← Back to all briefings
Compliance 5 min read Published Updated Credibility 89/100

Compliance — Climate risk

HKMA’s GS-1 Climate Risk Management module establishes board accountability, risk integration, and disclosure expectations that Hong Kong banks must embed into strategy and ICAAP planning.

Kodi C.

Editor & Research Lead

Accuracy-reviewed by the editorial team

Compliance pillar illustration for Zeph Tech briefings
Compliance controls, audit, and evidence briefings

On 30 December 2021 the Hong Kong Monetary Authority (HKMA) issued Supervisory Policy Manual module GS-1 Climate Risk Management, codifying supervisory expectations for authorized institutions (AIs) on governance, strategy, risk management, and disclosure of climate-related financial risks.12 The module builds on HKMA’s three-phased approach to integrating climate risk and requires banks to show board-level oversight, strong data and scenario capabilities, and transparent reporting aligned with global standards.

Governance expectations

  • Board accountability. Boards must approve climate risk appetites, integrate climate considerations into corporate strategy, and receive regular reporting on exposures, mitigation progress, and scenario analysis outcomes.2
  • Management responsibilities. Senior management should embed climate risk roles across business, risk, finance, and sustainability functions, ensuring clear lines of responsibility and escalation.2
  • Policies and resources. AIs must adopt policies covering climate risk identification, measurement, monitoring, and control, and allocate sufficient resources (staff, systems, training) to implement them.2

Strategy and risk appetite

HKMA expects banks to assess how physical and transition risks affect business models, product offerings, and geographic footprints. Climate considerations should be incorporated into strategic planning, capital allocation, and new product approval processes.2 Banks must establish climate risk appetites with quantitative and qualitative metrics (for example, portfolio emissions, sector concentration limits) and integrate them into internal targets and remuneration frameworks.

Risk management integration

  • Risk identification. AIs should map climate risk drivers to existing risk types (credit, market, liquidity, operational, reputational) and identify vulnerable sectors and counterparties.2
  • Measurement. Banks must develop methodologies to quantify climate exposures using scenario analysis, stress testing, and portfolio heat maps. HKMA encourages use of international scenarios (NGFS) and development of internal scenarios tailored to Hong Kong and Mainland China exposures.2
  • Risk controls. Incorporate climate factors into credit underwriting, collateral valuation, portfolio management, and operational resilience. Review risk limits and early warning indicators to reflect climate vulnerabilities.
  • Monitoring. Establish regular monitoring and reporting of climate metrics to management and the board, using HKMA’s Common Assessment Framework to benchmark maturity.1

Data and systems

HKMA emphasizes the need for strong data governance covering emissions metrics, geographic exposures, and supply-chain dependencies. Banks should implement data quality controls, metadata documentation, and processes to address data gaps via proxies or external providers.2 Systems must support scenario calculations, dashboarding, and integration with core risk platforms.

Stress testing and ICAAP

AIs will incorporate climate risk scenarios into their Internal Capital Adequacy Assessment Process (ICAAP) and capital planning. HKMA’s 2021–2025 roadmap anticipates periodic supervisory reviews of climate stress testing capabilities; banks should prepare to show methodologies, assumptions, and management actions.12 Recovery planning should consider climate-driven stress events, such as acute weather disruptions or rapid policy shifts.

Disclosure requirements

  • TCFD alignment. HKMA encourages banks to adopt Task Force on Climate-related Financial Disclosures (TCFD) recommendations, covering governance, strategy, risk management, and metrics/targets.2
  • Quantitative metrics. Disclosures should include financed emissions, portfolio alignment metrics, exposure to carbon-intensive sectors, and progress toward transition targets.
  • Qualitative narratives. Banks should describe governance structures, scenario analysis results, risk appetite statements, and engagement with clients on transition strategies.

How to implement this

  1. Assessment. Perform a GS-1 gap analysis, using HKMA’s Common Assessment Framework to evaluate current maturity across governance, risk management, and disclosures.1
  2. Action plan. Develop a board-approved roadmap detailing milestones, resource needs, and timelines for closing gaps—typically within 12–18 months.
  3. Integration. Embed climate risk metrics into risk appetite, credit policies, and investment decisions; integrate with ESG frameworks and sustainability financing initiatives.
  4. Scenario capability. Build or improve scenario modeling tools, incorporating NGFS pathways, local climate data, and customer-specific transition plans.
  5. Disclosure improvements. Align annual reports and sustainability disclosures with TCFD, ensuring consistency with regulatory submissions and investor communications.

Controls and assurance

  • Internal audit. Plan periodic audits of climate governance, data quality, and scenario modeling processes.
  • Model validation. Establish independent validation for climate scenario models, including back-testing where feasible.
  • Compliance monitoring. Track adherence to HKMA guidance, monitor regulatory developments, and maintain evidence for supervisory reviews.

program risks and mitigations

  • Data limitations. Mitigation: engage with industry consortia, data providers, and clients to improve data availability; document assumptions and use sensitivity analyzes.
  • Capability gaps. Mitigation: invest in training, hire climate risk specialists, and use external consultants or academic partnerships.
  • Operational complexity. Mitigation: integrate climate risk into existing risk systems, avoid siloed spreadsheets, and automate reporting where possible.
  • Regulatory scrutiny. Mitigation: maintain transparent documentation, early communication with HKMA, and readiness for thematic examinations.

What comes next

HKMA will monitor setup through supervisory reviews, thematic examinations, and engagement with the Green and Sustainable Finance Cross-Agency Steering Group.1 Banks should expect evolving guidance on climate stress testing, data templates, and disclosure requirements. Early investment in governance, data, and scenario capabilities will support compliance, investor expectations, and participation in sustainable finance markets.

Further reading

This brief equips banks with HKMA-aligned climate risk frameworks, stress-testing models, and disclosure playbooks.

Disclosure roadmap

HKMA encourages banks to publish climate-related disclosures annually and to progressively improve quantitative metrics as data quality improves.2 Institutions should map GS-1 expectations to existing sustainability reports, align with TCFD timelines, and coordinate with parent bank reporting where applicable. Establish disclosure working groups with representation from finance, risk, investor relations, and sustainability teams to ensure consistent messaging.

Collaboration and external engagement

AIs will engage with industry initiatives such as the Green and Sustainable Finance Cross-Agency Steering Group, the International Sustainability Standards Board, and regional central bank forums.1 Participation helps access to shared data repositories, scenario tools, and good practices, and shows commitment during supervisory discussions.

Client engagement

HKMA expects banks to engage clients in high-emitting sectors to understand transition plans, support decarbonisation, and manage reputational risks.2 Document engagement strategies, escalation triggers for clients with limited progress, and criteria for adjusting lending terms or offering sustainable finance products.

Data strategy

Develop multi-year data strategies that map internal and external data sources, establish data stewardship roles, and evaluate emerging taxonomies (EU, Mainland China, ISSB) for consistent classification of green and brown assets.

Similar analysis

Additional analysis covering similar themes.

Continue in the Compliance pillar

Return to the hub for curated research and deep-dive guides.

Visit pillar hub

Latest guides

  • Third-Party Risk Oversight Playbook

    Operationalize OCC, Federal Reserve, EBA, and MAS outsourcing expectations with lifecycle controls, continuous monitoring, and board reporting.

  • Compliance Operations Control Room

    Implement cross-border compliance operations that satisfy Sarbanes-Oxley, DOJ guidance, EU DORA, and MAS TRM requirements with verifiable evidence flows.

  • ESG Assurance Operating Guide

    Deploy credible ESG assurance across CSRD, SEC climate disclosure, and ISSA 5000 requirements with regulator-aligned controls, data governance, and audit-ready evidence.

Coverage intelligence

Published
Coverage pillar
Compliance
Source credibility
89/100 — high confidence
Topics
Climate risk · HKMA · Environmental compliance · Banking supervision
Sources cited
3 sources (hkma.gov.hk, iso.org)
Reading time
5 min

Further reading

  1. HKMA issues GS-1 Climate Risk Management module — hkma.gov.hk
  2. Supervisory Policy Manual GS-1 Climate Risk Management — hkma.gov.hk
  3. ISO 37301:2021 — Compliance Management Systems — International Organization for Standardization
  • Climate risk
  • HKMA
  • Environmental compliance
  • Banking supervision
Back to curated briefings

Comments

Community

We publish only high-quality, respectful contributions. Every submission is reviewed for clarity, sourcing, and safety before it appears here.

    Share your perspective

    Submissions showing "Awaiting moderation" are in review. Spam, low-effort posts, or unverifiable claims will be rejected. We verify submissions with the email you provide, and we never publish or sell that address.

    Verification

    Complete the CAPTCHA to submit.