Why ESG Integration Must Start with Risk Discipline

Cutting directly to the heart of the complexity surrounding ESG integration, the Head of ESG at a Nordic digital bank told CeFPro’s recent Vendor Risk conference event in Dallas that “sustainability in an organization derives from risk.”

For many organizations, the challenge is not understanding sustainability requirements, but implementing them in a way that creates real value.

The executive argued that the current wave of ESG regulation, including frameworks such as CSRD and CSDDD, is often misunderstood. “I don’t think it’s an issue at all,” he said.

“It gives you more time to actually do things.” Rather than viewing regulation as a burden, organizations should treat it as an opportunity to build more effective risk-driven processes.

Yet the gap between theory and practice remains significant. “There’s a huge gap between how you comply and how you actually do something that bears fruit,” he explained.

Many firms approach ESG as a standalone function, separate from existing risk and operational frameworks. This, he warned, is a fundamental mistake.

“You need to embed the process and not build something new,” he said. Creating parallel ESG structures leads to duplication, inefficiency, and a lack of buy-in.

Instead, sustainability must be integrated into enterprise risk management, ensuring alignment across functions.

The starting point is materiality. Without a clear understanding of what matters most, organizations risk spreading resources too thin. “I’ve seen materiality assessments ending up with 25 topics,” he noted. “It’s way too much.”

Effective ESG integration requires prioritization. By identifying a small number of material topics, organizations can focus resources where they will have the greatest impact.

This process must consider both impact and risk, ensuring alignment with strategic objectives.

From there, integration into enterprise risk management becomes critical. By embedding ESG risks into ERM frameworks, organizations can better understand dependencies, exposures, and potential impacts.