Skip to content
Riskop, home

Security incidents and route risk in Mexico with TRIS

Tactical Risk Intelligence System

TRIS is Riskop’s platform for security incident monitoring in Mexico. It gathers what national and local news outlets, official accounts and government sources publish, places each incident on a map with its sources, flags the highest-risk highway segments and emails you when something happens near your sites or routes.

Request a TRIS demoTalk to a specialist

A 20-minute video call using demo data.

Who it is for
Corporate security, logistics and leadership teams at companies operating in Mexico
What it delivers
Incident map with sources, risk corridors, site and route alerts, daily brief
How it is delivered
Web browser on desktop or phone, in English or Spanish; alerts by email; PDF reports
Status
In operation
Interface language
Spanish and English

Reviewed by: Román González, Partner, Co-CEO and Director of Innovation. Updated .

What security and logistics teams ask TRIS

  • “I’m driving from Monterrey to Reynosa tomorrow at 6 a.m. How does the highway look?”
  • “Alert me if there’s a blockade within 5 km of my plant.”
  • “How has Celaya trended over 12 months compared with official SESNSP figures?”
  • “A hurricane is coming. Which sites and routes fall inside the cone?”

Who uses it and for what

Corporate or asset security
Incident map, municipality profiles, site alerts and the daily brief
Logistics, traffic or transportation
Trip planning, a PDF trip sheet for drivers and risk corridors
Executive leadership
Daily brief by email and municipality profiles with official crime data

What TRIS does today, from the map to your inbox

Map and evidence

Fourteen incident types

Armed attacks, clashes, highway blockades, cargo theft, protests, strikes and eight more types, located by state, municipality, neighborhood, street or highway kilometer marker.

Every incident with its sources

Summary, date, time, the news reports behind it with links, and a confidence level. Single-source incidents are labeled “unconfirmed” and stay hidden unless you ask to see them.

Time windows and search

Views from 24 hours to 12 months or a custom range, a day-by-day timeline, and search by state, municipality, highway (“Federal 57”) or any word in the reports.

Municipality profiles

One page per municipality or state with its 12-month trend, relevant incidents, official crime figures and the corridors that run through it.

Routes

Risk corridors

Highway segments of about 15 km from INEGI’s national road network. A segment is rated high with 3 or more cargo thefts, blockades or attacks in 12 months, and medium with 2. Ratings are recalculated daily.

Trip planning

Risk level by highway segment, toll and non-toll roads, incidents along the route and a note on departure time, in a PDF trip sheet for the driver or the traveling executive.

Traffic on the map

Traffic flow and closures on the highway network, layered over incidents and corridors.

By city (municipality)The incident is counted in the cityOrigin cityDestination cityBy segment (TRIS risk corridors)Each incident is placed on its segment of about 15 km of the national road networkAbout 15 kmHigh: 3 or more cargo thefts, blockades or attacks in 12 monthsMedium: 2 in 12 monthsIllustrative diagram: the dots are not real data.By city (municipality)The incident is counted in the cityOrigin cityDestination cityBy segment (TRIS risk corridors)Each incident is placed on its segmentof about 15 km of the national roadnetworkAbout 15 kmHigh: 3 or more cargo thefts,blockades or attacks in 12 monthsMedium: 2 in 12 monthsIllustrative diagram: the dots are notreal data.
A route from Monterrey to San Luis Potosí starts and ends in cities with many incidents, but those urban areas do not count toward the trip sheet rating. The rating comes from the roughly 15 km segments the route travels: high with 3 or more cargo thefts, blockades or attacks in 12 months, and medium with 2.

Your operations

Site and route alerts

Register plants, warehouses and offices with a radius, plus your routes. Every 10 minutes TRIS checks for incidents nearby and emails you an alert for the incident types you choose.

Daily brief

An email at the time you set, with quiet hours. On the dashboard, the “My operations only” filter shows just what touches your sites and routes.

Share and export

A link to the same view, a PNG of the map, and data in CSV and GeoJSON.

Context

Official crime figures

Crime data by municipality from Mexico’s Executive Secretariat of the National Public Security System (SESNSP), daily homicide counts and heavy-equipment theft reported by AMIS, the insurers’ association. TRIS compares what it documents against SESNSP month by month.

Emergencies and weather

Hurricanes with the National Hurricane Center cone, earthquakes, and warnings and five-day forecasts from Mexico’s National Weather Service (SMN), checked against your sites and routes.

Advisor

Questions in plain language

The Advisor answers with TRIS data on routes, municipalities, official figures and weather, and exports the conversation as a PDF.

From a published news report to an alert in your inbox

Local newsreportCollectionTRIS checks eachsource every 15 to 60minutesClassificationOne of 14 incidenttypes, located down tothe street orkilometer markerEvidenceReports of the sameevent are linked; asingle source stays“unconfirmed”Checked every 10minutes againstyour site’s radiusEmail alertand dailybriefNews reportA local outlet or an officialaccount reports an eventCollectionTRIS checks each source every15 to 60 minutesClassificationOne of 14 incident types,located down to the street orkilometer markerEvidenceReports of the same event arelinked; a single source stays“unconfirmed”Your operationEvery 10 minutes, TRIS checkswhether the incident fallsinside the radius of one ofyour sitesEmail alertAnd the incident goes intoyour daily brief
A local news report goes through collection, classification and geolocation. TRIS groups it with other reports of the same incident and, every 10 minutes, checks it against the radius of your registered plants. If it falls inside, TRIS sends an email alert and adds the incident to your daily brief.

What TRIS does not do today

Frequently asked questions

Where do the incidents come from, and how do I know one is confirmed?

From national and local news outlets, Google News, official accounts on X and government sources. Each incident links to its reports and carries a confidence level; single-source incidents are labeled “unconfirmed” and stay hidden unless you ask to see them.

How quickly will I hear about something?

TRIS checks official accounts on X every 15 minutes, news feeds every 30 and Google News and local outlets every hour. Alerts for your sites and routes are evaluated every 10 minutes and sent by email.

Is a corridor’s risk level a forecast?

No. It comes from cargo thefts, blockades and attacks that already happened and were reported in open sources over the last 12 months. A Riskop analyst can adjust a segment’s level based on field information.

Can I monitor my plants and routes without other clients seeing them?

Yes. Your sites and routes are shown only to your company’s users and to the Riskop team that runs the platform. Separation is enforced in the application, and we can walk your IT team through it during the demo. Incidents come from public sources and are the same for every client.

How does my team use it?

In a web browser on desktop or phone, in English or Spanish. Each person signs in with a username and password, with optional two-factor authentication through an authenticator app.

Does it connect to our systems?

Today it exports CSV, GeoJSON, PNG images and a link to the current view, and reports come out as PDF. There is no public API and no integration with mass notification tools.

Security assessments, incident protocols and training for your team are part of our consulting work.

Riskop’s security consulting

See TRIS with incidents from your region

We’ll walk you through TRIS on our demo account, using incidents from the region you pick.