Scope 3 Emissions Risk Assessment for Financial Institutions

Financed emissions are the climate risk hiding in plain sight on every bank’s balance sheet. While a mid-size commercial bank’s direct operational emission (Scope 1 and 2) might total a few thousand tons of CO2 equivalent per year, the emissions embedded in its lending and investment portfolio routinely exceed that figure by a factor of 700 or more.

The PCAF standard puts it bluntly: for most financial institutions, Scope 3 Category 15 emissions account for over 99% of their total carbon footprint.

Yet the measurement gap remains enormous. Boston Consulting Group’s Carbon Emissions Survey found that only 12% of organizations globally measure Scope 3 emissions, even though the World Resources Institute estimates that over 90% of all corporate emissions fall into this category.

That disconnect creates a blind spot in enterprise risk management programs. Transition risk, credit risk, and stranded asset exposure cannot be quantified without reliable financed emissions data.

This guide provides a structured approach to conducting a Scope 3 emissions risk assessment for financial institutions.

Each section maps to established standards (GHG Protocol, PCAF, TCFD, ISO 31000) and connects emissions measurement to practical risk management actions: portfolio stress testing, KRI design, capital allocation decisions, and board reporting.

The focus is on Category 15 (financed emissions), but the methodology extends to facilitated and insurance-associated emissions under the expanded PCAF v3 framework.

Why Scope 3 Emissions Are the Defining Risk for Financial Institutions

Banks, asset managers, insurers, and pension funds occupy a unique position in the climate transition. They do not drill oil or operate steel mills, but they allocate the capital that makes those activities possible.

That allocation creates financial exposure to every climate-related risk the underlying economy faces: carbon pricing, regulatory shifts, physical damage, technology disruption, and litigation. Scope 3 Category 15 captures the magnitude of that exposure in a single, measurable metric.

The financial logic is straightforward. A commercial bank with $50 billion in lending to fossil fuel, heavy manufacturing, and agriculture sectors carries embedded transition risk in those portfolios.

When carbon prices rise, demand for high-emission products falls, or regulators mandate emissions reductions, the creditworthiness of those borrowers changes.

Measuring financed emissions turns that abstract risk into a quantifiable input for credit risk assessment models, concentration analysis, and sector allocation decisions.

Scope 3 Categories Most Relevant to Financial Institutions

The Regulatory Landscape: Where Things Stand in 2026

The U.S. regulatory picture for climate disclosure has fractured. At the federal level, the SEC adopted climate disclosure rules in March 2024, but excluded Scope 3 from the final version and limited Scope 1 and 2 reporting to material emissions only.

The SEC then withdrew its defense of even that scaled-back rule in March 2025 under Acting Chairman Uyeda, and as of September 2025, the Eighth Circuit litigation remains in abeyance. All three federal banking regulators, the OCC, FDIC, and Federal Reserve, withdrew from the Network of Central Banks and Supervisors for Greening the Financial System (NGFS) in early 2025. The OCC also rescinded its climate-related financial risk management guidance for large banks.

State-level requirements are advancing despite the federal retreat. California’s SB 253 requires Scope 1 and 2 reporting by January 2026, with Scope 3 following in January 2027, for companies doing business in the state with annual revenues exceeding $1 billion.

SB 261 separately requires climate risk disclosures aligned with the TCFD framework. International obligations remain binding for any U.S. institution with European operations: the EU’s CSRD (now post-Omnibus) and ISSB’s IFRS S2 both require Scope 3 disclosure.

The ISSB issued targeted amendments to IFRS S2 in December 2025 that maintain mandatory financed emissions disclosure under Category 15 while providing flexibility on derivatives, facilitated emissions, and insurance-associated emissions.

Current Regulatory Framework: U.S. and International

The PCAF Framework: Measuring Financed Emissions

The Partnership for Carbon Accounting Financials provides the technical backbone for any Scope 3 emissions risk assessment in the financial sector.

Established in 2015 and now comprising over 700 signatory institutions globally, PCAF offers standardized methodologies aligned with the GHG Protocol’s Corporate Value Chain Standard.

The December 2025 third edition represents a major expansion, organized into three parts plus supplemental guidance.

Part A covers financed emissions (the core standard), now expanded to ten asset classes: listed equity and corporate bonds, business loans and unlisted equity, project finance, commercial real estate, mortgages, motor vehicle loans, sovereign debt, use-of-proceeds structures, securitizations and structured products, and sub-sovereign debt.

Part B addresses facilitated emissions from capital market activities (underwriting), applying a 33% attribution factor to distinguish these from direct financing. Part C covers insurance-associated emissions, expanded in v3 to include project insurance and treaty reinsurance.

PCAF Attribution Formula

The core calculation follows a straightforward attribution logic. An institution’s share of a borrower or investee’s emissions equals the outstanding amount of the institution’s exposure divided by the total enterprise value (or total equity plus debt), multiplied by the borrower’s total GHG emissions.

The formula: Attributed Emissions = (Outstanding Amount / Enterprise Value) x Borrower’s Scope 1 + 2 (+ 3 where available) Emissions. The challenge lies in the inputs. Enterprise value fluctuates with markets.

Borrower emissions data is often incomplete, estimated, or outdated. That is why PCAF built a risk assessment into the process through its five-tier data quality scoring system.

PCAF Data Quality Scoring System

Conducting a Scope 3 Emissions Risk Assessment: Step-by-Step

A Scope 3 emissions risk assessment for a financial institution combines emissions measurement (the PCAF methodology) with risk analysis (the ISO 31000 framework).

The goal is not just to calculate a number but to translate that number into actionable risk intelligence: which sectors concentrate your transition exposure, which counterparties face the highest repricing probability, and where portfolio reallocation can reduce risk while preserving returns.

Step 1: Define Scope and Boundaries

Determine which asset classes and business lines fall within your assessment perimeter. Start with the most material categories.

Lending portfolios (business loans, commercial real estate, project finance) and investment portfolios (listed equity, corporate bonds) typically account for the vast majority of financed emissions. Identify the consolidation approach: will you report at the entity level, group level, or specific fund level?

Align boundaries with existing risk register structures and regulatory reporting entities. Document any exclusions and the rationale (e.g., retail mortgages below a de minimis threshold in Phase 1).

Step 2: Map Counterparty Data Availability

Before calculating anything, audit your data infrastructure. Can you extract outstanding exposure amounts by counterparty or sector?

Do you have access to counterparty-level emissions data (CDP disclosures, sustainability reports, third-party data providers)? Map each major exposure to the appropriate PCAF data quality tier.

This mapping exercise reveals your starting position and shapes your data improvement roadmap. Institutions with predominantly Score 4–5 data should plan a phased approach, starting with the 20% of counterparties that drive 80% of portfolio emissions.

Step 3: Calculate Financed Emissions by Asset Class

Apply the PCAF attribution formula to each in-scope exposure. Use the highest-quality data available for each counterparty, and record the data quality score alongside each calculation.

Aggregate by sector, geography, and risk rating. The output is your financed emissions inventory: total attributed emissions (tCO2e), emissions intensity (tCO2e per million dollars lent/invested), and a weighted average data quality score. This inventory is the foundation for everything that follows.

Build it in a repeatable, auditable process. Scenario analysis becomes possible only once this baseline exists.

Step 4: Translate Emissions into Risk Metrics

Raw emissions data becomes useful when converted into risk language that credit committees, portfolio managers, and boards can act on. Key translations include: emissions intensity by sector versus industry benchmarks (identifying laggards), concentration of financed emissions in carbon-intensive sectors as a percentage of total portfolio, implied temperature rise of the portfolio using methodologies like the SBTi Portfolio Coverage approach, sensitivity of emissions-intensive exposures to carbon price scenarios (e.g., $50/tCO2, $100/tCO2, $150/tCO2), and probability-weighted expected loss from transition risk events (regulatory shifts, technology disruption, demand destruction).

These risk metrics integrate directly into existing risk assessment matrices and credit scoring frameworks.

Step 5: Stress Test Portfolio Under Climate Scenarios

Use established climate scenarios from the Network for Greening the Financial System (NGFS) or the International Energy Agency (IEA) to stress test your portfolio. Standard scenarios include: orderly transition (Net Zero by 2050), disorderly transition (delayed policy action followed by sharp correction), and hot house world (limited policy action, high physical risk).

Map each scenario to sector-specific impacts on revenues, costs, asset values, and default probabilities. Quantify the portfolio’s financial exposure under each scenario using Monte Carlo simulation or deterministic sensitivity models. Present results as a tornado chart showing which sectors and counterparties drive the most variance under stress.

Step 6: Design KRIs and Monitoring Framework

Embed financed emissions into your ongoing key risk indicator framework. Effective climate-related KRIs for financial institutions include: financed emissions intensity (tCO2e/$M) with quarterly tracking and threshold triggers, percentage of portfolio with PCAF data quality Score 3 or better, sector concentration in high-emission industries relative to risk appetite limits, number of counterparties with validated science-based targets, and transition risk exposure under the institution’s chosen carbon price scenario.

Set RAG (red/amber/green) thresholds aligned with the institution’s risk appetite statement. Report KRIs through existing KRI dashboards to the board risk committee.

Step 7: Report and Disclose

Structure your disclosure to satisfy multiple frameworks simultaneously. A well-documented Scope 3 emissions risk assessment can serve PCAF signatories, TCFD-aligned reporters, ISSB IFRS S2 preparers, and CSRD/ESRS E1 filers.

The minimum disclosure package includes: total financed emissions by asset class and sector, data quality scores and improvement trajectory, methodology description and key assumptions, integration with climate strategy and transition planning, and governance structure for climate risk oversight.

Third-party limited assurance is increasingly expected. Design your documentation and controls with an internal audit lens from Day 1.

Integrating Scope 3 Emissions into Enterprise Risk Management

A Scope 3 emissions risk assessment should not live in a sustainability silo. The findings feed directly into at least five established ERM processes: credit risk management (adjusting PD/LGD models for transition-exposed counterparties), market risk (valuation adjustments for carbon-intensive assets), operational risk (process changes for data collection and reporting controls), strategic risk (portfolio allocation shifts toward lower-emission sectors), and regulatory compliance (satisfying disclosure mandates across jurisdictions).

The Three Lines Model provides the governance structure. First-line business units own counterparty data collection and initial emissions calculations. Second-line risk functions validate methodologies, set thresholds, and aggregate portfolio-level metrics. Third-line internal audit assesses the adequacy of climate risk controls, data quality governance, and disclosure accuracy. This structure maps cleanly to the COSO ERM framework and ISO 31000 principles, both of which emphasize embedding risk management into organizational decision-making rather than treating it as a standalone compliance exercise.

Overcoming Data Challenges in Scope 3 Measurement

Data quality is the single biggest obstacle to credible financed emissions measurement. PwC has noted that emissions data is often incomplete, inconsistent, or entirely missing for certain asset classes.

Complex fund structures add layers of separation between financial institutions and underlying portfolio companies. The PCAF data quality framework acknowledges this reality by providing a graduated path: start with what you have (even Score 5 sector estimates), disclose your quality scores transparently, and improve systematically over time.

Practical strategies for accelerating data improvement include: prioritizing engagement with the top 50 counterparties by emissions contribution (which typically cover 70–80% of portfolio emissions), leveraging third-party data providers (CDP, MSCI, S&P Global Trucost, Bloomberg) to supplement reported data, embedding emissions data requests into loan origination and annual review processes, participating in industry data-sharing initiatives through the PCAF community, and aligning internal IT risk management processes to support emissions data ingestion and validation.

Moving from spreadsheet-based calculations to integrated technology platforms is a critical maturation step. PwC recommends assessing the reporting capabilities of your current technology stack, determining whether existing systems can consume and process emissions data, and evaluating compatibility with your firm’s broader ERM technology strategy.

Implementation Roadmap

Common Pitfalls and How to Avoid Them

Looking Ahead: Trends for 2026–2028

The PCAF standard’s expansion to ten asset classes signals where the industry is heading: comprehensive coverage of every way a financial institution deploys capital. The December 2025 updates also introduced supplemental guidance on financed avoided emissions and forward-looking metrics.

These optional disclosures allow institutions to report the climate benefits of financing renewable energy and efficiency projects alongside their portfolio’s embedded emissions. Expect these to become standard practice within two reporting cycles.

The ISSB’s December 2025 amendments to IFRS S2 provide pragmatic relief on the most difficult sub-categories (derivatives, facilitated emissions, insurance-linked emissions) while maintaining the core requirement for financed emissions disclosure. As jurisdictions adopt IFRS S2 into local law, including Canada’s voluntary ISSB-aligned standards and the EU’s ongoing ESRS simplification, interoperability will improve.

Financial institutions that invest in a robust PCAF-based methodology now will satisfy multiple disclosure frameworks with a single data architecture.

Physical risk integration is the next frontier. Current Scope 3 assessments focus predominantly on transition risk (carbon pricing, regulatory shifts, technology change).

But physical risk, including asset-level exposure to flooding, wildfire, extreme heat, and sea level rise, directly affects the creditworthiness of financed entities. Connecting financed emissions to physical risk models using scenario analysis and geospatial data creates a more complete climate risk picture.

Financial institutions that build this capability early will have a significant analytical advantage over peers.

The U.S. regulatory trajectory remains uncertain, but market-driven demand for climate risk transparency is not. Institutional investors, sovereign wealth funds, and pension schemes increasingly require their banking and asset management counterparties to disclose financed emissions and demonstrate credible transition planning.

Companies that meet this demand proactively, rather than waiting for regulatory compulsion, will secure competitive advantages in capital access, client retention, and talent attraction. Building a mature risk quantification capability around financed emissions is no longer optional for any financial institution serious about its long-term viability.

Ready to build your Scope 3 emissions risk assessment program? Visit riskpublishing.com/services for implementation frameworks, PCAF-aligned templates, and expert consulting support. Need help connecting financed emissions to your ERM framework? Contact our team to discuss your roadmap.

References

1. PCAF Global GHG Accounting and Reporting Standard, 3rd Edition (December 2025) — The foundational standard for measuring financed emissions across ten asset classes

2. PCAF Standard Part A: Financed Emissions, Full Document (2025) — Complete methodology document for financed emissions calculation

3. ESG News: PCAF Expands Global GHG Accounting Standard (December 2025) — Coverage of the PCAF v3 expansion and new asset class methodologies

4. PwC: Financial Institutions and Financed Emissions — Practical guidance on PCAF implementation and technology readiness

5. GHG Protocol: Financial Sector Scope 3 Guidance — GHG Protocol financial sector guidance development summary

6. ASUENE: IFRS S2 Update — Scope 3 Reporting Eased for Financial Institutions — Analysis of December 2025 ISSB amendments to IFRS S2

7. SEC: Climate-Related Disclosures Final Rule (March 2024) — Official rule text and compliance timeline

8. Harvard Law: Regulatory Climate Shift — SEC Climate Disclosure Update (September 2025) — Current status of SEC climate rule litigation

9. Columbia Climate Law Blog: 100 Days of Trump 2.0 — U.S. Financial Regulation Retreat — Analysis of OCC, FDIC, and Fed withdrawal from NGFS and climate guidance

10. Wolters Kluwer: Carbon Accounting for Banks in 7 Steps — Practical implementation guide for bank carbon accounting

11. Workiva: Measuring Financed Emissions with the PCAF Standard (January 2026) — Overview of PCAF Part A methodology for banks

12. McKinsey: Understanding the SEC’s Climate Risk Disclosure Rule — McKinsey analysis of Scope 3 financed emissions challenges for banking

13. Morningstar Sustainalytics: Mandatory Scope 3 Reporting — Most Companies Are Unprepared — Data on Scope 3 disclosure rates and data quality challenges

14. Springer Nature: Estimating Scope 3 Emissions in the Global Investment Network (2026) — Peer-reviewed research on network-based Scope 3 measurement

15. PCAF Home: 700+ Financial Institutions Taking Action — PCAF signatory community and resources

Chris Ekai

Chris Ekai is a Risk Management expert with over 10 years of experience in the field. He has a Master’s(MSc) degree in Risk Management from University of Portsmouth and is a CPA and Finance professional. He currently works as a Content Manager at Risk Publishing, writing about Enterprise Risk Management, Business Continuity Management and Project Management.