Top risks and controls for Environmental, Social and Governance

From the Doorstep International risk register, curated by Ahmer Nehal. Last updated 17 Oct 2026.

The Environmental, Social and Governance register lists 186 key risks and 135 best-practice controls across 12 units: Collaboration and Partnerships, Continuous Improvement, Environmental Stewardship, Governance and Ethics, Innovation and Research, Investor Relations, Reporting and Disclosure, Risk Management, Social Responsibility, Stakeholder Engagement, Strategy Development and Implementation, Training and Education. Use it to identify risks, benchmark your existing controls or start a risk and control self-assessment (RCSA).

Get the RCSA workbook Run it in the software

In today's rapidly evolving global landscape, the financial sector has transcended its traditional role of profit generation to become a critical driver of sustainable development.

As society places increasing emphasis on ethical, environmental, and social considerations, banks are expected to adopt a comprehensive approach that goes beyond financial metrics.

This is where Environmental, Social, and Governance (ESG) factors come into play, reshaping the core principles of banking operations.

At the heart of this transformation lies the indispensable practice of risk assessment, a process that evaluates the potential threats and opportunities inherent in ESG dimensions.

By proactively identifying and managing risks across environmental, social, and governance domains, banks can fortify their resilience, enhance their reputation, and contribute to a more sustainable and equitable future.

Collaboration and Partnerships: key risks and controls

Responsible for collaborating with external organizations, industry groups, and NGOs to share best practices and collectively address ESG challenges.

Risk	What can go wrong	Best-practice controls
Cultural and Organizational Differences	Working with external organizations from different industries or regions might lead to challenges arising from differing organizational cultures and practices.	Controls for this risk are available in the full register. Ask us.
Data Privacy and Security	Sharing ESG-related data and information with external organizations could pose risks related to data privacy breaches or unauthorized sharing of sensitive information.	Controls for this risk are available in the full register. Ask us.
Dependency on Third Parties	Relying heavily on external organizations to address ESG challenges might lead to dependency issues, where your company's ability to implement initiatives is contingent on the actions of others.	Controls for this risk are available in the full register. Ask us.
Diluted Impact	Collaborating with a large number of external organizations could dilute the impact of ESG initiatives due to competing interests and priorities.	Controls for this risk are available in the full register. Ask us.
Financial Risks	Investing resources into collaborative ESG initiatives might not yield the desired financial returns, potentially affecting the company's financial performance.	Controls for this risk are available in the full register. Ask us.
Governance and Decision-making	Disagreements on governance structures and decision-making processes within collaborative efforts could hinder progress and lead to conflicts.	Controls for this risk are available in the full register. Ask us.
Greenwashing Accusations	If collaborative efforts are perceived as mere PR strategies without substantive impact, the company could face accusations of "greenwashing" exaggerating environmental or social efforts for positive image rather than actual change.	Controls for this risk are available in the full register. Ask us.
Inconsistent Communication	Miscommunication or lack of coordination among collaborating entities could lead to inconsistencies in messaging and efforts, potentially causing confusion among stakeholders.	Controls for this risk are available in the full register. Ask us.
Intellectual Property Concerns	Sharing proprietary ESG strategies or practices with external organizations could potentially lead to intellectual property disputes or loss of competitive advantage.	Controls for this risk are available in the full register. Ask us.
Lack of Accountability	Collaborative efforts may suffer from a lack of clear accountability, making it challenging to measure the success of shared initiatives.	Controls for this risk are available in the full register. Ask us.
Legal and Regulatory Compliance	Engaging with external entities might expose your company to legal and regulatory compliance issues if they are not aligned with applicable laws and regulations.	Controls for this risk are available in the full register. Ask us.
Loss of Control	Collaborative efforts might require compromises and adjustments that could lead to a loss of control over the direction and outcomes of ESG initiatives.	Controls for this risk are available in the full register. Ask us.
Misaligned Values	Partnering with external entities that have differing ESG priorities or values could lead to conflicts and hinder effective collaboration.	Controls for this risk are available in the full register. Ask us.
Reputation Risk	Collaborating with organizations that are later involved in controversies or unethical practices could negatively impact your company's reputation by association.	Controls for this risk are available in the full register. Ask us.
Resource Allocation	Overcommitting resources to collaborative efforts might divert attention and resources away from other crucial ESG initiatives that could be more impactful.	Controls for this risk are available in the full register. Ask us.

Continuous Improvement: key risks and controls

Responsible for monitoring and evaluating the effectiveness of ESG initiatives and adjusting strategies as needed and regularly reviewing and improving ESG-related policies and practices.

Risk	What can go wrong	Best-practice controls
Greenwashing Accusations	Inaccurate or misleading claims about ESG initiatives could lead to accusations of greenwashing, damaging the company's reputation and credibility.	Controls for this risk are available in the full register. Ask us.
Inaccurate Data and Reporting	Reliance on inaccurate or incomplete ESG data could lead to flawed assessments of initiatives' effectiveness and misinformed decision-making.	Controls for this risk are available in the full register. Ask us.
Inconsistent Implementation	Discrepancies in the implementation of ESG initiatives across different departments or regions may result in uneven outcomes and diluted impact.	Controls for this risk are available in the full register. Ask us.
Insufficient Resources	Inadequate allocation of resources (financial, human, technological) could hinder the effective implementation and monitoring of ESG initiatives.	Controls for this risk are available in the full register. Ask us.
Lack of Alignment with Business Strategy	ESG initiatives that are not aligned with the overall business strategy may be seen as disconnected from the company's core mission and values.	Controls for this risk are available in the full register. Ask us.
Lack of Continuous Improvement	Failing to regularly review and improve ESG-related policies and practices could lead to stagnation and missed opportunities for innovation.	Controls for this risk are available in the full register. Ask us.
Lack of Stakeholder Engagement	Inadequate engagement with stakeholders (including investors, employees, communities, NGOs, etc.) might result in missing valuable insights and failing to address important concerns.	Controls for this risk are available in the full register. Ask us.
Regulatory and Compliance Changes	Evolving ESG regulations and compliance requirements may pose challenges in keeping policies up to date and avoiding legal or reputational issues.	Controls for this risk are available in the full register. Ask us.
Resistance to Change	Resistance from internal stakeholders who are not fully committed to ESG principles might impede the adoption of new policies and practices.	Controls for this risk are available in the full register. Ask us.
Short-Term Focus	Prioritizing short-term gains over long-term sustainability goals might lead to neglecting crucial ESG initiatives.	Controls for this risk are available in the full register. Ask us.

Environmental Stewardship: key risks and controls

Responsible for monitoring and reducing the organization's environmental impact through energy efficiency, waste reduction, and resource conservation and implementing initiatives related to carbon emissions reduction, water conservation, and biodiversity preservation.

Risk	What can go wrong	Best-practice controls
Competing Priorities	Other organizational goals and initiatives may take precedence, causing sustainability efforts to be deprioritized or inadequately funded.	Controls for this risk are available in the full register. Ask us.
Complexity of Initiatives	Large-scale initiatives related to carbon emissions reduction, water conservation, and biodiversity preservation may involve intricate planning and execution, leading to unforeseen challenges.	Controls for this risk are available in the full register. Ask us.
Data Accuracy and Reporting	Inaccurate data collection and reporting on energy usage, emissions, and resource consumption can undermine the effectiveness of sustainability initiatives and mislead stakeholders.	Controls for this risk are available in the full register. Ask us.
Dependency on Key Personnel	If the individuals responsible for driving sustainability initiatives leave the organization, there might be a loss of expertise and momentum.	Controls for this risk are available in the full register. Ask us.
Employee Engagement	Employees may not fully understand or support sustainability initiatives, leading to resistance, lack of participation, or insufficient commitment.	Controls for this risk are available in the full register. Ask us.
Financial Constraints	Investing in sustainability initiatives may require upfront costs that strain the organization's financial resources, potentially impacting other strategic priorities.	Controls for this risk are available in the full register. Ask us.
Inadequate Training	Employees involved in executing sustainability measures may require training to ensure proper implementation and adherence to best practices.	Controls for this risk are available in the full register. Ask us.
Lack of Clear Metrics	Without well-defined metrics and goals, it's challenging to track progress and showcase the tangible benefits of sustainability efforts.	Controls for this risk are available in the full register. Ask us.
Measuring Impact	Accurately quantifying the impact of various initiatives on carbon emissions reduction, water conservation, and biodiversity preservation can be challenging and might result in unrealistic expectations.	Controls for this risk are available in the full register. Ask us.
Public Perception	A lack of visible progress or negative media attention on environmental efforts can damage the organization's reputation and affect customer loyalty.	Controls for this risk are available in the full register. Ask us.
Regulatory Compliance	Changes in environmental regulations and policies could impact the organization's operations and initiatives. Non-compliance can lead to fines, legal actions, and reputational damage.	Controls for this risk are available in the full register. Ask us.
Resistance to Change	Employees and management may resist changes required for environmental sustainability due to perceived disruptions or the need to adjust established routines.	Controls for this risk are available in the full register. Ask us.
Resource Availability and Cost	Fluctuations in energy, water, and raw material prices can impact the organization's ability to implement resource conservation initiatives effectively.	Controls for this risk are available in the full register. Ask us.
Stakeholder Engagement	Poor communication with internal and external stakeholders about sustainability efforts can lead to misunderstandings, resistance, and lack of support.	Controls for this risk are available in the full register. Ask us.
Supply Chain Complexity	Ensuring sustainability throughout the supply chain requires cooperation from suppliers and partners. Risks may arise if they do not share the same commitment to environmental goals.	Controls for this risk are available in the full register. Ask us.
Technology Obsolescence	Depending on the industry, new technologies and practices for environmental sustainability may emerge rapidly. Failing to stay updated could hinder progress and competitiveness.	Controls for this risk are available in the full register. Ask us.
Technology Risks	Adopting new technologies for energy efficiency or waste reduction can lead to technical glitches, operational disruptions, and data security concerns.	Controls for this risk are available in the full register. Ask us.
Unforeseen Environmental Events	Natural disasters or other environmental events beyond the organization's control could affect the implementation of sustainability initiatives.	Controls for this risk are available in the full register. Ask us.

Governance and Ethics: key risks and controls

Responsible for ensuring strong corporate governance practices, including transparent decision-making and accountability, implementing and enforcing codes of conduct and ethical standards and managing risks related to legal, regulatory, and reputational issues.

Risk	What can go wrong	Best-practice controls
Conflicts of Interest	Failure to identify and manage conflicts of interest among key decision-makers and employees can undermine decision-making transparency and lead to accusations of favoritism or bias.	Controls for this risk are available in the full register. Ask us.
Crisis Management Preparedness	Lack of preparation for potential crises, such as environmental disasters or scandals, can exacerbate their impact and damage the organization's reputation.	Controls for this risk are available in the full register. Ask us.
Cultural and Diversity Issues	Inadequate attention to promoting a diverse and inclusive corporate culture can lead to legal liabilities, reputational damage, and hindered innovation.	Controls for this risk are available in the full register. Ask us.
Cybersecurity and Data Privacy	Inadequate protection of sensitive data can lead to data breaches, legal actions, and reputational damage, undermining trust with customers and partners.	Controls for this risk are available in the full register. Ask us.
Employee Misconduct	Failure to address employee misconduct promptly and appropriately can harm morale, damage the company's reputation, and potentially result in legal actions.	Controls for this risk are available in the full register. Ask us.
Environmental and Social Responsibility	Neglecting environmental and social responsibilities can result in negative public perception and regulatory scrutiny.	Controls for this risk are available in the full register. Ask us.
Ethical Breaches	Failure to uphold codes of conduct and ethical standards can lead to loss of trust among stakeholders, damage to reputation, and potential legal consequences.	Controls for this risk are available in the full register. Ask us.
Failure to Address Stakeholder Concerns	Ignoring or dismissing stakeholder concerns, including those of shareholders, employees, and community members, can lead to reputational damage and loss of support.	Controls for this risk are available in the full register. Ask us.
Inadequate Board Oversight	Weak governance structures and insufficient board oversight can hinder effective decision-making, strategic planning, and risk management.	Controls for this risk are available in the full register. Ask us.
Inadequate Training and Communication	Insufficient training on ethical standards and governance practices, as well as poor communication of these expectations, can lead to unintentional breaches and misunderstandings.	Controls for this risk are available in the full register. Ask us.
Inconsistent Enforcement of Policies	Uneven implementation and enforcement of codes of conduct and policies can create perceptions of favoritism, erode trust, and lead to employee dissatisfaction.	Controls for this risk are available in the full register. Ask us.
Ineffective Decision-Making	Lack of transparency in decision-making processes can erode confidence in leadership, hinder effective decision-making, and create internal divisions.	Controls for this risk are available in the full register. Ask us.
Lack of Transparency	Insufficient disclosure of relevant information to stakeholders, including investors, can lead to suspicions of hidden agendas and hinder the company's ability to attract investment.	Controls for this risk are available in the full register. Ask us.
Leadership Succession Planning	Failing to plan for leadership transitions can disrupt operations, create uncertainty, and lead to a loss of direction.	Controls for this risk are available in the full register. Ask us.
Legal and Regulatory Changes	Failure to anticipate and adapt to changes in laws and regulations can result in non-compliance and legal liabilities.	Controls for this risk are available in the full register. Ask us.
Regulatory Compliance Failure	Non-compliance with laws, regulations, and industry standards can lead to legal penalties, reputational damage, and operational disruptions.	Controls for this risk are available in the full register. Ask us.
Reputational Damage	Poor corporate governance or ethical lapses can result in negative publicity, loss of customer trust, and a decline in the company's market value.	Controls for this risk are available in the full register. Ask us.
Risk Management Oversight	Inadequate risk assessment and management can expose the organization to unexpected financial, operational, or reputational risks.	Controls for this risk are available in the full register. Ask us.
Supplier and Partner Relationships	Ignoring or downplaying risks associated with suppliers and business partners can result in reputational damage and disruptions in the supply chain.	Controls for this risk are available in the full register. Ask us.
Whistleblower Complaints	Inadequate mechanisms for employees or stakeholders to report unethical behavior or legal violations can lead to internal disputes, legal actions, and reputational harm.	Controls for this risk are available in the full register. Ask us.

Innovation and Research: key risks and controls

Responsible for identifying new technologies and approaches that can improve the organization's ESG performance and conducting research to stay updated on emerging ESG trends and regulations.

Risk	What can go wrong	Best-practice controls
Cybersecurity and Data Privacy Concerns	Exploring new technologies and approaches might involve handling sensitive ESG-related data, raising concerns about data breaches, cyberattacks, and privacy violations.	Controls for this risk are available in the full register. Ask us.
Greenwashing Accusations	If new technologies or approaches are not genuinely aligned with the organization's ESG goals, there's a risk of being accused of greenwashing, which can damage the organization's reputation.	Controls for this risk are available in the full register. Ask us.
Incomplete or Inaccurate Information	Relying on incomplete or inaccurate information about new technologies, trends, and regulations could lead to poor decision-making and ineffective implementation of ESG initiatives.	Controls for this risk are available in the full register. Ask us.
Intellectual Property and Patents	Adopting certain technologies might inadvertently infringe on intellectual property rights or patents, leading to legal issues.	Controls for this risk are available in the full register. Ask us.
Lack of Expertise	If the team lacks the necessary expertise in evaluating and adopting new technologies, there's a risk of making suboptimal choices.	Controls for this risk are available in the full register. Ask us.
Lack of Stakeholder Engagement	Failing to engage key stakeholders, both internal and external, in the evaluation and adoption of new technologies and approaches could lead to resistance and implementation challenges.	Controls for this risk are available in the full register. Ask us.
Long Implementation Timelines	Some new technologies and approaches might have long implementation timelines, which could delay the organization's ability to showcase improved ESG performance.	Controls for this risk are available in the full register. Ask us.
Market Volatility	Economic and market fluctuations could impact the feasibility and funding of new technologies and approaches, affecting their successful adoption.	Controls for this risk are available in the full register. Ask us.
Misalignment with Organizational Goals	Identifying technologies or trends that do not align with the organization's overall ESG goals and mission might result in wasted resources and efforts.	Controls for this risk are available in the full register. Ask us.
Rapidly Changing Landscape	The ESG landscape is constantly evolving, and trends and technologies can become outdated quickly. Failing to stay ahead of these changes might lead to missed opportunities.	Controls for this risk are available in the full register. Ask us.
Regulatory Non-Compliance	Failing to keep up with evolving ESG regulations and compliance requirements could result in legal and reputational risks for the organization	Controls for this risk are available in the full register. Ask us.
Resistance to Change	Employees and stakeholders might resist adopting new technologies and approaches, leading to challenges in implementation and integration.	Controls for this risk are available in the full register. Ask us.
Resource Constraints	Pursuing new technologies and approaches might require substantial resources in terms of time, budget, and manpower. Inadequate resource allocation could hinder successful implementation.	Controls for this risk are available in the full register. Ask us.
Unproven or Ineffective Technologies	Adopting new technologies without proper testing or evidence of their effectiveness could lead to underwhelming results and resource wastage.	Controls for this risk are available in the full register. Ask us.
Vendor Reliability	Depending on external vendors for new technologies could expose the organization to risks related to the vendor's financial stability, support, and long-term viability.	Controls for this risk are available in the full register. Ask us.

Investor Relations: key risks and controls

Responsible for engaging with investors and asset managers to communicate the organization's ESG initiatives and performance and responding to inquiries related to ESG practices and their potential impact on financial performance.

Risk	What can go wrong	Best-practice controls
Communication Breakdown	Failure to effectively communicate the organization's ESG strategies, progress, and impact to investors and asset managers could lead to misunderstandings and reduced engagement.	Controls for this risk are available in the full register. Ask us.
Competitive Differentiation	If the organization's ESG initiatives are not sufficiently unique or competitive within its industry, it might struggle to attract socially responsible investors.	Controls for this risk are available in the full register. Ask us.
Complexity of ESG Metrics	ESG metrics are diverse and often complex, making it challenging to accurately interpret and communicate their impact on financial performance. Misinterpretation could lead to misinformed investment decisions.	Controls for this risk are available in the full register. Ask us.
Greenwashing and Credibility Risk	Misrepresenting or exaggerating ESG initiatives or performance could damage the organization's reputation and result in loss of credibility among investors, leading to potential legal and financial consequences.	Controls for this risk are available in the full register. Ask us.
Inaccurate Data Reporting	Providing incorrect or incomplete ESG data to investors can erode trust and harm the organization's reputation. Ensuring accurate data collection, reporting, and verification is crucial to maintaining transparency.	Controls for this risk are available in the full register. Ask us.
Investor Priorities Shift	Investor preferences and priorities around ESG issues can change rapidly. If the organization's ESG efforts are not adaptable, it might lose investor interest.	Controls for this risk are available in the full register. Ask us.
Lack of Alignment with Stakeholder Expectations	If the organization's ESG initiatives do not align with the expectations of investors, asset managers, and other stakeholders, it could lead to reduced investor interest and support.	Controls for this risk are available in the full register. Ask us.
Lack of Board and Executive Support	Without strong support from the board and executive leadership, ESG initiatives may not receive the necessary resources and attention to succeed.	Controls for this risk are available in the full register. Ask us.
Lack of Transparency	Failing to provide sufficient transparency regarding the organization's ESG practices may lead to suspicion and mistrust from investors and stakeholders, resulting in decreased investor confidence.	Controls for this risk are available in the full register. Ask us.
Market Volatility Impact	ESG-related concerns can impact market sentiment and lead to increased market volatility, potentially affecting the organization's stock price and investor sentiment.	Controls for this risk are available in the full register. Ask us.
Regulatory Compliance Risk	Ignoring or misunderstanding ESG-related regulations and reporting requirements can result in legal penalties, regulatory investigations, and reputational damage.	Controls for this risk are available in the full register. Ask us.
Reputation Risk	If the organization's ESG initiatives are not aligned with industry best practices or if negative incidents occur, its reputation could suffer, potentially leading to a decrease in investor interest and asset value.	Controls for this risk are available in the full register. Ask us.
Resource Allocation	Devoting significant resources to ESG initiatives might divert resources away from other critical areas of the organization, impacting overall performance.	Controls for this risk are available in the full register. Ask us.
Short-Term vs. Long-Term Focus	Balancing short-term financial performance with long-term ESG goals might be difficult, as ESG initiatives often yield benefits over a longer time frame.	Controls for this risk are available in the full register. Ask us.
Stakeholder Activism	Activist investors and stakeholder groups might scrutinize the organization's ESG practices and demand changes, which could create pressure to adapt and potentially disrupt operations.	Controls for this risk are available in the full register. Ask us.

Reporting and Disclosure: key risks and controls

Responsible for compiling and disclosing relevant ESG information to stakeholders through various reporting frameworks (e.g., GRI, SASB, TCFD) and preparing sustainability reports and integrating ESG data into financial reporting.

Risk	What can go wrong	Best-practice controls
Cultural Alignment	If ESG considerations are not ingrained in the company culture, it can lead to difficulties in data collection, reporting, and overall commitment to sustainability goals.	Controls for this risk are available in the full register. Ask us.
Data Accuracy and Reliability	Inaccurate or unreliable ESG data can lead to misinformed decisions, erode trust among stakeholders, and damage the company's reputation.	Controls for this risk are available in the full register. Ask us.
Data Security and Privacy	Handling ESG data requires safeguarding sensitive information to prevent data breaches, cyberattacks, and potential legal liabilities.	Controls for this risk are available in the full register. Ask us.
Emerging ESG Issues	Failing to identify and address emerging ESG risks can lead to negative surprises that affect stakeholder trust and business continuity.	Controls for this risk are available in the full register. Ask us.
Engagement with Stakeholders	Poor communication and engagement with stakeholders may lead to misunderstandings, lack of buy-in, and missed opportunities for feedback and improvement.	Controls for this risk are available in the full register. Ask us.
Greenwashing	Overstating or misrepresenting ESG efforts can result in reputational damage and legal liabilities if stakeholders perceive the company as insincere in its sustainability commitments.	Controls for this risk are available in the full register. Ask us.
Inconsistent Reporting Standards	The use of different reporting frameworks (GRI, SASB, TCFD) can result in inconsistencies and confusion in reporting, making it challenging for stakeholders to compare information across companies.	Controls for this risk are available in the full register. Ask us.
Integration with Financial Reporting	Poor integration of ESG data into financial reporting may lead to incomplete assessments of business performance, affecting investors' understanding of the company's value and long-term prospects.	Controls for this risk are available in the full register. Ask us.
Lack of Internal Coordination	Inadequate collaboration between departments responsible for ESG data collection, reporting, and financial analysis can result in incomplete or inconsistent information.	Controls for this risk are available in the full register. Ask us.
Market Perception and Investor Sentiment	Negative market perceptions related to a company's ESG performance can lead to lower stock prices, reduced access to capital, and increased cost of capital.	Controls for this risk are available in the full register. Ask us.
Materiality Assessment	Incorrectly identifying material ESG issues can lead to incomplete reporting, overlooking important risks, and potentially misallocating resources.	Controls for this risk are available in the full register. Ask us.
Regulatory Compliance	Evolving ESG regulations and reporting requirements may lead to non-compliance risks, including financial penalties and reputational damage.	Controls for this risk are available in the full register. Ask us.
Resource Allocation	Allocating insufficient resources to ESG reporting can result in incomplete or subpar reporting, negatively impacting stakeholder perceptions and compliance efforts.	Controls for this risk are available in the full register. Ask us.
Stakeholder Expectations	Failing to meet stakeholder expectations for transparency and responsible business practices can lead to reputational harm and strained relationships with investors, customers, employees, and other stakeholders.	Controls for this risk are available in the full register. Ask us.
Supply Chain Risks	ESG risks can extend into the supply chain, impacting the company's reputation, operational stability, and relationships with suppliers.	Controls for this risk are available in the full register. Ask us.

Risk Management: key risks and controls

Responsible for identifying and assessing ESG-related risks and opportunities that could impact the organization's long-term sustainability and developing strategies to mitigate and manage these risks.

Risk	What can go wrong	Best-practice controls
Climate Change and Environmental	Physical risks from extreme weather events, such as floods, hurricanes, and wildfires, disrupting operations and supply chains. Transition risks associated with shifting to a low-carbon economy, including stranded assets and changes in market demand for certain products.	Controls for this risk are available in the full register. Ask us.
Community and Stakeholder Relations	Local community opposition to the organization's activities due to perceived negative social or environmental impacts. Inability to effectively engage with stakeholders and manage conflicting interests.	Controls for this risk are available in the full register. Ask us.
Crisis Preparedness and Response	Lack of preparedness for ESG-related crises, such as environmental accidents or social controversies. Ineffective response strategies leading to exacerbation of negative impacts.	Controls for this risk are available in the full register. Ask us.
Data Security and Privacy	Inadequate data protection measures leading to breaches of sensitive ESG-related information. Violation of privacy regulations impacting the organization's reputation and legal standing.	Controls for this risk are available in the full register. Ask us.
Financial	ESG-related financial risks, such as higher borrowing costs due to poor sustainability performance. Decreased shareholder value and investment due to poor ESG performance.	Controls for this risk are available in the full register. Ask us.
Lack of Integration and Accountability	Inadequate integration of ESG considerations into business decisions and strategies. Lack of clear accountability and oversight for ESG initiatives leading to ineffective risk management.	Controls for this risk are available in the full register. Ask us.
Long-Term Resilience	Failure to adapt to changing ESG trends and stakeholder expectations, leading to decreased long-term resilience and competitiveness. Inability to anticipate and address emerging ESG risks and opportunities.	Controls for this risk are available in the full register. Ask us.
Regulatory and Compliance	Changes in environmental regulations and laws that could impact the organization's operations and bottom line. Non-compliance with social and governance standards leading to legal actions, fines, or reputational damage.	Controls for this risk are available in the full register. Ask us.
Reputation and Brand	Negative public perception due to perceived environmental or social irresponsibility, leading to customer boycotts and loss of market share. Exposure of unethical governance practices impacting trust and investor confidence.	Controls for this risk are available in the full register. Ask us.
Supply Chain and Vendor	ESG-related issues in the supply chain, such as child labor, poor working conditions, or environmental degradation, affecting the organization's reputation. Dependence on single or few suppliers vulnerable to ESG-related disruptions.	Controls for this risk are available in the full register. Ask us.
Talent Attraction and Retention	Failure to address social concerns like diversity and inclusion leading to difficulty in attracting and retaining skilled employees. Negative impact on workforce morale and productivity due to inadequate attention to employee well-being and development.	Controls for this risk are available in the full register. Ask us.
Technological and Innovation	Failure to adapt to emerging technologies and innovation that could improve ESG performance and efficiency. Being outpaced by competitors who integrate sustainable practices more effectively.	Controls for this risk are available in the full register. Ask us.

Social Responsibility: key risks and controls

Responsible for managing social impact by promoting diversity, equity, and inclusion within the workforce and across the supply chain, overseeing community engagement and philanthropic efforts and ensuring fair labor practices, human rights, and ethical sourcing in the supply chain.

Risk	What can go wrong	Best-practice controls
Community Disengagement	Failing to genuinely engage with the community can lead to mistrust and negative community sentiment, affecting the organization's social impact efforts.	Controls for this risk are available in the full register. Ask us.
Complex Supply Chain	Global supply chains can involve multiple tiers of suppliers, making it difficult to track and address issues related to labor practices, human rights, and ethical sourcing.	Controls for this risk are available in the full register. Ask us.
Cultural Sensitivity	Lack of cultural sensitivity and understanding can lead to missteps in community engagement and philanthropic efforts, causing unintended harm.	Controls for this risk are available in the full register. Ask us.
Inadequate Data Collection and Analysis	Without proper data collection and analysis, it's challenging to measure progress, identify disparities, and develop effective strategies for improvement.	Controls for this risk are available in the full register. Ask us.
Inclusive Leadership Gaps	A lack of inclusive leadership skills and training among managers and executives can hinder the implementation of effective DEI initiatives.	Controls for this risk are available in the full register. Ask us.
Lack of Leadership Commitment	If senior leadership is not fully committed to DEI efforts, it can undermine the entire initiative and lead to insufficient resources, attention, and accountability.	Controls for this risk are available in the full register. Ask us.
Lack of Training and Education	Without proper training, employees might not understand the significance of DEI, leading to unintentional discriminatory behavior or microaggressions.	Controls for this risk are available in the full register. Ask us.
Legal and Regulatory Compliance	Inadequate attention to legal requirements related to diversity, equity, fair labor practices, and ethical sourcing can result in legal actions and penalties.	Controls for this risk are available in the full register. Ask us.
Measuring Success Effectively	Determining the right metrics and KPIs to assess the success of DEI initiatives and social impact efforts can be complex and challenging.	Controls for this risk are available in the full register. Ask us.
Negative Public Perception	Failure to make meaningful progress in DEI and ethical sourcing can result in negative public perception, damaging the organization's reputation.	Controls for this risk are available in the full register. Ask us.
Resistance to Change	Resistance from employees, stakeholders, or supply chain partners who may not be fully aligned with or understand the importance of DEI can impede progress.	Controls for this risk are available in the full register. Ask us.
Scope Creep	Overextending the scope of responsibilities can dilute focus and effectiveness. Trying to address too many issues at once may lead to limited impact on any one area.	Controls for this risk are available in the full register. Ask us.
Supplier Non-Compliance	Ensuring ethical sourcing and fair labor practices across the supply chain can be challenging due to non-compliance from suppliers, which could lead to reputational and legal risks.	Controls for this risk are available in the full register. Ask us.
Supply Chain Disruptions	Unforeseen events such as natural disasters or geopolitical issues can disrupt the supply chain, affecting the organization's ability to ensure ethical sourcing and fair labor practices.	Controls for this risk are available in the full register. Ask us.
Tokenism	Superficial efforts to promote diversity without substantive changes in organizational culture and practices can result in tokenism and fail to create real inclusivity.	Controls for this risk are available in the full register. Ask us.
Unconscious Bias	Bias in recruitment, hiring, promotions, and decision-making can persist even with good intentions, leading to unequal representation and opportunities.	Controls for this risk are available in the full register. Ask us.

Stakeholder Engagement: key risks and controls

Responsible for building relationships with stakeholders, including investors, customers, employees, communities, and regulatory bodies and responding to stakeholder concerns, inquiries, and feedback regarding ESG matters.

Risk	What can go wrong	Best-practice controls
Changing Stakeholder Priorities	As stakeholder priorities evolve, there's a need to stay adaptive and responsive to their shifting expectations.	Controls for this risk are available in the full register. Ask us.
Community Backlash	If the organization's activities negatively impact local communities, there's a risk of public outcry, protests, or reputational damage.	Controls for this risk are available in the full register. Ask us.
Competitive Landscape	Falling behind competitors in terms of ESG practices could result in market share loss and decreased competitiveness.	Controls for this risk are available in the full register. Ask us.
Complexity of ESG Issues	ESG matters can be complex and multifaceted, requiring a deep understanding of diverse issues and their interconnections.	Controls for this risk are available in the full register. Ask us.
Conflicting Stakeholder Priorities	Different stakeholders may have conflicting ESG priorities, making it challenging to address everyone's concerns simultaneously.	Controls for this risk are available in the full register. Ask us.
Crisis Preparedness	Organizations need to be prepared for potential ESG-related crises and have plans in place to manage them effectively.	Controls for this risk are available in the full register. Ask us.
Greenwashing Accusations	There's a risk of being accused of greenwashing – making false or exaggerated claims about ESG practices – if the organization's actions don't align with its stated commitments.	Controls for this risk are available in the full register. Ask us.
Inconsistent Reporting	Providing inaccurate or inconsistent ESG reporting can erode credibility and make stakeholders skeptical about the organization's commitment to sustainability.	Controls for this risk are available in the full register. Ask us.
Investor Discontent	Investors increasingly consider ESG performance when making decisions. Poor ESG performance could lead to divestment or decreased stock prices.	Controls for this risk are available in the full register. Ask us.
Lack of Employee Engagement	If employees perceive ESG efforts as insincere or ineffective, it can impact morale and overall productivity.	Controls for this risk are available in the full register. Ask us.
Lack of Transparency	Insufficient transparency in ESG efforts can lead to suspicion and distrust among stakeholders.	Controls for this risk are available in the full register. Ask us.
Limited Metrics and Standards	Lack of universally accepted metrics and reporting standards can make it difficult to measure and compare ESG performance accurately.	Controls for this risk are available in the full register. Ask us.
Long-Term vs. Short-Term Trade-offs	Balancing short-term financial goals with long-term ESG objectives can be a challenge, potentially leading to tensions with investors.	Controls for this risk are available in the full register. Ask us.
Misalignment with Stakeholder Expectations	Failing to meet stakeholder expectations regarding ESG practices can lead to loss of trust and reputation damage.	Controls for this risk are available in the full register. Ask us.
Regulatory Non-Compliance	Not staying up-to-date with ESG regulations and failing to comply with them could result in legal and financial consequences.	Controls for this risk are available in the full register. Ask us.
Reputation Risk	Negative ESG incidents, such as environmental accidents or labor disputes, can harm the organization's reputation and brand value.	Controls for this risk are available in the full register. Ask us.
Resource Constraints	Adequate resources are required to implement effective ESG initiatives. Limited budget or support could hinder progress.	Controls for this risk are available in the full register. Ask us.
Supply Chain Risks	If the organization's suppliers and partners have poor ESG practices, it could reflect negatively on the organization itself.	Controls for this risk are available in the full register. Ask us.
Talent Attraction and Retention	Employees, especially millennials and Gen Z, increasingly prefer to work for companies with strong ESG values. Failing to meet these expectations could impact recruitment and retention.	Controls for this risk are available in the full register. Ask us.
Technological Disruption	Technological advancements can change the way businesses operate and impact their ESG strategies, requiring constant adaptation.	Controls for this risk are available in the full register. Ask us.

Strategy Development and Implementation: key risks and controls

Responsible for developing and implementing ESG strategies aligned with the organization's mission and values and setting goals, targets, and key performance indicators (KPIs) for ESG initiatives.

Risk	What can go wrong	Best-practice controls
Change Management Challenges	Implementing ESG initiatives may require significant organizational changes, and managing these changes effectively can be challenging, potentially leading to resistance and disruptions.	Open and transparent communication with all stakeholders, including employees, investors, customers, and communities, is crucial. Engage them early in the process, explaining the rationale for ESG initiatives, potential changes, and the benefits they bring. Address concerns and provide regular updates to manage expectations and reduce resistance. Develop a comprehensive change management strategy that outlines the vision, objectives, and the steps needed for successful ESG implementation. Clearly define roles, responsibilities, and timelines, and include strategies for addressing potential resistance. Ensure that employees at all levels understand the need for change and are equipped with the necessary resources to adapt. Invest in training programs to build employees' skills and understanding related to ESG principles and practices. This will help reduce uncertainty and resistance by empowering employees to actively contribute to the changes and understand their role in achieving ESG goals. Implement a system of incentives and recognition that rewards employees and teams for their contributions to ESG initiatives. Positive reinforcement can motivate employees to embrace change and actively participate in the implementation process. Start with smaller-scale pilot programs for ESG initiatives before implementing them organization-wide. Gather feedback, identify challenges, and make necessary adjustments based on the pilot's outcomes. This approach allows you to learn from initial experiences, refine processes, and reduce potential disruptions when scaling up.
Data Privacy and Security	Collecting and managing ESG-related data may expose the organization to data privacy and security risks, especially if proper safeguards are not in place.	Implement strong encryption for ESG-related data both at rest and during transmission. Utilize access controls to restrict data access to authorized personnel only. This ensures that sensitive data remains protected even if unauthorized individuals gain access to systems. Adopt data minimization practices by collecting only the necessary ESG-related data required for analysis and reporting. Establish clear retention policies that outline how long data will be stored and when it should be securely deleted, reducing the potential exposure of sensitive information. Conduct regular security audits and assessments of the systems and processes involved in collecting and managing ESG-related data. Identify vulnerabilities and gaps in data privacy and security measures and take corrective actions promptly. Provide comprehensive training to employees involved in handling ESG-related data. Ensure they are aware of data privacy regulations, security protocols, and the importance of maintaining confidentiality. This reduces the likelihood of accidental data breaches caused by human error. If third-party vendors are involved in managing ESG-related data, conduct thorough due diligence to assess their data privacy and security practices. Include contractual clauses that require vendors to adhere to stringent data protection standards and undergo regular security assessments.
Employee Engagement and Culture	Lack of employee engagement or a misalignment of company culture with ESG values may result in resistance to change or a failure to integrate ESG practices into daily operations.	Ensure that employees are well-informed about the company's ESG goals, values, and the reasons behind them. Regularly communicate the importance of ESG initiatives and how they align with the organization's overall mission. Provide training and resources to help employees understand the impact of ESG practices and their role in achieving these goals. Gain support from top leadership and executives who actively endorse and demonstrate commitment to ESG values. When leaders visibly prioritize ESG practices, it sets a positive example for the rest of the organization. Leaders should incorporate ESG considerations into their decision-making and encourage open dialogue about the topic. Implement a system of rewards, recognition, and performance evaluations that acknowledge and celebrate employees who actively contribute to ESG-related initiatives. This can include recognizing employees who propose innovative ESG ideas, exhibit behavior aligned with ESG values, and contribute to successful ESG projects. Engage employees in the ESG integration process by soliciting their input, ideas, and suggestions. Create cross-functional ESG teams that include representatives from different departments, levels, and backgrounds. Involving employees in decision-making fosters a sense of ownership and engagement with ESG initiatives. Establish mechanisms for ongoing feedback and evaluation of ESG efforts. Regularly assess employee sentiment, concerns, and suggestions related to ESG practices. Use surveys, focus groups, and other tools to gauge employee engagement levels and make necessary adjustments to ESG strategies based on feedback.
Geopolitical and Economic Factors	Changes in geopolitical landscapes or economic conditions could influence the feasibility and impact of ESG strategies, potentially affecting resource availability and market demand.	Build a diversified ESG portfolio that spans multiple industries, regions, and sectors. This approach can help mitigate the impact of geopolitical or economic shocks in any one specific area. By spreading investments across a variety of sectors, the overall portfolio becomes less vulnerable to disruptions caused by changes in specific regions or industries. Conduct thorough scenario analysis and stress testing to identify potential vulnerabilities in your ESG strategies. This involves modeling various geopolitical and economic scenarios to assess their potential impact on resource availability and market demand. By understanding the potential outcomes of different situations, you can proactively adjust your strategies to better withstand disruptions. Implement a robust monitoring and intelligence gathering system to stay informed about geopolitical and economic developments. This includes tracking trends, regulatory changes, and market shifts that could impact your ESG strategies. Regularly updated information allows you to make timely adjustments to your strategies in response to changing conditions. Approach ESG strategies with a long-term perspective and an emphasis on adaptability. While short-term fluctuations in geopolitical and economic conditions are inevitable, focusing on long-term trends and maintaining flexibility in your strategies can help navigate through uncertainties. Regularly reassess and adjust your strategies to align with changing conditions. Engage with stakeholders, policymakers, and industry peers to advocate for stable geopolitical and economic environments that support ESG goals. Collaborating with others to shape policies and regulations can contribute to creating a more predictable and conducive landscape for sustainable strategies. Active engagement can also provide you with insights into potential changes and opportunities.
Inadequate Metrics and Data Quality	Poor data quality or inadequate metrics could lead to inaccurate reporting, hindering the organization's ability to measure progress towards ESG goals and effectively communicate results to stakeholders.	Controls for this risk are available in the full register. Ask us.
Lack of Alignment with Business Strategy	ESG initiatives that are not aligned with the organization's overall business strategy may fail to create meaningful value and could be perceived as disconnected or irrelevant.	Establish a robust process for developing ESG initiatives that are aligned with the organization's overarching business strategy. This involves cross-functional collaboration between departments such as sustainability, finance, operations, and marketing to ensure that ESG goals are integrated into the core business strategy. Engage with key stakeholders, including investors, customers, employees, and community representatives, to gather insights and feedback on ESG initiatives. This input helps in identifying areas where alignment between ESG and business strategy is crucial, ensuring initiatives resonate with stakeholders and create genuine value. Conduct a thorough materiality assessment to identify the most relevant ESG issues for the organization's industry, operations, and stakeholders. This assessment guides the selection of ESG initiatives that align with both business strategy and the most significant ESG concerns, enhancing credibility and impact. Develop clear and measurable performance metrics tied to ESG initiatives. Regularly track and report progress against these metrics, both internally and externally, to demonstrate the alignment of ESG efforts with the organization's overall business strategy. Transparent reporting enhances accountability and showcases the value generated. Ensure strong commitment from executive leadership to the alignment of ESG initiatives with business strategy. Establish a dedicated ESG governance structure that includes board oversight, regular review, and integration into decision-making processes. This ensures that ESG considerations are woven into the fabric of the organization's strategic decision-making.
Long-Term Financial Impact	While ESG initiatives are often seen as beneficial in the long term, there may be short-term financial costs associated with implementing changes that could impact the organization's financial performance.	Perform a thorough cost-benefit analysis for each proposed ESG initiative. Assess the potential short-term financial costs against the anticipated long-term benefits. This will help prioritize initiatives with the best overall returns and justify the upfront expenditures. Instead of implementing all ESG initiatives at once, consider a phased approach. Start with projects that have lower upfront costs and quicker returns on investment. This approach allows the organization to spread out financial impacts and build credibility with investors and stakeholders. Conduct stress tests and scenario analyses to assess the potential impact of ESG initiatives on the organization's financial performance. By identifying potential risks and challenges, the organization can develop contingency plans to address adverse short-term financial impacts. Enhance communication with investors and stakeholders regarding the organization's ESG initiatives. Provide clear information about the expected short-term costs and the long-term benefits. Demonstrating transparency and commitment to sustainable practices can build investor confidence and mitigate concerns about short-term financial impacts. Align ESG initiatives with the organization's long-term strategic goals. Ensure that the chosen initiatives contribute to improved operational efficiency, risk management, and reputation over time. This alignment reinforces the idea that short-term costs are an investment in the organization's sustainable growth.
Market Perception and Investor Relations	Investors are increasingly considering ESG factors in their decisions. Poor ESG performance could lead to reduced investment interest or a negative impact on stock prices.	Implement a comprehensive and standardized ESG reporting framework that provides investors with clear, accurate, and up-to-date information on your organization's ESG performance. Transparent reporting helps build trust and credibility with investors, enabling them to make informed decisions. Develop and integrate a well-defined ESG strategy into your overall business plan. Align your company's long-term goals with sustainable practices that address environmental and social challenges. Demonstrating a strong commitment to ESG initiatives can attract investors who prioritize responsible investing. Actively engage with stakeholders, including investors, customers, employees, and local communities, to understand their ESG concerns and expectations. Incorporate their feedback into your ESG strategy and demonstrate a commitment to addressing their interests, thereby enhancing your company's reputation and attractiveness to investors. Ensure that your company's board of directors takes an active role in overseeing ESG matters. Establish board-level committees or mechanisms responsible for ESG oversight and integration. Hold senior executives accountable for achieving ESG targets and embedding responsible practices throughout the organization. Develop a robust ESG risk management framework that identifies, assesses, and mitigates potential ESG-related risks. This includes identifying risks associated with climate change, social issues, and governance practices. Proactively addressing these risks can help prevent negative impacts on stock prices and investor interest.
Measurement and Reporting Complexity	Measuring and reporting on ESG performance can be complex due to the diversity of ESG metrics, frameworks, and standards. This complexity could result in inconsistencies or difficulties in comparing performance across different organizations.	Encourage the adoption of widely recognized ESG frameworks and standards such as the Global Reporting Initiative (GRI), Sustainability Accounting Standards Board (SASB), and Task Force on Climate-related Financial Disclosures (TCFD). Standardized frameworks provide a common language and structure, making it easier to compare ESG performance across organizations. Conduct a thorough materiality assessment to identify the most relevant ESG factors for your organization and industry. Focusing on material aspects helps prioritize reporting efforts and ensures that the most significant metrics are reported consistently, reducing unnecessary complexity. Develop a clear and transparent communication strategy for ESG reporting. Clearly explain the chosen metrics, methodologies, and data sources in your reports. Use plain language to help stakeholders understand the information presented and its significance. Implement robust data collection, validation, and verification processes. Accurate and reliable data are crucial for meaningful ESG reporting. Engage external auditors or verifiers to assess the accuracy and completeness of your ESG data, enhancing credibility and comparability. Involve relevant stakeholders, including investors, customers, employees, and regulatory bodies, in the development of your ESG reporting strategy. Collaborating with stakeholders can help identify key metrics, enhance data credibility, and align reporting with stakeholder expectations.
Regulatory and Compliance	Failure to comply with evolving ESG regulations and reporting requirements can result in legal and financial penalties, as well as reputational damage.	Controls for this risk are available in the full register. Ask us.
Reputation	The organization's reputation could be at risk if ESG initiatives are not effectively implemented or if there is a perception of "greenwashing" (misleading marketing of environmentally friendly practices). This could lead to a loss of trust from stakeholders.	Controls for this risk are available in the full register. Ask us.
Resource Allocation and Budgeting	Inadequate budget allocation and resource allocation could hamper the successful implementation of ESG initiatives, leading to underachievement of goals.	Ensure that ESG initiatives are fully integrated into the organization's strategic planning process. This involves aligning ESG goals with overall business objectives, emphasizing their importance to senior management and the board, and dedicating resources accordingly. Define and communicate clear, measurable ESG performance metrics that link to the organization's strategic goals. These metrics should be tied to financial outcomes, demonstrating the value of ESG initiatives. By having quantifiable benchmarks, decision-makers can better allocate resources based on the expected impact of each initiative. Allocate a separate budget specifically for ESG initiatives. This ensures that funds are reserved for these initiatives and are not diverted to other areas. The budget should be realistic and reflective of the scope and complexity of the ESG goals, while also allowing for adaptability in case of changing circumstances. Establish a robust governance structure for ESG initiatives that involves cross-functional teams and leadership oversight. This structure ensures proper allocation of resources, regular progress tracking, and timely decision-making. By having a structured governance approach, potential budget/resource shortfalls can be identified early and addressed effectively. Anticipate potential resource constraints by conducting scenario planning and stress testing. Identify potential challenges that could impact the successful implementation of ESG initiatives, such as economic downturns or regulatory changes. Develop contingency plans to reallocate resources or adjust strategies as needed to stay on course.
Stakeholder Communication and Transparency	Insufficient transparency and communication about ESG initiatives could lead to misunderstandings, distrust, and negative stakeholder perceptions.	Implement robust reporting mechanisms that clearly outline your organization's ESG initiatives, goals, progress, and outcomes. Regularly publish detailed reports that are accessible to stakeholders, demonstrating transparency and accountability in your efforts. Develop a structured stakeholder engagement strategy to involve key stakeholders in ESG discussions. Regularly engage with investors, customers, employees, communities, and regulators through various channels, such as town halls, surveys, webinars, and social media, to ensure their input is considered and addressed. Establish clear and open communication channels dedicated to ESG matters. This could include a dedicated section on your website, newsletters, and social media platforms, providing consistent updates on ESG initiatives, milestones, and impacts. Subject your ESG initiatives to independent verification and auditing by third-party experts. This external validation enhances credibility, demonstrating your commitment to transparency and authenticity in your ESG reporting. Ensure that ESG responsibilities are embedded within leadership roles, with senior executives being held accountable for the organization's ESG performance. Linking executive incentives to ESG targets can encourage top-level commitment and result in improved transparency and communication.
Supply Chain and Vendor	ESG risks within the supply chain, such as issues related to labor practices, environmental impact, and social responsibility, could negatively impact the organization's overall ESG performance.	Implement a rigorous supplier screening process that evaluates potential partners based on their ESG practices. This includes assessing their labor practices, environmental policies, and social responsibility initiatives. Conduct due diligence to ensure alignment with your organization's values and standards before entering into business relationships. Establish transparency throughout the supply chain by requiring suppliers to provide detailed information about their operations, sourcing practices, and ESG performance. This transparency enables better assessment and understanding of potential risks, allowing for informed decision-making. Develop a comprehensive supplier code of conduct that outlines the ESG expectations your organization has for suppliers. This code should encompass labor standards, environmental stewardship, and social responsibility criteria. Suppliers should be contractually obligated to adhere to these standards, and regular audits can verify compliance. Conduct thorough risk assessments to identify ESG-related risks within the supply chain. Map out potential risks and prioritize them based on their potential impact. Implement continuous monitoring mechanisms, such as regular audits, third-party assessments, and real-time data tracking, to stay updated on supplier performance and potential issues. Support suppliers in improving their ESG practices by offering capacity-building programs and resources. Collaborate with suppliers to develop action plans for addressing identified weaknesses, sharing best practices, and driving positive change across the supply chain. Building strong partnerships fosters a collective effort toward sustainability.
Technological Challenges	Adopting new technologies to enhance ESG performance might face implementation challenges, integration issues, or resistance from employees.	Maintain transparent and open communication with all stakeholders, including employees, regarding the reasons for adopting new technologies, the potential benefits, and the ways in which their concerns and feedback will be addressed. This helps manage expectations, alleviate resistance, and foster a sense of ownership and involvement in the technology adoption process. Develop a comprehensive change management strategy that includes identifying potential sources of resistance, providing training and support to employees to enhance their technology-related skills, and clearly articulating how the new technologies align with the organization's ESG goals. Addressing the human aspect of change can significantly reduce resistance and enhance the adoption process. Implement new technologies through pilot testing or incremental rollout phases. This approach allows for identifying and addressing integration issues, technical challenges, and employee concerns on a smaller scale before a full-scale deployment. Lessons learned from these initial phases can inform improvements and adjustments to ensure smoother implementation. Foster collaboration between different departments or teams that will be impacted by the new technologies. This includes involving IT, operations, HR, and relevant ESG teams in the planning and implementation process. Collaborative efforts help to ensure a holistic approach to addressing challenges and streamlining integration. Establish key performance indicators (KPIs) that track the successful integration of new technologies and their impact on ESG performance. Regularly monitor and evaluate these metrics to identify any implementation issues, resistance patterns, or integration challenges early on. This allows for timely adjustments and improvements to the adoption strategy.

Training and Education: key risks and controls

Responsible for providing training programs and educational materials to employees to raise awareness about ESG issues and the organization's commitment to sustainability.

Risk	What can go wrong	Best-practice controls
Competing Priorities	Employees may perceive ESG training as an additional task on top of their existing responsibilities, leading to a lack of engagement or effort.	Integrate ESG concepts and training into employees' existing job responsibilities and tasks. Show how ESG considerations align with their day-to-day work, making it clear that these principles enhance their effectiveness rather than adding an extra burden. Tailor ESG training content to different departments or roles within the organization. Highlight how ESG factors relate to specific functions, showcasing real-world examples that demonstrate the direct impact on their work. This personalized approach can increase engagement by making the training more relatable. Gain support from senior leadership and managers who actively promote the importance of ESG training. When leaders communicate their commitment to ESG initiatives, employees are more likely to perceive these efforts as essential rather than optional. Design ESG training to be interactive and practical, focusing on real-life scenarios and case studies. Incorporate discussions, group activities, and simulations that encourage active participation. Hands-on experiences can help employees understand the relevance of ESG principles in a tangible way. Implement mechanisms to measure and recognize employee engagement with ESG training. Create milestones or benchmarks tied to ESG-related tasks, projects, or goals. Recognize and reward employees who actively incorporate ESG principles into their work, showcasing that their efforts are valued and contribute to the organization's success.
Complexity of ESG Issues	ESG topics can be complex and interconnected, making it difficult to distill information into digestible training content that employees can easily understand.	Develop targeted training modules that break down complex ESG concepts into smaller, manageable pieces. Create content that is specific to your organization's industry and operations, making it more relevant and relatable to employees. Use real-world examples to illustrate key points and demonstrate the practical implications of ESG issues. Establish clear communication channels for employees to seek clarification and ask questions about ESG topics. This could include dedicated email addresses, discussion forums, or regular Q&A sessions. Ensure that subject matter experts are available to provide guidance and address any doubts employees might have. Incorporate visual aids, infographics, and diagrams into training materials. Visual representations can help simplify complex relationships between different ESG factors and enhance understanding. Use charts, graphs, and flowcharts to illustrate connections and patterns. Frame ESG content within relatable stories and scenarios. Presenting information in a narrative format can engage employees and make abstract concepts more tangible. Share success stories and case studies that showcase the positive impact of addressing ESG issues, highlighting the practical benefits for both the organization and the broader community. Implement a progressive learning approach where employees can gradually build their understanding of ESG topics. Start with foundational concepts and gradually introduce more advanced material as employees become more comfortable with the basics. This approach can prevent overwhelm and ensure that employees can absorb the information at their own pace.
Difficulty in Behavioral Change	Raising awareness is only the first step; changing employee behavior to align with sustainable practices can be challenging and may require additional strategies beyond training.	Implement a rewards system that recognizes and incentivizes employees for adopting sustainable behaviors. This can include bonuses, recognition, promotions, or other tangible rewards tied to sustainable actions. Positive reinforcement encourages employees to consistently practice environmentally friendly behaviors. Define specific and measurable sustainability goals and integrate them into employees' performance evaluations. When sustainable practices become part of their performance metrics, employees are more likely to prioritize and integrate these behaviors into their daily routines. Engage senior leadership in actively demonstrating and advocating for sustainable practices. When employees see their leaders embodying these behaviors, it can inspire and encourage them to follow suit. Leaders can set the tone for the organization's sustainability culture. Foster a sense of community and engagement around sustainability initiatives. Encourage employees to form sustainability teams, share success stories, and collaborate on initiatives. Peer support and influence can create a social environment that encourages sustained behavior change. Establish a feedback loop that provides ongoing guidance and information about sustainable practices. Regularly communicate the impact of employees' efforts and offer educational resources to help them make informed decisions. This keeps sustainability on employees' radar and reinforces the importance of their actions.
Employee Turnover	High employee turnover can result in a constant need for training and materials, requiring additional resources and efforts to maintain awareness across the workforce.	Develop comprehensive onboarding programs that provide new employees with a clear understanding of their roles, responsibilities, and the company's culture. A strong onboarding process can reduce turnover by helping employees feel more connected and prepared from the beginning. Ensure that your organization offers competitive salaries and benefits packages. Compensation that aligns with industry standards and recognizes employees' contributions can reduce the likelihood of turnover driven by dissatisfaction with compensation. Establish a clear path for career progression within the organization. Encourage continuous learning and skill development by providing opportunities for employees to acquire new skills, take on challenging projects, and advance in their careers. Implement a feedback-rich culture that emphasizes recognizing and rewarding employees for their achievements. Regular performance evaluations, constructive feedback, and acknowledgment of accomplishments contribute to higher job satisfaction and engagement. Prioritize the well-being of your employees by promoting a healthy work-life balance. Offer flexible work arrangements when feasible and provide resources for managing stress and maintaining overall well-being.
Greenwashing Concerns	Overemphasis on positive aspects of sustainability without addressing actual organizational practices can lead to accusations of "greenwashing," damaging the organization's reputation.	Ensure that the organization communicates its sustainability efforts transparently and accurately. Regularly report on the progress made toward sustainability goals, detailing specific actions taken and outcomes achieved. This transparency will help build credibility and trust among stakeholders. Seek third-party verification and certifications for sustainability initiatives. Independent audits and certifications from reputable organizations can validate the authenticity of the organization's sustainability claims. This demonstrates a commitment to accountability and reduces the likelihood of greenwashing accusations. Establish a strong internal governance structure that ensures alignment between sustainability goals and actual practices. Assign clear responsibilities for sustainability initiatives and set up mechanisms for monitoring and reporting progress. Holding individuals and departments accountable for their sustainability efforts helps avoid the perception of greenwashing. Develop a comprehensive, long-term sustainability strategy that encompasses all aspects of the organization's operations. Ensure that sustainability efforts are integrated into core business practices rather than treated as isolated initiatives. This approach demonstrates a genuine commitment to sustainability beyond superficial marketing. Actively engage with stakeholders, including customers, investors, employees, and NGOs, to gather feedback on the organization's sustainability efforts. Incorporate their input into decision-making processes and adjust strategies accordingly. This engagement fosters transparency and helps identify areas where improvements are needed.
Inaccurate or Misleading Information	If training materials contain inaccurate or misleading information about ESG topics, employees might develop a skewed understanding of sustainability practices.	Implement a robust review and approval process for all ESG-related training materials. Involve subject matter experts, compliance officers, and stakeholders to ensure accuracy and alignment with reputable sources of information. Engage external ESG experts or consultants to review and validate the accuracy of training content. Their insights can help identify potential biases or inaccuracies, enhancing the credibility of the material. Require that training materials reference multiple credible sources for each ESG topic covered. This approach helps avoid reliance on a single viewpoint and encourages a well-rounded understanding of sustainability practices. Provide regular training and updates to content creators, ensuring they have a deep understanding of ESG concepts and are equipped to accurately present information. This could include workshops, webinars, and access to up-to-date resources. Establish mechanisms for employees to provide feedback on the accuracy and clarity of training materials. Regularly monitor and analyze feedback to identify patterns of confusion or misinformation, enabling timely corrections.
Inadequate Content Quality	Poorly designed or outdated training materials could fail to effectively communicate the importance of ESG issues, resulting in reduced employee engagement and understanding.	Implement a systematic review process for all ESG training materials to ensure they stay up-to-date and aligned with current industry best practices, regulations, and company policies. This control prevents the dissemination of outdated or inaccurate information. Utilize a variety of multimedia formats (videos, infographics, interactive modules) to enhance the engagement and understanding of employees. Interactive content can offer real-world scenarios and quizzes to reinforce key concepts, making the training more engaging and effective. Establish a feedback loop with employees to gather input on the effectiveness of the training materials. Incorporating employee suggestions and involving them in the content creation process can lead to more relevant and engaging training content that resonates with their experiences. Ensure that the training materials clearly emphasize the importance of ESG issues and their impact on the company's overall sustainability strategy. Connect ESG topics to the company's mission, values, and business goals to help employees understand the direct relevance of these issues to the organization's success. Promote an ongoing culture of learning by offering continuous ESG education opportunities for employees. This can include workshops, webinars, and access to additional resources beyond initial training. Encouraging employees to stay informed and up-to-date on ESG developments can boost engagement and understanding.
Insufficient Measurement and Evaluation	Without proper metrics to assess the impact of training programs, it becomes challenging to determine if employees' understanding and behavior regarding ESG issues have actually improved.	Clearly define the learning objectives of the training programs and the desired outcomes related to ESG understanding and behavior. Having specific goals in place will help in designing appropriate assessment metrics. Design a variety of assessment metrics that cover both quantitative and qualitative aspects of ESG understanding and behavior changes. This might include pre- and post-training surveys, quizzes, case studies, role-playing exercises, and observation of practical application. Implement a system for long-term follow-up and evaluation of employees' understanding and behavior changes. This can involve periodic assessments conducted at intervals after the training to measure the sustainability of the improvements. Involve key stakeholders, including subject matter experts in ESG issues and learning and development professionals, in the design and evaluation of training programs. Their insights can ensure that the chosen assessment metrics are both relevant and effective. Implement a robust data collection and analysis system to track and measure the impact of the training programs. This includes collecting both quantitative data (such as scores on assessments) and qualitative data (such as employee feedback and real-world behavior changes). Regularly analyze this data to identify trends and areas for improvement.
Lack of Continuous Learning	Sustainability is an evolving field, and without ongoing updates to training content, employees might not stay up-to-date with the latest ESG trends and practices.	Implement a structured training program that includes regular updates on ESG trends and practices. Provide employees with access to up-to-date training materials, webinars, and workshops that cover the latest developments in sustainability. This ensures that employees are well-informed about current trends and best practices. Designate individuals or teams within the organization as "Sustainability Champions." These individuals should be responsible for staying informed about the latest ESG trends and disseminating this information throughout the organization. They can organize informational sessions, share relevant news, and encourage discussions on emerging sustainability topics. Incorporate sustainability knowledge and awareness as a part of employees' performance evaluations. This incentivizes employees to stay updated on ESG trends and practices to ensure they are aligned with the organization's goals and values. Establish partnerships with external sustainability experts, consultants, or advisory firms. Regularly bring in these experts to provide insights, conduct workshops, and share industry updates with employees. Their expertise can help bridge the knowledge gap and provide a fresh perspective on evolving trends. Create internal communication channels dedicated to sustainability updates. Utilize intranets, newsletters, email updates, and collaboration platforms to share the latest ESG news, reports, and case studies. Encourage employees to actively engage in discussions and share their insights to foster a culture of continuous learning.
Lack of Engagement	Employees might not actively participate or engage in the training programs, undermining the effectiveness of efforts to raise awareness about ESG issues.	Tailor the training content to the specific needs and roles of different employee groups. Highlight how the training directly relates to their job functions and how ESG issues impact the company's performance, values, and long-term sustainability. Ensure that senior leadership actively supports and promotes the importance of ESG training. When executives and managers emphasize the significance of the training, employees are more likely to take it seriously. Regularly communicate the value of ESG training and its alignment with the company's mission. Develop training materials that are interactive, visually appealing, and engaging. Utilize multimedia, case studies, scenarios, and gamification to make the content more interesting and memorable. This can foster a sense of participation and active involvement. Provide tangible incentives, rewards, or recognition for completing ESG training programs. This could include certificates, badges, or even small rewards like gift cards. Recognize employees who demonstrate a commitment to ESG principles within their roles. Gather feedback from employees about the training content, format, and delivery. Use this feedback to continuously refine and improve the training programs. This demonstrates that the company values employee input and is committed to providing effective learning experiences.
Lack of Senior Management Support	If senior management does not actively promote and support ESG initiatives, employees might not take the training seriously, considering it as a superficial effort.	Senior management should actively communicate their commitment to ESG initiatives through internal announcements, emails, and other communication channels. This shows employees that ESG is a serious priority for the organization. Ensure that ESG initiatives are aligned with the overall business strategy and goals. When employees see that ESG is integrated into the organization's long-term plans, they are more likely to take it seriously. Define measurable ESG-related KPIs for departments and teams. Link individual and team performance evaluations to progress on these metrics, demonstrating the importance of ESG to career growth and success. Develop engaging and interactive ESG training programs that emphasize the real-world impact of ESG initiatives. Include case studies, success stories, and practical examples to make the training relevant and relatable. Establish a recognition system that highlights employees and teams who actively participate in and contribute to ESG initiatives. Recognitions could include awards, spotlights in internal communications, or other forms of acknowledgment.
Language and Cultural Barriers	In global organizations, language barriers and cultural differences could hinder the effectiveness of training materials in conveying ESG concepts across diverse employee populations.	Develop training materials in multiple languages to cater to diverse employee populations. This ensures that language barriers are minimized, and employees can access the content in their preferred language. These materials should be accurate translations that retain the intended message and concepts. Adapt training content to resonate with different cultural contexts. Cultural nuances play a significant role in communication effectiveness. Ensure that the materials are culturally sensitive, avoiding any content that may inadvertently offend or alienate employees from specific backgrounds. Utilize visual aids, infographics, videos, and interactive content to make the training materials more engaging and understandable. Visual elements can transcend language barriers and help convey complex concepts more effectively, improving comprehension for diverse audiences. Implement diverse learning approaches that cater to different learning styles and preferences. This could include online courses, webinars, workshops, peer-to-peer discussions, and mentorship programs. These approaches can help accommodate different learning paces and facilitate cross-cultural interactions. Provide employees with cross-cultural communication training to enhance their ability to work effectively in diverse teams. This training should cover not only language but also cultural norms, etiquette, and communication styles. By improving employees' intercultural competence, misunderstandings can be minimized.
Limited Accessibility	If training materials are not easily accessible or available to all employees, certain segments of the workforce might miss out on important information related to ESG issues.	Establish a centralized and easily accessible platform, such as an intranet or learning management system (LMS), where all ESG-related training materials are hosted. This ensures that all employees, regardless of their location or role, can access the information they need. Implement a communication strategy to regularly remind employees about the availability of ESG training materials and the importance of staying informed. Use various channels like email, internal newsletters, or digital signage to reinforce the message. Tailor the training content and delivery methods to different employee segments based on their roles, departments, and levels within the organization. This ensures that the training remains relevant and engaging for each group. Make ESG training a mandatory requirement for all employees, emphasizing its importance in meeting the organization's goals and values. Tie completion of the training to performance evaluations or other incentives to encourage participation. Set up feedback mechanisms, such as surveys or focus groups, to gather input from employees regarding the accessibility and effectiveness of the training materials. Use this feedback to continuously improve the training program and address any issues that arise.
Misalignment with Company Strategy	Training programs and materials might not accurately reflect the organization's ESG goals and strategies, leading to confusion among employees about the company's sustainability objectives.	Implement a structured process to review and update training programs and materials regularly. This ensures that the content remains aligned with the organization's evolving ESG goals and strategies. Assign responsibility to a cross-functional team to review and approve content updates. Establish a collaboration between ESG, sustainability, and training teams to ensure that training content accurately reflects the organization's ESG goals. Regular meetings and communication channels can facilitate alignment between these teams and reduce the chances of discrepancies. Develop a clear communication plan that informs employees about the organization's ESG goals, strategies, and updates to training content. Use multiple communication channels, such as company-wide emails, intranet announcements, and town hall meetings, to ensure consistent messaging. Set up a feedback mechanism that allows employees to provide input on training programs and materials. This can help identify any discrepancies or misunderstandings between the content and the organization's ESG objectives. Actively encourage employees to share their insights. Establish key performance indicators (KPIs) related to ESG awareness and understanding among employees. Regularly track these metrics to assess the effectiveness of training programs and identify areas where improvements are needed. This data-driven approach ensures accountability and continuous improvement.
Resistance to Change	Some employees might resist adopting sustainable practices due to a lack of understanding or personal beliefs, impeding the organization's progress toward sustainability goals.	Provide comprehensive training and education programs to help employees understand the importance of sustainable practices and their impact on the organization, society, and the environment. Offer workshops, seminars, and online resources to enhance their knowledge and skills in this area. Establish clear and open communication channels to regularly share information about the organization's sustainability goals, progress, and the rationale behind them. Address any concerns or misconceptions that employees might have, and emphasize how their involvement can contribute to a positive impact. Implement reward systems that recognize and celebrate employees who actively participate in adopting sustainable practices. This could include recognition programs, bonuses, promotions, or other tangible benefits to motivate and encourage employees to embrace sustainability initiatives. Engage senior leaders and managers as role models who actively demonstrate their commitment to sustainable practices. When employees witness leadership's genuine dedication to sustainability, it can influence their own attitudes and behaviors, making them more receptive to change. Involve employees in the decision-making process related to sustainability initiatives. Seek their input, involve them in pilot programs, and consider their feedback when designing and implementing new practices. This participatory approach can enhance their sense of ownership and reduce resistance.

This register is a starting point for risk identification and benchmarking against international practice. Adapt the risks and controls to your institution's size, products, jurisdiction and regulatory requirements.

Get the Environmental, Social and Governance register as an RCSA workbook

A spreadsheet-ready CSV with every risk and control on this page, plus blank columns for control owner, inherent likelihood and impact, control design, operating effectiveness, residual rating and actions. We confirm your email with a 6-digit code, then email you the download link.

Frequently asked questions

What are the key risks in Environmental, Social and Governance?

The main risk areas covered are Collaboration and Partnerships, Continuous Improvement, Environmental Stewardship, Governance and Ethics, Innovation and Research, Investor Relations, Reporting and Disclosure, Risk Management. Each unit lists its key risks with a short explanation and the best-practice controls that mitigate them.

How do I use this register for a risk and control self-assessment?

Select the risks that apply to your units, map the listed controls to the controls you actually operate, rate inherent risk and control effectiveness, then agree actions for gaps. The free RCSA workbook on this page has the columns ready.

Put these controls to work this month

Start on the cloud risk management software within 24 hours, or ask for training or advice tailored to your institution.

Request a software demo Ask a question