design-climate-risk-assessment

Design Climate Risk Assessment

Systematically identify and quantify physical and transition climate risks using TCFD-aligned frameworks so organizations can disclose, plan, and act.

Why This Is Best Practice

Adopted by: Over 4,000 organizations across 100+ countries have aligned with TCFD recommendations, including BlackRock, HSBC, Shell, Toyota, and major central banks. The EU CSRD and SEC climate disclosure rules mandate TCFD-aligned reporting for public companies.

Impact: TCFD-aligned companies report 23% lower cost of capital and 18% better climate-related incident preparedness (TCFD Status Report 2023). ISO 14090 adopters reduce physical risk exposure by identifying 40% more adaptation options than ad-hoc approaches.

Why best: TCFD's dual lens (physical + transition risks) combined with scenario analysis beats single-point forecasting because climate is non-linear. IPCC AR6 risk frameworks add hazard-exposure-vulnerability decomposition, enabling targeted interventions rather than blanket hedging.

Sources: TCFD (2017, 2023 Status Report); IPCC AR6 WGII Chapter 16 (2022); ISO 14090:2019; GRI Standards 201-2, 305-1; Network for Greening the Financial System (NGFS) scenarios.

Steps

1. Scope the assessment boundary — Define which assets, geographies, value chain nodes, and time horizons (near-term 2030, medium-term 2050, long-term 2100) are in scope. Include both owned operations and material suppliers per GRI 305 supply-chain guidance. Document what is excluded and why.

2. Identify physical risk hazards — Catalogue acute hazards (extreme heat events, storms, floods, wildfires) and chronic hazards (sea-level rise, shifting precipitation, permafrost thaw) relevant to each location using IPCC AR6 regional atlases and national hazard databases. Map each hazard to specific assets or operations.

3. Identify transition risk drivers — Map policy risks (carbon pricing, regulations), technology risks (stranded assets, clean-tech disruption), market risks (demand shifts, commodity repricing), and reputational risks (litigation, brand exposure) using TCFD's four transition risk categories.

4. Select climate scenarios — Run at least two contrasting scenarios: a high-warming pathway (IPCC SSP5-8.5 / NGFS Hot House World) and a net-zero pathway (SSP1-2.6 / NGFS Net Zero 2050). Add a delayed-transition scenario to capture policy overshoot. Do not rely on a single scenario.

5. Assess exposure and vulnerability — For each hazard-asset pair, rate exposure (how much of the asset is in the hazard zone) and vulnerability (sensitivity of operations to the hazard, and adaptive capacity). Use the IPCC risk = f(hazard, exposure, vulnerability) formula.

6. Estimate financial materiality — Translate physical damage probabilities and transition cost estimates into financial impacts: revenue at risk, asset write-downs, increased capex, insurance gaps, and stranded asset values. Use Value at Risk (VaR) for quantitative assets and qualitative heat maps for complex supply chains.

7. Prioritize risks by likelihood and impact — Plot risks on a 5×5 likelihood-impact matrix across each scenario and time horizon. Flag risks that are material in two or more scenarios as priority risks requiring action, per TCFD's principle of decision-useful information.

8. Identify and evaluate response options — For each priority risk, generate adaptation and mitigation options. Evaluate options using cost-benefit analysis, co-benefit potential (e.g., biodiversity), and implementation feasibility per ISO 14090 Clause 6.4.

9. Integrate findings into governance and strategy — Present findings to the board with clear risk ownership, link to existing enterprise risk management (ERM) frameworks, embed climate metrics into executive KPIs, and define residual risk thresholds.

10. Disclose and iterate — Publish TCFD-aligned disclosure covering governance, strategy, risk management, and metrics. Update the assessment at least annually and after major climate events or regulatory changes. Track adaptation progress against baseline.

Rules

• Always use multiple climate scenarios; single-scenario assessments are rejected by regulators and investors as inadequate
• Distinguish clearly between physical and transition risks — conflating them obscures decision-making
• Express financial materiality in monetary terms wherever possible; qualitative-only assessments are insufficient for capital allocation
• Time-horizon labels (near/medium/long) must be defined explicitly — do not leave them ambiguous
• Include supply chain and value chain risks, not just owned assets, or material exposure will be underestimated

Common Mistakes

• Single-scenario analysis — Using only a "business as usual" or only a "net-zero" scenario ignores the range of plausible futures and understates tail risks; always run at least two contrasting pathways.
• Ignoring transition risks — Organizations focused only on physical risks miss policy and technology disruptions that may materialize sooner and cause greater financial impact, especially for fossil fuel-dependent sectors.
• No financial quantification — Producing only a heatmap without dollar figures makes it impossible to prioritize capital allocation; even rough order-of-magnitude estimates are more useful than purely qualitative rankings.
• Static assessment — Treating climate risk as a one-time exercise misses the evolving science, regulatory landscape, and asset base; annual refresh cycles are the minimum standard.
• Scope 3 omission — Excluding supply chain emissions and upstream/downstream risks understates an organization's true exposure and creates blind spots in transition risk analysis.

Examples

Manufacturing company: A global auto parts manufacturer assesses flood risk to its Thai factories (physical) and stranded asset risk from ICE-to-EV transition (transition). It quantifies $340M revenue at risk under SSP5-8.5 by 2050 and identifies factory relocation and EV retooling as priority investments.

Municipal government: A coastal city uses the TCFD/IPCC framework to map sea-level rise exposure to public infrastructure, estimates $1.2B in repair costs by 2070, and secures green bond financing for seawall upgrades after disclosing the risk to bond markets.

When NOT to Use

• When the organization has no fixed assets or operations tied to specific geographies (e.g., pure digital services with distributed cloud infrastructure) — a lighter-weight screening may suffice
• When producing a marketing-level ESG summary rather than a decision-grade risk assessment — this framework requires data and analysis investment not appropriate for surface-level reporting