The EBA guidelines aim to establish minimum standards for the identification, measurement, and management of environmental, social, and governance (ESG) risks by financial institutions. These risks can impact the safety of institutions and must be integrated into their risk management framework. Institutions should develop specific plans to manage these risks over short, medium, and long-term time horizons.
The document is a final guide entitled "Final Guidelines on the management of ESG risks", published in 2025 by the European Banking Authority (EBA). It concerns the management of environmental, social and governance (ESG) risks by financial institutions, notably banks. The scope covers minimum requirements and reference methodologies for the identification, measurement, management and monitoring of ESG risks, with a particular focus on environmental risks, including climate-related risks. The guide applies to financial institutions subject to Directive 2013/36/EU (CRD), with an effective date set for January 11, 2026 for institutions other than small and non-complex ones, and no later than January 11, 2027 for the latter. The document comprises 151 pages, of which about 49 pages are provided for this synthesis (p. 1-49).
This EBA guide aims to establish minimum standards and reference methodologies for the management of ESG risks by financial institutions, pursuant to Article 87a(5) of Directive 2013/36/EU. The subject is crucial as ESG risks, notably environmental ones through transition and physical risks, threaten the soundness and safety of institutions by impacting all traditional categories of financial risks (credit, market, operational, reputational, liquidity, business model, concentration). The main findings show that ESG risk management is still embryonic in most institutions, with limited practices outside climate risks, and that gaps remain in the integration of ESG risks into strategies and risk management frameworks. The guide requires institutions to perform regular materiality assessments of ESG risks, integrate these risks into their risk management framework over short, medium and long horizons (at least 10 years), and use a combination of methodologies (exposure, portfolio, sector, alignment, scenarios). Institutions must develop specific plans to manage risks related to the transition to a sustainable economy, consistent with European regulatory objectives, notably carbon neutrality by 2050. These plans must include quantifiable targets, intermediate deadlines and be integrated into overall strategy and governance. The guide foresees a phased application, with proportionate measures according to the size and complexity of institutions. Recommendations notably include the integration of ESG risks into the ICAAP process, defining ESG risk appetite, developing internal capacities, monitoring via relevant indicators, and combating greenwashing. These guidelines aim to strengthen the resilience of institutions to ESG risks and ensure prudent and coherent management of these risks in the European banking sector (p. 3-4).
The document responds to the need to strengthen the European prudential framework in the face of ESG risks, which encompass environmental, social and governance risks affecting the economy and the financial sector. Climate change, environmental degradation, social and governance issues cause profound economic transformations likely to impact the safety and soundness of financial institutions. The European regulatory framework, via Directive 2013/36/EU (CRD) and Regulation 575/2013 (CRR), has introduced new provisions to integrate these risks into governance and risk management of institutions. The EBA received a legal mandate (Article 87a(5) of the CRD) to define guidelines specifying minimum standards and methodologies for the identification, measurement, management and monitoring of ESG risks, as well as the content of plans institutions must develop to manage these risks, including quantifiable targets and deadlines. These guidelines aim to ensure a uniform understanding of ESG risks, support the resilience of institutions over short, medium and long horizons, and promote prudent management in the context of the transition to a sustainable economy, in line with European objectives such as carbon neutrality by 2050. The guide takes into account interactions with other European (CSRD, CSDDD) and international regulatory frameworks, and foresees proportionate application according to the size, nature and complexity of institutions. It stresses the necessity to integrate ESG risks into strategies, risk management processes and transition plans of institutions, while allowing flexibility for adaptation to institutional specificities (p. 4-12).
- ESG Risk Management: Institutions must integrate ESG risks into their overall risk management framework, considering their potential impact on all traditional categories of financial risks (credit, market, operational, reputational, liquidity, business model, concentration). They must develop robust strategies, policies, processes and systems to identify, measure, manage and monitor these risks over short, medium and long horizons (at least 10 years) (p. 3, 27-30).
- Materiality Assessment: Institutions must conduct an annual (or biennial for small institutions) assessment of the materiality of ESG risks, specific to their business model and risk profile. This assessment must cover environmental (climate, biodiversity), social and governance risks, taking into account potential financial impacts over short, medium and long terms, and must be integrated into the ICAAP process (p. 18-20).
- Identification and Measurement Methodologies: A combination of methods must be used: individual exposure, sectoral, portfolio, portfolio alignment with climate objectives, and scenario-based analyses. Data must be collected at a granular level, including internal and external information, with particular attention to environmental, social and governance data of counterparties, notably large corporates (p. 20-26).
- Transition Plans and Management of Transition Risks: Institutions must develop specific plans to manage risks related to the transition to a sustainable economy, including quantifiable targets, intermediate deadlines, and consistency with European regulatory objectives (carbon neutrality 2050, 55% emission reduction by 2030). These plans must be integrated into overall strategy and governance, and aligned with other regulatory obligations (CSRD, CSDDD) (p. 7-10, 47-49).
- Governance and Internal Culture: Institutions must develop internal skills, ensure adequate training of board members and staff, and integrate ESG risks into risk culture, internal controls and responsibilities of the three lines of defense (p. 29-31).
- Integration into Prudential Processes: ESG risks must be integrated into ICAAP and ILAAP, considering impacts on capital and liquidity, with a forward-looking approach adapted to the size and complexity of institutions (p. 31-32).
- Specific Policies by Risk Category:
- Credit: Integration of ESG risks into sectoral policies, granting criteria and risk monitoring.
- Market: Consideration of ESG impacts on valuation and volatility of financial instruments.
- Liquidity and Funding: Analysis of ESG impacts on cash flows, value of liquid assets and stability of funding sources.
- Operational and Reputational: Identification and management of operational risks related to ESG, including litigation and greenwashing risks.
- Concentration: Management of exposure concentrations in sectors or geographic areas vulnerable to ESG risks (p. 32-37).
- Monitoring and Reporting: Implementation of effective internal reporting systems, with adapted ESG key risk indicators (KRIs), covering notably exposures to sectors highly contributing to climate change, portfolio alignment with climate objectives, and financed greenhouse gas emissions. Early warnings and escalation procedures must be in place to manage threshold breaches (p. 34-36).
- Established Facts: ESG risks, particularly environmental ones, have a growing impact on the safety and soundness of financial institutions, affecting all traditional categories of risks. Current ESG risk management is still underdeveloped and heterogeneous within European institutions. The European regulatory framework now imposes precise requirements to integrate these risks into governance and risk management (p. 3-5).
- Assumptions: The proposed methodologies rely on a forward-looking assessment of ESG risks, considering short, medium and long time horizons (at least 10 years). Availability and quality of ESG data are improving but remain uneven, justifying the temporary use of estimates and proxies (p. 18-27).
- Interpretations: Integration of ESG risks into prudential risk management is essential to ensure the resilience of institutions facing economic transformations linked to ecological transition and social and governance challenges. Transition plans must be consistent with European objectives and integrated into institutions’ overall strategy (p. 7-10, 27-37).
- Uncertainties: The forward-looking nature of ESG risks, lack of historical experience, and variability of data and methodologies introduce uncertainties in the assessment and management of these risks. Effective implementation of the guidelines will depend on the evolution of practices, data availability and institutional capacities (p. 4, 18-27).
The EBA concludes that ESG risk management must be fully integrated into the prudential framework of financial institutions to ensure their resilience to the challenges posed by the transition to a sustainable economy. Institutions must:
- Regularly conduct materiality assessments of ESG risks adapted to their profile and integrate these results into their strategies, processes and plans.
- Use a combination of robust methodologies to identify, measure and monitor ESG risks, taking into account environmental, social and governance specificities.
- Develop detailed transition plans, with quantifiable objectives and deadlines, consistent with European regulatory objectives and integrated into governance and strategy.
- Strengthen internal skills, risk culture and controls to ensure effective ESG risk management.
- Integrate ESG risks into ICAAP and ILAAP processes, as well as in policies specific to different categories of financial risks.
- Implement effective monitoring and reporting systems with adapted key indicators and alert procedures.
These recommendations aim to ensure prudent, coherent and proportionate management of ESG risks, contributing to financial stability and the transition to a more sustainable economy. The application of these guidelines will start in January 2026 for the majority of institutions, with an additional deadline for small and non-complex ones (p. 3, 6-10, 27-37).
Synthesis note written from the full document by DataSAI Academy. This note comes from the scientific library of the DataSAI Academy, open to all.