Short answer
The answer, before the reasoning
IFRS S1 risk-management disclosure should explain the process, not only list risks. Describe the inputs, parameters, data sources and scope; whether and how scenario analysis supports identification; how nature, likelihood and magnitude are assessed; how sustainability-related risks are prioritised relative to other risks; how they are monitored; what changed from the previous period; the separate process for opportunities; and the extent to which these processes are integrated into and inform enterprise risk management.
A generic statement of ERM integration is not sufficient.
LRA Knowledge Hub visual - branded for editorial and learning use.
Source-grounded educational draft. Final LRA technical sign-off is required before publication.
PUBLIC ARTICLE
In practice
FORMAT
| FORMAT | LANGUAGE | VERSION |
|---|---|---|
| Tier 3 Deep Guide | British English | 1.0 • 1 August 2026 |
Rule
WHO THIS IS FOR
Enterprise risk management, sustainability, finance, strategy, internal audit, legal and operational teams, plus consultants and reviewers preparing or assessing IFRS S1 risk-management disclosure.
Technical status
STANDARD STATUS
IFRS S1 and the original IFRS S2 requirements are effective for annual reporting periods beginning on or after 1 January 2024, with earlier application subject to applying the companion Standard at the same time. The current IFRS S2 issued text incorporates targeted greenhouse gas amendments issued in December 2025. Those amendments apply for annual periods beginning on or after 1 January 2027, with earlier application permitted, and do not alter the governance, strategy or risk-management architecture explained in this article.
Disclose the process, not only the list of risks
IFRS S1 risk-management disclosure enables users to understand how the entity identifies, assesses, prioritises and monitors sustainability-related risks and opportunities, including whether and how those processes integrate into and inform overall risk management. A risk list or a statement that sustainability is integrated into ERM does not explain the process.
Figure 1. IFRS S1 requires process disclosure covering risks, opportunities, monitoring, change and integration into enterprise risk management.
In practice
| PROCESS COMPONENT | DISCLOSURE QUESTION | EVIDENCE |
|---|---|---|
| Inputs and parameters | Which data sources, scope, assumptions, time horizons and criteria are used? | Methodology, source register, scope map, parameters and version log. |
| Identification | How are new, emerging and changing risks and opportunities identified, including scenario use? | Screening process, workshops, scenarios, external alerts and challenge records. |
| Assessment | How are nature, likelihood and magnitude assessed using qualitative and quantitative criteria? | Assessment criteria, evidence, expert judgement and calculation files. |
| Prioritisation | How are sustainability-related risks prioritised relative to other risks? | Risk appetite, thresholds, ranking rationale and escalation. |
| Monitoring | Which indicators, thresholds and events trigger review or action? | Dashboard, alerts, reassessment record and committee reporting. |
| Change and integration | What changed in the process, and how does it inform ERM and overall risk profile? | Change log, ERM taxonomy, risk register, management and board approval. |
What IFRS S1 requires in the risk-management pillar
IFRS S1 paragraphs 43-44 require information about the processes and related policies used to identify, assess, prioritise and monitor sustainability-related risks, the separate process used for opportunities, and the extent to which both processes are integrated into and inform overall risk management.
In practice
| REQUIRED PROCESS DETAIL | PRACTICAL MEANING |
|---|---|
| Inputs and parameters | Describe data sources and the scope of operations covered, together with other material parameters used in the process. |
| Scenario analysis | Explain whether and how scenario analysis informs identification of sustainability-related risks. IFRS S2 contains climate-specific scenario requirements. |
| Nature, likelihood and magnitude | Describe qualitative factors, quantitative thresholds or other criteria used to assess risk effects. |
| Relative prioritisation | Explain whether and how sustainability-related risks are prioritised relative to other types of risk. |
| Monitoring | Explain how risks are monitored and which data or conditions support ongoing review. |
| Process changes | Explain whether and how the process changed from the previous reporting period. |
| Opportunities | Describe the process used to identify, assess, prioritise and monitor opportunities rather than assuming the risk process automatically covers them. |
| ERM integration | Explain the extent to which the sustainability process is integrated into and informs the entity's overall risk-management process. |
Rule
WHAT IFRS S1 DOES NOT PRESCRIBE
The Standard does not prescribe a specific ERM framework, one risk taxonomy, a universal likelihood-impact matrix, fixed thresholds, a particular risk-appetite format or a mandatory process diagram. These are entity choices. The disclosure must explain the process actually used and material changes to it.
Inputs, parameters and scope: make the process reproducible
A disclosure becomes reproducible when a reviewer can understand what went into the process and which parts of the entity and value chain were covered. Generic wording such as "we consider internal and external factors" is too broad to support this understanding.
In practice
| INPUT / PARAMETER | DISCLOSURE DETAIL | CONTROL |
|---|---|---|
| Scope | Reporting entities, business units, geographies, facilities, value-chain stages, asset types and exclusions. | Scope approval and reconciliation to the reporting entity and business model. |
| Data sources | ERM, incidents, audit, legal, finance, strategy, operations, stakeholder and external data. | Source owner, date, reliability and limitation. |
| Time horizons | Short, medium and long term linked to strategic and financial planning. | Consistent definitions across risk and strategy disclosures. |
| Assessment criteria | Nature, likelihood, magnitude, velocity, persistence, concentration or other entity criteria. | Methodology version, definitions and calibration. |
| Thresholds and appetite | Criteria for escalation, prioritisation, acceptance or monitoring. | Governance approval and consistency with overall risk appetite. |
| Scenario parameters | Scenarios, assumptions, scope, time horizon and use in identification or assessment. | Scenario governance and link to strategy or resilience analysis. |
| Uncertainty | Data gaps, estimates, model limits, expert judgement and alternative outcomes. | Uncertainty log and reviewer challenge. |
Rule
CONSISTENCY CONTROL
The scope, time horizons and assumptions described in risk management should be consistent with the strategy, metrics and financial-effect disclosures or significant differences should be explained. A risk process covering only controlled operations cannot silently support a strategy narrative that claims value-chain coverage.
Identification and scenario analysis
Identification should capture existing, emerging and changing risks and opportunities. The process can combine scheduled reviews with event-driven triggers such as acquisitions, supplier changes, new regulation, incidents, technology change, significant shifts in customer demand or updated scientific evidence.
IFRS S1 asks whether and how scenario analysis informs identification of sustainability-related risks. This does not mean every non-climate sustainability risk requires the same scenario method. The entity should explain the role scenario analysis actually plays. IFRS S2 is more specific: climate-related scenario analysis is used to assess climate resilience, and climate risk-management disclosure explains whether and how it informs risk identification.
In practice
| IDENTIFICATION CHANNEL | WHAT IT CAN REVEAL | EVIDENCE |
|---|---|---|
| Business-model review | Dependencies, concentrations, strategic vulnerabilities and opportunity pathways. | Value-chain map, segment and asset analysis. |
| ERM and operational risk | Existing incidents, controls, thresholds and loss experience. | Risk register, incident data, KRIs and control findings. |
| Strategy and scenario work | Future conditions, alternative pathways, long-horizon or compound risks. | Scenario assumptions, outcomes and strategic challenge. |
| External horizon scan | Regulation, technology, markets, environment, society and peer experience. | Source list, assessment of relevance and date. |
| Impact and stakeholder evidence | Impacts or relationship changes that can become financial risk or opportunity drivers. | Due diligence, complaints, engagement, environmental and workforce evidence. |
| Finance and transaction review | Financial-statement assumptions, covenant, insurance, valuation and acquisition exposure. | Forecasts, valuation papers, financing and due diligence. |
Assess nature, likelihood and magnitude without hiding judgement
IFRS S1 refers to the nature, likelihood and magnitude of risk effects and gives qualitative factors, quantitative thresholds and other criteria as examples. It does not require one numerical score. A well-controlled process defines each criterion, records evidence and preserves expert judgement rather than allowing a weighted average to conceal a severe or strategically important exposure.
In practice
| ASSESSMENT DIMENSION | POSSIBLE QUESTIONS | CAUTION |
|---|---|---|
| Nature | What type of effect could occur: operational, market, legal, strategic, reputational, financing or asset-related? | Do not reduce different mechanisms to one label without explanation. |
| Likelihood | What is the range of possible outcomes and how likely are they within the time horizon? | Consider uncertainty and low-probability, high-impact outcomes. |
| Magnitude | What could be the effect on cash-flow amount, timing or uncertainty, access to finance or cost of capital? | Quantification can be a range or qualitative where justified; absence of precision is not absence of risk. |
| Velocity and duration | How quickly could effects emerge and how long might they persist? | Useful practice, but not a separately prescribed IFRS S1 criterion. |
| Concentration and correlation | Could several exposures affect the same site, supplier, customer or financial variable? | Do not miss aggregate or compound effects by assessing items only in isolation. |
| Control and response | What is inherent exposure, what responses exist and what residual risk remains? | Avoid assuming a policy or plan eliminates exposure. |
Rule
LRA IMPLEMENTATION PRACTICE
A scoring model can support consistency, but the disclosure should describe the underlying criteria and judgement. The model should include override and challenge mechanisms for low-probability high-impact events, concentrations, non-linear effects and cases where data quality is weak.
Prioritisation relative to other risks
IFRS S1 asks whether and how sustainability-related risks are prioritised relative to other types of risk. This is more informative than stating that sustainability risk is integrated into ERM. The disclosure should explain how the same or appropriately calibrated criteria, appetite, escalation and reporting mechanisms are applied, and where sustainability-specific features require additional treatment.
Partial integration can be reported honestly. For example, climate risk may be fully embedded in the central ERM platform while workforce or biodiversity risks still use specialist assessments that are reconciled annually. The disclosure should explain the extent and method of integration rather than using an unqualified claim.
In practice
| INTEGRATION TEST | QUESTIONS FOR REVIEW |
|---|---|
| Common taxonomy | Can sustainability-related risks be located within the entity's overall risk universe without losing their specific drivers and time horizons? |
| Common criteria or calibrated criteria | Are likelihood, magnitude and time horizons comparable with other risks, and are differences documented? |
| Risk appetite and escalation | Do sustainability risks trigger the same governance routes, or are special thresholds used and explained? |
| Aggregation | Can related sustainability risks be aggregated with operational, strategic, financial or compliance risks without obscuring the causal pathway? |
| Management action | Are owners, actions, resources and residual risk recorded in the same system or reconciled to it? |
| Reporting | Do management and board reports show relative priority and changes in the overall risk profile? |
Opportunities require their own process
The opportunity process often disappears from risk-management disclosure because opportunities are managed in strategy, innovation or commercial teams. IFRS S1 nevertheless requires disclosure of the processes used to identify, assess, prioritise and monitor sustainability-related opportunities.
In practice
| OPPORTUNITY STEP | PRACTICAL QUESTIONS | POSSIBLE EVIDENCE |
|---|---|---|
| Identify | Which changes in markets, technology, resources, regulation or stakeholder demand could create an opportunity? | Horizon scan, customer research, innovation pipeline, strategic review. |
| Assess | What business model, capability, investment, dependency and uncertainty affect realisation? | Business case, scenario, capacity and supply analysis. |
| Prioritise | How is the opportunity compared with other uses of capital and strategic options? | Investment criteria, portfolio review, hurdle rates and decision record. |
| Monitor | Which indicators show progress, demand, delivery, risk and financial return? | Milestones, customer orders, pipeline, capex, margin and dependency indicators. |
| Govern | Who approves the opportunity, monitors assumptions and decides whether to continue, change or stop? | Committee mandate, stage-gate records, target and budget review. |
In practice
| MYTH | Opportunities are marketing or innovation matters and do not belong in risk-mana |
|---|---|
| REALITY | IFRS S1 asks for the process used to identify, assess, prioritise and monitor sustainability-related opportunities. The process can sit in strategy or innovation, but the disclosure should explain it and how it connects to overall decision-making. |
Monitoring, process changes and event-driven review
Monitoring should explain more than annual risk review. The entity should identify the data, indicators, thresholds, external developments and events used to detect changing exposure or performance. Monitoring may include leading indicators, outcomes, control performance and financial variables.
IFRS S1 also requires disclosure of whether and how the process changed from the previous reporting period. Material changes might include new value-chain scope, different data, revised thresholds, adoption of scenario analysis, a new opportunity process, integration into a central ERM platform or changes after an acquisition or significant incident.
In practice
| MONITORING TYPE | EXAMPLES | TRIGGER / ACTION |
|---|---|---|
| Exposure | Assets in affected locations, supplier concentration, revenue exposure, workforce dependency. | Increase beyond appetite, new concentration or changed scope. |
| Driver | Regulation, price, technology, physical conditions, stakeholder or market change. | Reassessment, scenario update or strategic review. |
| Response | Implementation milestones, capex, training, supplier remediation or product development. | Delay, cost variance, dependency failure or control exception. |
| Outcome | Incident, loss, customer behaviour, productivity, resource availability or opportunity realisation. | Risk rating change, corrective action or disclosure update. |
| Financial | Margin, impairment indicators, cash-flow sensitivity, insurance, covenant or funding conditions. | Finance escalation, forecast update or financial-statement review. |
Rule
CHANGE LOG CONTROL
Maintain a process change log with the previous method, new method, reason, affected risks or opportunities, effect on comparability and approvals. This turns a generic "methodology improved" statement into traceable evidence.
Hypothetical example: partial ERM integration
A strong disclosure should state the extent of integration honestly. It can explain that climate and workforce risks use the central taxonomy, criteria, appetite and reporting routes; nature and community risks use specialist assessments with defined reconciliation and escalation; and the opportunity process is being standardised, including a planned register and monitoring fields.
The stronger wording is more useful because it describes the method, extent and limitations of integration. It does not claim that every process is identical or mature.
Hypothetical scenario
HYPOTHETICAL SCENARIO
A diversified services group has integrated climate and workforce risks into its central ERM platform. Nature-related and community risks are assessed through specialist operational processes and reconciled to ERM during the annual risk review. Opportunities are managed through the strategy investment process and are not yet recorded consistently in the risk system.
Illustrative only. It shows how the decision is made, not wording that can be copied or relied on.
In practice
| WEAK WORDING | STRONGER ILLUSTRATIVE WORDING |
|---|---|
| Sustainability risks and opportunities are fully integrated into our enterprise risk management process. | Climate and workforce risks are recorded in the central ERM system and assessed using the group likelihood, magnitude and escalation criteria, with adjustments for longer time horizons. Nature-related and community risks are assessed by operational specialists and reconciled to the ERM universe during the annual review or earlier when defined trigger events occur. Sustainability-related opportunities are assessed through the strategy investment process; during the reporting period the group began introducing common opportunity fields and monitoring milestones. This means integration is complete for some risk categories and partial for others. |
In practice
Common risk-management disclosure errors and final review
| ERROR | WHY IT FAILS | CORRECTION |
|---|---|---|
| Publishing only a risk list | Users cannot understand how the universe was built or maintained. | Describe inputs, scope, identification, assessment, prioritisation and monitoring. |
| Saying "integrated into ERM" without detail | The extent, method and effect of integration are unclear. | Explain taxonomy, criteria, appetite, systems, owners, reporting and limitations. |
| Omitting opportunities | The disclosure is incomplete and strategy teams operate outside the reporting architecture. | Document the opportunity process and its governance. |
| Presenting a heat map as the methodology | The chart does not explain evidence, definitions, overrides, uncertainty or aggregation. | Describe criteria and judgement; retain calculation and calibration evidence. |
| Using only annual review | Significant events and changing exposure can be missed. | Add event-driven triggers and monitor leading indicators. |
| Not explaining process change | Comparability and the reason for changing risk conclusions are obscured. | Maintain and disclose material methodology changes. |
| Confusing the risk process with the disclosure materiality judgement | The process may identify risks, but the report still needs a separate judgement about material information. | Document both decisions and their evidence trail. |
Readiness
Final process disclosure checklist
- • ☐ Inputs, parameters, data sources and operational scope are described.
- • ☐ The role of scenario analysis in risk identification is explained and matches actual practice.
- • ☐ Nature, likelihood and magnitude criteria are understandable and not hidden behind a score.
- • ☐ Prioritisation relative to other risk types and risk appetite is explained.
- • ☐ Monitoring covers indicators, thresholds, events and changes in exposure or response.
- • ☐ Material process changes from the prior period are disclosed.
- • ☐ The opportunity process is explained separately and connected to strategy and investment decisions.
- • ☐ The extent and method of ERM integration are described, including partial integration and limitations.
- • ☐ Scope, time horizons and assumptions reconcile with strategy, metrics and financial-effect disclosures.
- • ☐ The public narrative is supported by methodology, register, source, decision, change and approval records.
Bottom line
A decision-useful IFRS S1 risk-management disclosure makes the process visible: what information enters, how judgements are made, how risks and opportunities are prioritised and monitored, what changed, and how the results shape the entity's overall risk profile and ERM decisions.
Official source anchors
The source set below should be rechecked as part of the pre-publication update control. Normative conclusions are based on current official IFRS Foundation sources. Registers, templates, reviewer tests and drafting structures identified as LRA practice are implementation aids rather than prescribed IFRS forms.
1. IFRS S1 General Requirements for Disclosure of Sustainability-related Financial Information. Issued June 2023; current issued text. Main anchors: paragraphs 43-44, supported by paragraphs 21-23, 30-42 and application guidance B1-B12 and B39-B44. Open official source
2. IFRS S2 Climate-related Disclosures. Current issued text incorporating the December 2025 targeted greenhouse gas amendments. Open official source
3. ISSB educational material: Sustainability-related risks and opportunities and the disclosure of material information. November 2024. Non-mandatory educational material that does not add to or change the Standards. Open official source
4. IFRS Sustainability Standards Navigator. Official standard status, effective dates and supporting materials for IFRS S1 and IFRS S2. Open official source
Take it with you
The checklists as a working spreadsheet
Every checklist and table on this page, with empty status, owner and evidence columns for your team to fill in and keep.
✓ LRA AI Assistant · Human-in-the-loop
Ask about this guide
It answers from this page, and reaches into the linked disclosure cards when your question is about the standard itself. Your first two answers are free without signing in.
Go deeper · IFRS S1 / S2
IFRS S1 and S2 training
Financial materiality, scenario analysis and the S2 climate disclosures, applied to your own reporting.
Available as Guided Flex, Live Cohort, 1:1 Expert Mentorship or Corporate Programme.
