign correspondents use most often in practice.
Core guides for you
Foreign Correspondent SafetyPre-deployment planning, HEFAT training, in-country protocols and emergency evacuation procedures.Hostile Environment BasicsCheckpoint behaviour, blast awareness, first aid essentials and armed-actor navigation.Travel Security for JournalistsDevice preparation, border crossing OPSEC, VPN selection and clean-device protocols.Threat Modelling for JournalistsHow to assess your specific risk profile and calibrate your security measures accordingly.Secure Source HandoversProtocols for handing over sensitive source contacts safely between journalists or to an editor.Cross-Jurisdictional InvestigationsWorking with international partners, legal differences and protecting sources across borders.Source ProtectionUK legal framework for source protection and how it applies when working overseas.Encrypted MessagingSignal, Wire and ProtonMail — which tools to use and how to use them securely in the field.
Recommended tools
Tools you'll use on every assignment
Pre-deployment security checks and source protection assessments.
Blog posts you should read
Foreign Assignment Best Practice UKPre-deployment checklists, insurance guidance and post-assignment debriefing protocols for UK correspondents.Digital Security for UK JournalistsDevice hardening, encrypted communications and metadata hygiene for journalists in the field.Whistleblower Protection UKHow UK law protects sources who disclose wrongdoing, and what correspondents can promise them.
Templates that save you time
FAQs for foreign correspondents
What hostile environment training should a UK foreign correspondent complete?
HEFAT (Hostile Environment and First Aid Training) is the minimum standard expected by most major UK news organisations before deployment to conflict or high-risk areas. The standard course covers: blast and ballistics awareness, medical trauma response (tourniquet, wound packing, casualty evacuation), kidnap awareness and survival, checkpoint and armed-actor behaviour, and convoy security. Providers include RISC Training, AKE and Centurion Safety. Refresh training is recommended every three years or immediately before deployment to a newly destabilised environment. Freelancers operating without a news organisation's support should complete HEFAT independently and cannot assume any employer duty of care.
What digital security steps should I take before crossing a border?
Before crossing any border into a country with known journalist surveillance or device inspection practices: back up all devices to an encrypted off-site location; factory-reset or use a clean travel device where possible; remove sensitive source material from the device; enable full-disk encryption (FileVault on Mac, BitLocker on Windows, standard on iPhone iOS 8+); use a strong passphrase not biometric unlock (biometrics can be compelled at a border); disable iCloud/Google Drive auto-sync; and use a VPN from a jurisdiction outside the country you are entering. The Threat Modelling guide explains how to calibrate these steps to the specific country risk.
How should I manage sources safely when working with local fixers?
Local fixers are an essential part of foreign reporting but they can be a point of source compromise if not managed carefully. Do not share the identities or contact details of sensitive sources with fixers unless there is an operational necessity. Use encrypted messaging (Signal) for sensitive communications, and agree with your fixer in advance what they should say if questioned by authorities. Train fixers on basic digital security — their devices may be less well-protected than yours. Seek a right-to-delete clause in your fixer agreement covering their notes and contact records. The Secure Source Handovers guide covers handover protocols for sensitive sources.
What insurance do UK foreign correspondents need?
Staff correspondents are typically covered by their employer's kidnap and ransom (K&R) policy and medical evacuation insurance, though you should verify this in writing before deployment. Freelance correspondents must arrange their own cover: standard travel insurance is inadequate for conflict zones and typically excludes war risk. Specialist providers include AIG, Hiscox and Chubb (for K&R), and RISC International and WorldNomads (for hostile-environment medical evacuation). The Rory Peck Trust provides emergency assistance grants to freelance journalists and their families in crisis. Check policy exclusions for pre-existing conditions, self-assignment to conflict zones and specific countries under sanctions.
How does UK source protection law apply when I am working overseas?
Section 10 of the Contempt of Court Act 1981 provides that no court may require a journalist to disclose a source unless it is necessary in the interests of justice, national security or the prevention of disorder or crime. This protection applies to UK courts regardless of where the journalism was conducted. However, a foreign court or authority can demand source disclosure under its own laws, and you have no UK legal protection against that. Using end-to-end encrypted communications with sources from the outset is the most effective practical protection, because you cannot disclose something you do not hold in decryptable form.
What should I do if my visa expires during an assignment?
Overstaying a visa — even by a day — can result in detention, deportation, and a bar on future entry. Before deployment, establish the visa expiry date and the process for extension or renewal in-country. Identify the UK embassy or consular contact for the country in advance and store it in multiple locations. If an assignment is running long, start the extension process at least two weeks before expiry — visa bureaucracies in some countries are extremely slow. Your news organisation's foreign desk or fixer should have local expertise on visa processes. Detention for visa violation can place sources and local contacts at risk if your devices and notes are seized.
What OPSEC steps matter most at a border crossing?
At a border crossing in a country with known journalist surveillance: do not carry physical notebooks with source names or contact details; use a clean travel phone if possible; log out of all email and social media accounts; remove SIM cards (IMSI catchers at borders can harvest your contacts); be prepared to power down devices and hand them over — most jurisdictions allow search of devices at the border without a warrant; memorise your legal contacts and the UK embassy number rather than storing them on a device; and have a clear, consistent and truthful explanation of your purpose. Do not misrepresent your profession — being caught in a lie about your journalism work creates a far worse situation than being honest.
Common pitfalls for foreign correspondents
- 1Visa expiry during an extended assignment. Overstaying a visa by even one day can result in detention and a permanent entry bar. Diarise visa expiry and renewal deadlines in two locations before you arrive, and begin the extension process at least two weeks early in countries with slow bureaucracies. Your fixer should know the local process in detail.
- 2Source compromise via local fixers. Sharing sensitive source identities with fixers without evaluating their own security position is one of the most common causes of source compromise in foreign reporting. Assess your fixer's device security, their relationship with local authorities, and what information they actually need to do their job before sharing anything sensitive.
- 3Poor OPSEC at border crossings. Carrying a device with unencrypted source contacts, Signal message threads, or story notes across a border with known journalist surveillance is a serious risk. Use a clean travel device where possible, and remove or encrypt all sensitive material before crossing any border where you would not be comfortable with officials reading your device.
- 4Missing kidnap and ransom (K&R) insurance cover. Standard travel insurance excludes war risk and most conflict-zone scenarios. Freelance correspondents who self-assign to high-risk areas may have no K&R cover at all. Verify your policy exclusions before every deployment, and consider the Rory Peck Trust's emergency assistance grants as a last-resort resource rather than a substitute for proper insurance.
Where to next
The Safety hub covers hostile environment and trauma considerations in depth. For digital security, the Digital Security hub is your primary reference. For cross-border investigations, the Investigative Journalism hub covers all major methodologies.
Go to Safety hub →Primary sources
- National Union of Journalists— NUJ
- National Council for the Training of Journalists— NCTJ
- Reuters Institute for the Study of Journalism— University of Oxford
- Society of Editors— Society of Editors
- IPSO Editors' Code of Practice— IPSO
- Press Gazette— Press Gazette