Best Practices: The Role Of Climate Risk In Enterprise Risk Management

Katelyn Johnson

Katelyn Johnson

Bill Pennington

Bill Pennington

16 Aug, 2023

Access this research

Access all Corporate Risk Leaders content with a strategic subscription or buy this single report

Need help or have a question about this report? Contact us for assistance

Executive Summary

In late 2021 the Institute of Risk Management provided a framework for considering climate change risks, in which it stated: “There is widespread consensus that addressing climate-related risks is a critical component of ERM [enterprise risk management] in supporting an organisation in understanding its future risk profile”. The institute also acknowledged the need to have an “early warning system in place” to improve firms’ resilience. Nevertheless, many firms struggle to account for or incorporate climate-related risks into ERM frameworks. These risks are unique to each firm; they are also hard to quantify and their interrelation with traditional and emerging risks can be unclear. Accounting for climate-related risks requires specific data, analyses and capabilities that many firms lack, generating numerous challenges for their risk management processes. Moreover, compliance-based attitudes towards climate risks inhibit firms from fully capturing their climate risk landscape. Resilience-focused firms should therefore consider embedding climate risks into their ERM frameworks.
Climate risk: a new juggernaut for enterprise risk management
Climate risks are already having costly impacts on organizations
Risk managers will struggle with challenges unique to climate risks
Today’s views on climate risk are poorly connected to organizations’ ERM
Integrate climate risk into your ERM strategy to futureproof your organization
Utilize technology to support your climate risk management process
Figure 1. Definition of climate risk-related terms 
Figure 2. Ripple of climate risks
Figure 3. Climate risk quantification: an iceberg of uncertainty

About the Authors

Katelyn Johnson

Katelyn Johnson

Senior Manager

Katelyn is a Senior Manager at Verdantix, specializing in enterprise risk management and external risk and resilience. She helps executives navigate today’s evolving ris...

Bill Pennington

Bill Pennington

VP Research

Bill is VP Research at Verdantix, where he leads analysis on the evolving and interconnected landscapes of EHS, quality, AI and enterprise risk management. His research helps ...

Other related content

Blog
Corporate Risk Leaders
The US’s Hallucinated Nuclear Threat Sh...

In late September 2026, it came to light that a US intelligence report detailing the movements of Chinese naval vessels in the Middle East in spring 2026 identified nuclear-grade...

25 September, 2026

Blog
Corporate Risk Leaders
MCP Servers Are Closing The AI Context ...

2026 has brought a new trend to the governance, risk and compliance (GRC) software market. In April, Optro launched Model Context Protocol (MCP) server capabilities, and SureCloud ...

24 September, 2026

Blog
Corporate Risk Leaders
If AI Can Outsmart Its Creators, Can Fi...

In September 2026, Anthropic CEO Dario Amodei warned that AI’s capabilities were developing too quickly and becoming reckless. This view was quickly backed by OpenAI’s Sam Altm...

22 September, 2026

Blog
Corporate Risk Leaders
Hungary's Dehydrated Nuclear Plant Is A...

In August 2026, while the longstanding blockade of the Strait of Hormuz was sending energy prices soaring across the world, Hungary faced a quieter crisis of its own: the Paks nu...

16 September, 2026

Webinar
Third-Party Risk Management
Enterprise Risk & GRC
Corporate Risk Leaders
Cybersecurity’s AI Paradox: Confident O...

Vendor networks and cloud environments are multiplying the ways sensitive data can be compromised, and it shows: third-party and supply chain exposure is now considered a material ...

10 September, 2026

Blog
Corporate Risk Leaders
The EU AI Act Omnibus: Quiet Changes An...

On July 24, 2026, only nine days before the EU AI Act’s initial high-risk compliance deadline, EU authorities introduced a series of changes to key measures and timeframes throu...

30 July, 2026