EXECUTIVE SUMMARY
Corporate sustainability disclosures and due-diligence information can support a bank’s assessment of climate risk, but they do not replace prudential analysis. Map the counterparty information each material risk decision needs, recognising differences in reporting scope, jurisdictions and data availability. Combine reported data, vendor inputs and proxies with documented limitations. Test the approach on a priority portfolio, then agree owners, resources and review milestones. Retain evidence showing how the analysis informed lending, liquidity and capital decisions.
The decision
We recommend commissioning one risk-led transition-planning programme that connects counterparty information to lending, liquidity and capital decisions. Agree which portfolios need attention first, the decisions the programme must support and the evidence management will bring back for review.
In short, CSRD, simplified ESRS, CSDDD and ISSB define what data and governance companies are required to put in place. Prudential transition plans define how banks turn that information into a coherent view of climate transition risk and how they use it in credit decisions, climate stress testing and capital planning.
Why it matters
Prudential transition plans now sit at the core of how European banks turn climate policy into balance sheet decisions. The EBA Guidelines on the management of ESG risks apply from 11 January 2026, except for small and non-complex institutions, for which they apply by 11 January 2027 at the latest. The environmental scenario analysis Guidelines apply from 1 January 2027. Supervisors expect banks to show how transition risk flows through ICAAP, ILAAP and portfolio steering, not just ESG reports.
The EU has adopted the Omnibus amendments to its sustainability rulebook. The revised CSRD scope generally covers EU companies with more than 1,000 employees and net annual turnover above EUR 450 million. Separate group and non-EU rules also apply. On 3 July 2026, the Commission adopted revised ESRS, announcing reductions of over 60 percent in mandatory datapoints and more than 70 percent overall. Regulation (EU) 2026/1563 was published on 21 September 2026, enters into force on 10 November 2026 and applies to financial years beginning on or after 1 January 2027. For banks, this means fewer raw data points from many clients and a bigger responsibility to build robust ESG data strategies, blending reported ESRS data with vendor inputs, proxies and disciplined model governance before it ever enters prudential transition plans.
The Corporate Sustainability Due Diligence Directive was amended by Directive (EU) 2026/470. Its general thresholds for EU companies are now more than 5,000 employees and net worldwide turnover above EUR 1.5 billion, with separate rules for non-EU companies and certain franchising and licensing arrangements. The climate-transition-plan duty under CSDDD has been removed. Member States must transpose the amendments by 26 July 2028 and apply them from 26 July 2029. The Article 16 reporting measures apply to financial years starting on or after 1 January 2030. That may reduce compliance pressure for many firms, but it does not reduce prudential expectations. Banks still have to treat environmental and human rights due diligence failures as real drivers of credit, operational and reputational risk, whether or not a counterparty sits inside the narrowed CSDDD scope.
Options and trade-offs
Outside the EU, IFRS S1 and S2 provide a global baseline for sustainability-related financial disclosures, with IFRS S2 focused on climate. They are effective as issued for annual reporting periods beginning on or after 1 January 2024, while each jurisdiction determines whether and when they become mandatory locally. For internationally active banks, prudential transition plans now need to weave ESRS based information for EU clients together with ISSB based data elsewhere, using a consistent set of climate scenarios, risk taxonomies and narratives across investor reporting, regulatory submissions and internal risk management.
We suggest choosing the implementation scope according to the bank's exposures and existing systems:
- Start with the most exposed portfolios. This gives teams a focused test of the data and decision process. Set a route for extending the method so that separate pilots do not create inconsistent assumptions.
- Build a common bank-wide approach. This can support consistency across businesses and jurisdictions, but requires more coordination and an agreed data model. Prioritise the decisions that need a common answer.
What to do next
- Map the information gap. Produce an inventory of material counterparty data, its source, known limitations and the risk decision it supports.
- Test a decision. Use a selected portfolio or credit file to show how scenarios, proxies and judgement affect the proposed terms, limits or monitoring.
- Commission the next stage. Present a short decision paper setting out the work, resources, owners, unresolved assumptions and review milestones.
Ownership and oversight
We suggest that the chief risk officer sponsors the programme, with a named executive responsible for delivery. Credit, finance, treasury, sustainability and data teams should own their contributions. The relevant board committee should challenge material assumptions and risk-appetite implications. Management should resolve implementation issues within its delegated authority and escalate exceptions.
Evidence and review
We recommend retaining the data inventory, scenario versions, material assumptions, model limitations and decision records together. Ask for examples showing where the information changed a credit, liquidity or capital decision, alongside cases where it did not and the reason. Review material data gaps, missed milestones and changes in rules or counterparty plans at the agreed governance cycle.