What is national security? Protecting the state and protecting society
When a family's water supply fails, the problem initially seems remote from the usual language of national security: no border is under attack, no army is moving, and no statement mentions deterrence. Yet a prolonged interruption can change the family's work, its children's education and its ability to remain where it lives. On 1 October 2026, UNICEF published accounts from Al-Diwaniyah about water shortages and their effects on local families. These accounts are not a survey of all Iraq. Their significance here is that they reveal a path from a failing service to an erosion of people's ability to live safely. Source.
The question begins with this distance between border security and everyday security: what are we protecting when we speak of national security? Are protecting the state and protecting society competing tasks? When does an economic or service problem become a strategic risk, rather than an issue whose security label exaggerates and confuses the diagnosis?
State and society: different objects of protection, a shared future
The state protects territory, borders, institutions and public decision-making. Societal security concerns people's safety, relationships, livelihoods and access to basic rights and services. The two spheres do not coincide in every detail, but weakening either imposes costs on the other. A society exposed to persistent violence and deprivation struggles to sustain effective institutions; a society without a state capable of enforcing the law remains exposed to private and external coercion.
It helps to distinguish the state from the government. The state is an institutional framework intended to outlast changes of government; a government is an administration with defined powers and tenure. Objection to government policy cannot therefore automatically be treated as a threat to the state. The relevant criteria are an action's effects, means and relationship to law, not how much it inconveniences those in office. Confusing protection of institutions with protection of their officeholders corrupts decision-making information: concealing a problem becomes safer for officials than reporting it.
The Iraqi Constitution sets a clear boundary. Article 9 places the armed forces under civilian leadership, assigns them the defence of Iraq and prohibits their use to suppress the population or intervene in politics. This is a constitutional basis for defining the function of force, not an automatic description of implementation. Assessing practice requires independent evidence about each event and institution. Source.
What does human security add?
UN General Assembly resolution 66/290 connects human security to people's survival, livelihoods and dignity. It affirms that human security does not replace state security and respects sovereignty. Its analytical value is to change the unit of observation: keeping a ministry in existence is insufficient if its function has failed, just as an improving national average is insufficient if a group or region remains exposed to severe danger. Source.
Broadening attention does not mean calling every demand national security. Education, employment and housing are important public objectives in their own right. Drawing them all into emergency language can make exceptional measures routine and weaken civilian debate. A problem should ordinarily remain with the responsible institution, moving to strategic coordination when its effects cross sectors or threaten continuity of an essential function. Security can thus be understood more broadly without automatically extending security agencies' authority over society.
A practical test for strategic risk
I propose examining a problem through four connected questions: what harm could occur, how could it spread to other sectors, what alternatives exist during disruption, and how long would recovery take? This is an analytical test, not an established statistical indicator or a finding that every Iraqi crisis meets it.
Consider a hypothetical example. A small neighbourhood pump breaking down briefly may be managed and repaired through ordinary service arrangements. A system without a substitute that supplies hospitals and extensive residential areas, with no replacement parts available, creates a different problem. Severity depends not only on the engineering fault, but also on the range of affected users, weak alternatives and the time between failure and restoration. Modest spending on maintenance and reserves may contribute more to security than a conspicuous response after damage occurs.
This comparison explains why a long list of threats is inadequate. We need to map the connection between the risk and the exposed function. Water shortages do not inevitably produce conflict, and unemployment alone does not explain violence. Distribution decisions, compensation capacity, institutional trust and access to fair procedures intervene between them. Omitting these mechanisms turns analysis into simplistic determinism and encourages remedies that miss the cause.
Protecting society while strengthening the state
The answer starts with assigning responsibility. Service providers are responsible for service efficiency, elected authorities for priorities and resources, law-enforcement agencies for protection within their mandates, and oversight bodies for examining decisions and spending. Coordination is necessary when risks overlap, but it need not dissolve all responsibilities into one centre. A centre receiving every detail can slow responses and leave local authorities awaiting instructions they should already be empowered to issue.
In Iraq, assessment could begin with a specific function, such as maintaining drinking water in an area vulnerable to interruptions. Who holds operating data, can order maintenance, funds the alternative and tells residents how long the interruption will last? Answers make accountability practical. Saying that everyone is responsible disperses responsibility until the point of failure becomes difficult to identify.
Centralisation and flexibility both have costs. Centralisation may help move resources between governorates while remaining slow to understand local details. Delegation may accelerate decisions but requires spending limits, published standards and subsequent oversight. The answer follows from the function, available capacity and tolerable risks, rather than an abstract administrative preference.
What should be measured?
Meeting counts and procurement volumes describe government activity without proving security outcomes. More relevant indicators include restoration time, the share of critical facilities with tested alternatives, repeated failures and the distribution of harm across regions. These are proposed measures, not available Iraqi statistics presented in this article. Publishing an indicator's definition and data limitations matters more than displaying a superficially precise but uninterpretable number.
Rights protection remains part of response quality. A broad restriction may seem fast, but it requires a defined necessity, proportionate scope and review date. Restrictions that outlast their justification turn temporary instruments into institutional burdens and may reduce cooperation in the next crisis. Sustainable security requires persuasion and correction alongside enforcement.
Protecting the capacity to continue
Protecting the state and protecting society are not rival choices. The former safeguards the legal and sovereign framework; the latter tests its actual effects on people's lives. A problem becomes strategically significant when cascading harm threatens an essential function, alternatives are weak or the response exceeds one sector's capacity.
The most testable practical option is to begin with a limited set of vital functions and specify responsibilities, response limits and recovery measures. Expanding everything into a security file may promise apparent speed while crowding out mandates and rights. The strength of the state worth protecting is its capacity to protect people and public decision-making together, acknowledge failure and repair it before a wider crisis develops.