Strategic Focus: The Role Of Climate Risk In Enterprise Risk Management
Katelyn Johnson
Access this research
Access all Corporate Risk Leaders content with a strategic subscription or buy this single report
Need help or have a question about this report? Contact us for assistance
Executive Summary
In late 2021 the Institute of Risk Management provided a framework for considering climate change risks. In this, it stated: “There is widespread consensus that addressing climate-related risks is a critical component of ERM [enterprise risk management] in supporting an organisation in understanding its future risk profile”. The institute also acknowledged the need to have an “early warning system in place” to improve firms’ resilience. Nevertheless, many firms struggle to account for or incorporate climate-related risks into their ERM frameworks. Leaders’ typical compliance-based attitudes prevent them from fully capturing all their climate-related risks. Climate risk professionals face challenges in moving firms beyond compliance mindsets, due to the specific data, analyses and capabilities required to assess climate risk. By focusing on stakeholder engagement and value creation, climate risk professionals can gain support for embedding climate risks into ERM frameworks, thereby building organizational resilience.Today, climate risk is poorly connected to organizations’ ERM strategies
Integrate climate risk into your ERM strategy to futureproof your organization
Figure 2. Ripple of climate risks
Figure 3. Climate risk quantification: an iceberg of uncertainty
About the Authors
Katelyn Johnson
Senior Manager
Katelyn is a Senior Manager at Verdantix, specializing in enterprise risk management and external risk and resilience. She helps executives navigate today’s evolving ris...
Ryan Skinner
VP Research
Ryan is a VP Research at Verdantix, where he leads a team of analysts delivering research, data and advisory services that help clients navigate the fast-evolving landscape of...
View ProfileOther related content
Risk leaders are being asked to monitor a widening range of external threats, many of which overlap in ways that make them difficult to track in isolation. Cybersecurity remains fr...
Upcoming / 05 November, 2026
December 11, 2027 may be the date EU Cyber Resilience Act (CRA) comes into force in its entirety, but the regulation has already introduced several binding obligations for manufa...
06 October, 2026
Geopolitical risk is increasingly becoming a third-party risk, and data sovereignty is emerging as a critical blind spot. The 2026 Verdantix global corporate survey found that 75...
02 October, 2026
From March 18, 2027, UK firms will be required to report operational incidents within 24 hours of determining that a materiality threshold has been met, while the limit for payment...
02 October, 2026
In December 2025, Verdantix examined Singapore’s proposed approach to AI risk management in financial services following the Monetary Authority of Singapore's (MAS) launch of a ...
30 September, 2026
In late September 2026, it came to light that a US intelligence report detailing the movements of Chinese naval vessels in the Middle East in spring 2026 identified nuclear-grade...
25 September, 2026