The Chokepoint on Your Risk Register
Geopolitical risk & food security
Analysis · UN Security Council, 25–27 August 2026
The Chokepoint on Your Risk Register
Qatar told the Security Council this week that protecting food security is a peace and security question. Six months of a closed Strait of Hormuz has already tested that claim in the fertiliser market. Here is what the published data shows — and the eight assurance lines it puts on the 2027 audit plan.
The signature number
Every mark is one percent of normal tanker traffic through the Strait of Hormuz. The top row is any week before 28 February 2026. The bottom row is what the FAO's chief economist described to the Council on Foreign Relations three months into the closure.
Máximo Torero Cullen, Chief Economist, FAO, in Council on Foreign Relations, 3 June 2026: the strait's closure had reduced tanker traffic by more than 95 per cent, disrupting millions of tonnes of fertiliser shipments each month. UN News reported in May 2026 that ship transits had fallen by over 90 per cent since the crisis escalated in late February.
The statement
A shipping lane, named in a hunger debate
On 27 August, Qatar's Permanent Representative to the United Nations, HE Sheikha Alya Ahmed bin Saif Al-Thani, delivered the State of Qatar's statement to the Security Council's open debate on conflict-driven hunger. The meeting — Food Under Fire: The Security Council's Role in Mitigating Global and Local Food Crises — was Denmark's signature event of its Council presidency, chaired by Foreign Minister Lars Løkke Rasmussen and briefed by the Secretary-General, the World Food Programme's acting head Carl Skau, and Perrine Benoist of Action Against Hunger. More than eighty member states spoke.
Qatar made four points. Eight years after Resolution 2417 (2018), armed conflict remains a principal driver of food insecurity — it destroys food systems, disrupts trade and energy flows, closes transport routes and blocks humanitarian access. Gaza remains the clearest illustration of that harm. Qatar restated its call for the full implementation of the comprehensive plan endorsed by Resolution 2803 (2025). And then it did something a food security statement does not usually do: it named a waterway.
Developments in the Strait of Hormuz, the statement said, demonstrate how a conflict can affect global food security. Continued closure threatens the vital interests of countries in the region and the global economy; disruption to maritime trade drives up costs and affects fertiliser and food markets, with import-dependent and most vulnerable countries carrying the heaviest burden. Freedom of navigation through the strait was described as a non-negotiable principle, to be restored in line with international law and Resolution 2817 (2026).
A diplomatic statement about hunger that spends a paragraph on a shipping lane is telling you where the transmission mechanism sits.
That is the sentence worth taking into a risk workshop. Not the diplomacy — the causal chain. A chokepoint closes, fertiliser prices move, planting decisions change two seasons later, and a country with no coastline on the Gulf pays more for bread. Every link in that chain is measurable, and most of them are already in somebody's contract.
Visual record
Five links in one chain
Chokepoint, cargo, reserve, harvest, port. The exposure most organisations carry is not at the first frame — it is at the fourth or fifth, two contracts downstream from anything they can see.
Photographs are licence-cleared archive images used to illustrate the supply chain described; they do not depict the 2026 events. Attribution as captioned. Figures cited: IEA, Strait of Hormuz and The Middle East and Global Energy Markets, 2026; UN Secretary-General, Security Council, April 2026; Ministry of Municipality (Qatar) via The Peninsula, 2025–2026; Lloyd's List Intelligence, 19 August 2026.
The numbers
What the record already shows
The Global Report on Food Crises published its tenth edition on 24 April 2026. Acute food insecurity affected 266 million people across 47 countries and territories in 2025, against 105 million across a comparable exercise in 2016. The 2025 figure is lower than 2024's 295 million, and the report is explicit that this reflects lost data coverage rather than improvement: eighteen countries and territories lacked comparable data, including three that alone accounted for more than 27 million acutely food-insecure people the year before.
Figure 1 · Acute food insecurity has roughly doubled in a decade
People in IPC/CH Phase 3 or above, millions. The 2025 column is not comparable to earlier years: 18 countries and territories fell out of the analysis for lack of data.
Source: Global Report on Food Crises 2026 and prior editions, Global Network Against Food Crises / FAO / WFP, 24 April 2026. 2016 and 2020 figures as restated in GRFC 2026 comparisons.
Conflict is the leading driver. The Secretary-General's protection of civilians report of 7 May 2026 recorded more than 147 million people in 19 countries and territories facing acute conflict-induced food insecurity in 2025. At the debate itself, Carl Skau put the point in the Council's own terms: the number of acutely food-insecure people has tripled in the eight years since Resolution 2417 was adopted unanimously, while humanitarian financing for food in crisis contexts has fallen back to where it stood in 2016–17.
The chokepoint arithmetic
What makes 2026 different from earlier hunger years is the transmission route. This was not a harvest failure that spread outward from a growing region. It was a maritime closure that reached agriculture through the input market.
Figure 2 · Concentration through a single strait
Share of each flow that transited the Strait of Hormuz in 2025, and the share of two exporters' LNG that depends on it.
Sources: IEA, Strait of Hormuz and The Middle East and Global Energy Markets, 2026 (oil, LNG, exporter shares); UN Secretary-General to the Security Council, April 2026 (fertiliser share). IEA records just over 112 bcm of LNG transiting the strait in 2025.
Prices did what the structure implied. Urea — nitrogen fertiliser, made from natural gas — rose by nearly 46% month on month between February and March 2026 on World Bank monitoring, then peaked above $850 a tonne in April against roughly $400 before the conflict, before falling back to $453 by June. Diammonium phosphate climbed from about $580 to around $770. Both remained below their 2022 post-Ukraine peaks. Both moved far enough, fast enough, to change what a farmer applies.
Figure 3 · The 2026 fertiliser spike, and the retreat
US dollars per metric tonne. The point is not the peak. It is that the whole excursion opened and closed inside about four months — inside a single annual planning cycle.
Source: WTO Secretariat data analysis, Fertilizer trade impacted by Strait of Hormuz conflict, 10 July 2026. Month-on-month urea move for February–March 2026 from World Bank, Food and Nutrition Security Update No. 121, 27 March 2026.
Downstream, the FAO Food Price Index averaged 131.1 points in July 2026, its highest reading in three years, 1.0% above July 2025 and still 18.2% below the March 2022 peak. The cereal sub-index moved harder: 113.8 points, up 3.4% on the month and 6.9% on the year. The FAO's guidance has been consistent since February — a disruption under a month is absorbable, but past three months it starts to change planting decisions for 2026 and beyond, and fertiliser prices could average 15–20% higher across the first half of the year. The WFP's early estimate was that the conflict could push up to 45 million additional people into acute hunger.
| Date | Event | Measured effect |
|---|---|---|
| 28 Feb 2026 | Iran closes the Strait of Hormuz to normal commercial traffic following strikes on Iran and escalation across the Gulf | Carriers suspend transits; traffic falls to a fraction of normal |
| 11 Mar 2026 | Security Council adopts Resolution 2817 (2026), 13-0-2 with China and Russia abstaining; co-sponsored by 135 states | Affirms transit passage rights; no enforcement measures |
| Mid-Mar 2026 | European gas benchmark peaks | Dutch TTF at €61/MWh against a 2026 average to date of €41/MWh |
| Feb–Mar 2026 | Nitrogen fertiliser repricing | Urea up nearly 46% month on month |
| 7 Apr 2026 | Follow-up Council draft on the strait fails; two permanent members vote against | No escort or corridor mandate |
| Apr 2026 | Fertiliser peak | Urea above $850/t; DAP around $770/t |
| Feb–May 2026 | Gas price divergence | European prices +44%, Asian +66%, US −6% |
| c.17 Jun 2026 | A memorandum of understanding reopens the strait toll-free; traffic stays well below normal | Partial, short-lived recovery |
| Early Jul 2026 | The memorandum collapses after attacks on commercial vessels | Effective closure resumes |
| 10–16 Aug 2026 | Weekly transits tracked | 73 transits, down from 91 the prior week; weekly average was 37 between April and the memorandum |
| 25–27 Aug 2026 | Security Council high-level open debate on conflict and hunger; Qatar delivers its statement | Strait named as a food security risk in the Council record |
Sources: S/RES/2817 (2026); French Permanent Mission to the UN, 8 April 2026; FAO, CCP 26/3, July 2026 (TTF); World Bank Food and Nutrition Security Update No. 121, 27 March 2026; WTO Secretariat, 10 July 2026; US Congressional Research Service R45281 (gas price divergence); Lloyd's List Intelligence Strait of Hormuz Briefs, 5 and 19 August 2026; Gulf Times / QNA, 27 August 2026.
The regional control environment
Qatar's answer is a control framework, whether or not it is called one
Qatar imports more than 90% of its food. That is the exposure. The response, set out publicly in the National Food Security Strategy 2024–2030 launched in December 2024, runs to 17 initiatives across three pillars — local production, strategic reserves and early warning, and international trade and logistics — aligned to Qatar National Vision 2030.
Read as a control framework rather than a policy document, each pillar is a familiar control type with a testable design.
| Pillar | What is publicly stated | Control type and the test it invites |
|---|---|---|
| Local production | Targets of 55% self-sufficiency in vegetables, 80% in fresh fish, 70% in table eggs, 30% in sheep and goat meat, and maintenance of dairy and fresh poultry at 100% by 2030. More than 950 productive farms; organic area doubled in 2024. | Preventive — substitution capacity. Test whether the self-sufficiency measure is capacity or actual output, whether it holds outside the winter growing season, and what share of the input chain behind that domestic output is itself imported. |
| Strategic reserve and early warning | Staple commodities held to cover up to eight months of national consumption; grain storage capacity around 320,000 tonnes; the Hamad Port Strategic Food Security Facilities span 530,000 m², 51 silos and about 300,000 tonnes, at 98% construction completion in June 2026; a digital early warning system to monitor international developments and assign responsibilities. | Mitigating and detective. Cover in days is the assertion; the test is stock rotation, condition, drawdown authority and burn-rate assumptions. For early warning, test elapsed time from indicator to a named decision-maker — not whether the procedure exists. |
| International trade and logistics | Resilience of the import strategy against trade shocks and the loss of trade partners, with published performance metrics that set concentration ceilings across the top three and top five import partners. | Preventive — concentration limit. A stated ceiling is auditable in a way that a diversification aspiration is not. Test measurement basis, exception approval, and whether the alternate partner has ever actually shipped. |
Sources: Qatar National Food Security Strategy 2030 (Ministry of Municipality), published strategy document via FAOLEX; QNA, 25 August 2025; The Peninsula, 21 April 2025, 7 September 2025 and 15 March 2026; Qatar Tribune / Ashghal, 26 June 2026; Gulf Times, 22 December 2020.
Figure 4 · Self-sufficiency: where it stands, where it is going
Published rates against 2030 targets. Dairy and poultry have held near their target for four years; vegetables carry the distance still to travel, and production is concentrated in the winter season. Navy is the published current rate; gold is the 2030 target.
Sources: Ministry of Municipality via QNA, 25 August 2025 (dairy, poultry, vegetables); Qatar National Food Security Strategy 2030 targets as published. Percentages; three categories have targets published without a corresponding current rate in the same sources.
The audit argument
Why the January risk register missed it
The Allianz Risk Barometer for 2026, published on 14 January, put political risks and violence at number seven — its highest position ever recorded, and still seventh. Business interruption fell out of the top two for the first time in the survey's history. Six weeks later the strait closed. By the time McKinsey's first quarterly economic survey of 2026 was in the field, geopolitical conflict had become the most-cited risk in every region, the share of executives naming supply chain disruption had doubled after 28 February, and energy prices entered the top five domestic risks for the first time since mid-2023.
Nothing in that sequence indicates a bad register. It indicates an annual one. The IIA's Risk in Focus 2026 — more than 4,000 audit leaders across 131 countries — had already recorded geopolitical uncertainty as the sharpest riser of any risk area, up ten points globally and nineteen points in North America, from 26% to 45% of respondents naming it a top-five risk. The signal was in the profession's own research a full quarter before the closure.
The gap was never diagnosis. It was the distance between a risk that had been identified and an audit plan that had been fixed.
GIAS 2024 anticipates this. Standard 9.4 requires the internal audit plan to rest on a documented assessment performed at least annually, and describes the plan as dynamic. Most functions read the first half of that sentence. The 2026 evidence argues for reading the second: a shock that opens and closes inside four months will never be caught by a plan revisited each December.
There is a second, more common failure. Organisations map their own exposure to a chokepoint and conclude they have none, because they do not ship through it. The urea price is the counter-example. It moved by more than double and came back inside ninety days, and the cost landed on whoever's contract happened to reprice during the excursion — buyers who had never seen a Gulf shipping lane on any risk map they own. Second-order exposure travels through input costs, freight capacity and insurance, not through the supplier list.
Fieldwork
Eight assurance lines this puts on the plan
Each of these produces evidence. None requires a view on geopolitics, which is the point — internal audit is not in the forecasting business, and a plan that depends on predicting the reopening date is not an audit plan.
| # | Line | The question that produces evidence | GIAS |
|---|---|---|---|
| 01 | Corridor mapping | For the top twenty inputs by value and by criticality, which physical corridor does each one cross? The supplier's country of registration is not the answer; the lane is. | 9.1 |
| 02 | Cover in days | What is the cover, in days, per critical commodity, at the current consumption rate — and did internal audit verify the count or receive it? Tonnage without a burn rate is not cover. | 13.4 |
| 03 | Concentration ceilings | What share of each critical input comes from the top three and top five sources? Is there a documented ceiling, who approves exceptions, and how often is it breached? | 9.4 |
| 04 | Repricing exposure | Which contracts repriced during the February–June window, on what index, and what did it cost? A completed shock leaves an auditable trail — this is the cheapest evidence available all year. | 14.2 |
| 05 | Carriage and cover terms | Where do war-risk premiums, deviation clauses and Incoterms place the risk when a lane closes mid-voyage? Read the contracts, not the summary schedule. | 13.2 |
| 06 | Signal to decision | How many hours pass between a monitored indicator moving and a named individual holding authority to act? Test the elapsed time on a real past signal. | 13.6 |
| 07 | Alternate routing | Has the alternate route, port or supplier ever actually been used, at volume? A route that has only been drawn is an assumption carried at full value. | 14.3 |
| 08 | Accepted exposure | Where management has accepted residual exposure it cannot economically mitigate, is that acceptance recorded — and has the CAE communicated it to the board? | 11.5 |
GIAS references: Standard 9.1 Understanding Governance, Risk Management, and Control Processes; 9.4 Internal Audit Plan; 11.5 Communicating the Acceptance of Risks; 13.2 Engagement Risk Assessment; 13.4 Evaluation Criteria; 13.6 Work Program; 14.2 Analyses and Potential Engagement Findings; 14.3 Evaluation of Findings. The Global Internal Audit Standards took effect on 9 January 2025.
One line most functions will skip
Line 04. A shock that has already run its course is the only kind you can test against outcomes rather than assumptions, and this one ran its full arc — spike, peak, retreat — between February and June. The contracts that repriced are sitting in the system now. In twelve months they will be harder to isolate and the people who negotiated them will have moved on.
Standard 15.2 then applies to whatever the prior cycle already recommended on supply concentration. If a 2024 or 2025 recommendation on supplier diversification is still open, February gave you the impact figure that closes the argument.
For the committee
Six questions worth twenty minutes
Generic geopolitical commentary is not useful to a board. These are answerable, and the answers are either documented or they are not.
- What is our cover, in days, for each critical input — and when did internal audit last verify that number rather than receive it?
- Which single corridor, if it closed tomorrow, touches the largest share of our cost base? Name it.
- What did the February-to-June repricing cost us, and in which report does that figure appear?
- Has our alternate route or alternate supplier ever been run at volume, or only documented?
- Who is authorised to trigger a substitution, and what is the tested elapsed time from signal to decision?
- Which residual exposures has management formally accepted, and did the board see them in writing?
Closing
The measurable part
Whether the Council's August debate produces a presidential statement is a diplomatic question, and Qatar's own position — mediation, restoration of navigation, humanitarian access — is a diplomatic contribution. The audit-relevant facts are already on the record and do not depend on the outcome.
For six months a waterway carrying roughly a quarter of the world's seaborne oil, almost a fifth of its LNG and close to a third of its traded fertiliser has been effectively shut. The cost showed up in a urea contract signed by a buyer who had never heard of Hormuz. The Secretary-General's ask of the Council was to act when the warning lights flash rather than after the classification is confirmed. Internal audit's version of that sentence is shorter: the plan is dynamic, or it is a document.
Sources
Every figure above, and where it came from
| Source | Date | Used for |
|---|---|---|
| Gulf Times / QNA — Qatar's Security Council statement | 27 Aug 2026 | The statement, its content and framing |
| UN Security Council Report, What's in Blue and August 2026 Monthly Forecast | Aug 2026 | Debate format, briefers, concept note S/2026/650; 147m in 19 countries from the SG's protection of civilians report of 7 May 2026 |
| UN press release SC/16439 and UN News | 25–26 Aug 2026 | Guterres and Skau remarks; tripling since 2417; funding decline |
| Global Report on Food Crises 2026 (GNAFC / FAO / WFP) | 24 Apr 2026 | 266m / 47 countries / 22.9%; 35.5m children; two famines; coverage gap; decade trend |
| S/RES/2817 (2026) and S/RES/2803 (2025) | 11 Mar 2026 · 17 Nov 2025 | Resolution content, votes, co-sponsorship |
| IEA — Strait of Hormuz; The Middle East and Global Energy Markets | 2026 | 25% seaborne oil; ~20% LNG; 112 bcm; 93% / 96% exporter dependence; bypass pipeline capacity |
| UN Secretary-General to the Security Council on the Strait of Hormuz | Apr 2026 | Fertiliser share of ~one third of internationally traded volume |
| WTO Secretariat data blog — fertilizer trade | 10 Jul 2026 | Urea $400 → $850+ → $453; DAP $580 → $770 |
| World Bank Food and Nutrition Security Update No. 121 | 27 Mar 2026 | Urea +46% m/m; WFP estimate of up to 45m additional people in acute hunger |
| FAO Food Price Index and FAO newsroom / CCP 26/3 | Feb–Jul 2026 | FFPI 131.1; cereals 113.8; 15–20% fertiliser projection; TTF €41 / €61; up to 5% cereal producer income loss |
| Council on Foreign Relations — interview with FAO Chief Economist Máximo Torero Cullen | 3 Jun 2026 | Tanker traffic down more than 95% |
| Lloyd's List Intelligence — Strait of Hormuz Briefs | 5 & 19 Aug 2026 | Weekly transit counts; Jebel Ali throughput and standby cost |
| US Congressional Research Service R45281 | 2026 | European +44% / Asian +66% / US −6% gas price divergence, Feb–May 2026 |
| Qatar National Food Security Strategy 2030; Ministry of Municipality via QNA, The Peninsula, Qatar Tribune, Gulf Times | 2020–2026 | >90% import dependence; 17 initiatives; self-sufficiency rates and targets; eight-month cover; 320,000 t grain capacity; SFSF specification and 98% completion |
| IIA Internal Audit Foundation, Risk in Focus 2026 | 24 Sep 2025 | 4,000+ respondents / 131 countries; geopolitical uncertainty +10 points globally, 26% → 45% in North America |
| Allianz Commercial, Risk Barometer 2026; McKinsey Economic conditions outlook | 14 Jan 2026 · Mar 2026 | Political risks and violence at #7; business interruption out of the top two; post-28 February shift in executive risk ranking |
| IPC / Famine Review Committee — Gaza | 22 Aug 2025 | Famine (IPC Phase 5) confirmed in Gaza Governorate as of 15 August 2025 |
| The Institute of Internal Auditors, Global Internal Audit Standards | Effective 9 Jan 2025 | All Standard references in Table 3 |