If Iraq were a soundscape, it would not be the thunder of explosions that defines it today, but the low, persistent hum of tension, like a generator running in the background of a city that never fully sleeps. For security managers, operators, and decision-makers, this hum is the signal worth listening to. It carries within it the echoes of militia mobilizations, the distant tremors of proxy confrontations, and the subtle shifts in regional posture shaped by the evolving dynamics of the United States, Israel, and Iran. It is not loud enough to alarm the inattentive, but it is constant enough to reward those who understand that in Iraq, silence is rarely empty.
This is not a chronicle of imminent collapse, nor one of complete recovery. Iraq today exists in a state of calibrated tension, where stability is maintained not by the absence of threats, but by the continuous balancing of them. It is a system in motion, a chessboard where the pieces do not merely move but influence each other across invisible lines of power, ideology, and geography. To operate here is to understand not just events, but patterns; not just actors, but relationships; not just risks, but timing.
At the center of this landscape stands the Popular Mobilization Forces (PMF), a structure that has evolved from a wartime necessity into a permanent feature of Iraq’s security architecture. With an official strength estimated between 230,000 and 250,000 personnel, and an effective deployable force closer to 160,000, the PMF represents both institutional power and structural ambiguity. Its annual budget, exceeding $2.6 billion, reflects state integration, yet its internal cohesion remains uneven. It is less a single force than a federation of armed networks, each with its own command logic, political alignment, and operational priorities.
Among its most influential factions are Kata’ib Hezbollah, Asa’ib Ahl al-Haq, and Harakat al-Nujaba. Kata’ib Hezbollah operates with a high degree of environment and technological adaptation, maintaining capabilities in drone deployment, precision targeting, and cross-border logistics. Its estimated 7,000 to 10,000 fighters wield influence disproportionate to their size, largely due to their access to advanced systems and advisory support linked to Iran.
Asa’ib Ahl al-Haq, with a broader manpower base of approximately 10,000 to 15,000, occupies a dual role as both a paramilitary force and a political actor, shaping policy while maintaining operational readiness. Harakat al-Nujaba, estimated at around 8,000 fighters, extends its reach beyond Iraq, reinforcing its position within a wider regional network that connects multiple theaters of conflict.
Yet this is only one layer of the PMF. Alongside these factions are groups such as the Abbas Combat Division and the Ali al-Akbar Brigade, whose alignment with Iraq’s religious authorities in Najaf positions them closer to a state-centric vision of security.
These units emphasize territorial defense and institutional loyalty, often avoiding direct involvement in regional proxy confrontations. Their presence introduces a counterbalance within the PMF, creating a dual-speed system where national stability and regional agendas coexist, sometimes uneasily.
This internal complexity becomes more pronounced when viewed against the backdrop of regional tensions. The ongoing interplay involving the United States, Israel, and Iran has transformed Iraq into a space of indirect engagement, where actions are measured, responses are calibrated, and escalation is often contained within deliberate limits.
Between October 2023 and December 2025, over 180 attacks were recorded against installations hosting U.S. and coalition forces across Iraq and eastern Syria. Approximately 65% of these incidents involved one-way attack drones, reflecting a significant tactical shift, while around 30% relied on indirect fire systems such as rockets. The remainder included IEDs targeting logistical convoys, especially along supply routes connecting southern Iraq to central operational hubs.
These numbers are not merely historical data; they form a pattern that informs present risk. The rise of drone usage, for example, is not just a technical evolution but a strategic adaptation. Drones offer range, precision, and a degree of deniability that complicates attribution. For security managers, this expands the threat envelope beyond traditional perimeters, requiring a rethinking of protective measures, early warning systems, and infrastructure resilience.
A notable case occurred in January 2024, when a drone strike targeted a logistics facility near Erbil International Airport. While the incident resulted in limited damage and no casualties, its significance lay in what it represented: a shift in operational geography. The Kurdistan Region, often perceived as a relatively stable environment, was reintroduced into the targeting calculus of Iran-aligned factions. This was not an anomaly but a signal, indicating that regional dynamics could override localized assumption of events.
In Baghdad, the security profile reflects a different type of complexity. The concentration of diplomatic missions, government institutions, and international organizations creates a dense network of high-value targets. While the Green Zone remains heavily fortified, incidents increasingly occur outside its boundaries.
In mid-2025, a coordinated series of rocket attacks struck locations in western Baghdad, demonstrating both capability and intent to operate within urban environments. These incidents, though limited in scale, highlight a decentralization of threat vectors, complicating movement planning and site security for organizations operating across the city.
Basra presents yet another dimension. As Iraq’s economic lifeline, responsible for up to 90% of national oil exports, its stability is of strategic importance. However, the risks here are less about direct confrontation and more about the intersection of economic pressure, local grievances, and armed influence.
In 2025, more than 40 incidents were recorded involving protests near energy infrastructure. While many were driven by employment and service-related demands, the presence of armed actors within the environment introduced volatility. Protests could escalate, access routes could be blocked, and operations could be disrupted without a single shot being fired.
The humanitarian implications of this environment are both immediate and cumulative. Iraq continues to host approximately 1.1 million internally displaced persons, many of whom remain in prolonged displacement conditions. Security incidents, even when localized, disrupt return processes and strain already limited resources. In provinces such as Nineveh and Diyala, the overlap between residual insurgent activity and militia presence creates a layered security structure that can be difficult for civilians to navigate.
A case from Diyala in late 2025 illustrates this dynamic. A series of low-level attacks attributed to insurgent remnants prompted increased militia deployments in affected areas. While intended to stabilize the situation, the result included restricted civilian movement, delays in humanitarian access, and heightened tensions within local communities. This reflects a broader pattern in which security measures, while necessary, can produce secondary effects that influence the operating environment for both civilians and organizations.
Overlaying these domestic factors is the broader regional equation. The interactions between U.S., Israeli, and Iranian actions do not occur in isolation; they reverberate through Iraq with measurable impact. When Israeli operations target Iranian-linked assets in Syria, militia rhetoric in Iraq often intensifies within 24 to 48 hours. When U.S. forces conduct defensive strikes, the response may include demonstrations, political pressure, and, in some cases, indirect attacks. These cycles are not random; they are part of a structured pattern of signaling and response.
For security managers, this introduces the concept of temporal risk. Threat levels fluctuate not only based on local conditions but in response to external developments that may originate far beyond Iraq’s borders. A security posture that does not account for this variability risks being either overly rigid or insufficiently prepared.
Infrastructure vulnerability further complicates the picture. Iraq’s electricity grid, for instance, loses an estimated 30% to 40% of generated power due to inefficiencies and unauthorized connections. While primarily a technical issue, the grid remains susceptible to disruption from security incidents. Transmission lines have been targeted in the past, and while such incidents have decreased, the potential remains. For sectors reliant on continuous operations, this introduces a layer of risk that extends beyond immediate physical threats.
In the Kurdistan Region, the security environment is more controlled but not isolated. Cross-border operations by Turkish forces targeting Kurdish armed groups introduce periodic risks, especially in northern areas such as Dohuk Governorate. These operations, while geographically limited, affect airspace, ground mobility, and infrastructure projects. For organizations operating in the region, this requires a level of awareness that extends beyond immediate surroundings to include broader regional developments.
The decision to re-enter Iraq or resume operations within it is therefore not a simple calculation. It is a process that requires integrating data, context, and forward-looking analysis. Risk is not uniform across the country, nor is it constant over time. Baghdad, Basra, and Erbil each present distinct profiles, shaped by local conditions and influenced by national and regional dynamics.
Scenario planning becomes essential in this context. Consider a situation in which regional tensions escalate following a significant strike involving Iranian assets. Within Iraq, this could lead to increased militia activity, heightened rhetoric, and a rise in drone or rocket incidents targeting facilities associated with international actors.
At the same time, public demonstrations could disrupt movement and access, especially in urban centers. In the Kurdistan Region, heightened alert levels could affect airport operations and energy infrastructure. These developments, while individually manageable, can create compounded challenges when occurring simultaneously.
The objective is not to predict such scenarios with certainty, but to prepare for their possibility. This requires flexible security frameworks, robust intelligence capabilities, and continuous engagement with local stakeholders. It also demands an understanding that Iraq’s security environment is not static but dynamic, shaped by forces that operate both within and beyond its borders.
There is a certain paradox in Iraq’s current reality. It is a place where normalcy and tension coexist, where daily life continues alongside persistent uncertainty, where stability is maintained through constant adjustment rather than fixed conditions. For those operating within this environment, success depends not on eliminating risk, but on understanding it, on recognizing patterns, anticipating shifts, and responding with precision.
The quiet hum that defines Iraq today is not a sign of inactivity, but of ongoing movement beneath the surface. It is the sound of a system balancing itself, of forces interacting in ways that are complex yet discernible. For those willing to listen, it offers insight, guidance, and, ultimately, the ability to navigate one of the most intricate security environments in the region.
Iraq is not a landscape to be approached with assumptions. It is a living equation, one that requires continuous attention, informed judgment, and disciplined execution. The organizations that succeed here will not be those that react fastest, but those that understand deepest.
Because in Iraq, the loudest signals are rarely the most important. It is the quiet roar beneath the surface that tells the real story.
