Hong Kong Environmental Risk Management in Finance: Strategies for Implementing TCFD Recommendations

In the first quarter of 2025, the Hong Kong Monetary Authority (HKMA) and the Securities and Futures Commission (SFC) jointly issued a supervisory memorandum signalling that climate-related disclosures under the Task Force on Climate-related Financial Disclosures (TCFD) framework are no longer a voluntary best practice but a baseline supervisory expectation for all authorised institutions and licensed corporations. This shift follows the HKMA’s December 2024 update to its Supervisory Policy Manual module on “Climate Risk Management,” which now mandates that banks integrate climate scenario analysis into their Internal Capital Adequacy Assessment Process (ICAAP) by mid-2026. For asset managers and broker-dealers, the SFC’s revised Fund Manager Code of Conduct, effective from 1 January 2025, requires climate-related risk disclosures in investment mandates exceeding HK$1 billion. The regulatory trajectory is clear: firms that fail to embed TCFD-aligned governance, strategy, and risk management will face heightened supervisory scrutiny, potential licence conditions, and reputational damage. This article provides a practical, step-by-step framework for implementing the four TCFD pillars—governance, strategy, risk management, and metrics and targets—within the specific context of Hong Kong’s financial regulatory environment.

Governance: Board Oversight and Management Accountability

The TCFD recommends that organisations disclose the board’s oversight of climate-related risks and opportunities, as well as management’s role in assessing and managing those issues. In Hong Kong, the HKMA’s Supervisory Policy Manual (SPM) module CR-G-1, issued in September 2024, explicitly requires the board of an authorised institution to approve the climate risk appetite and ensure that management has adequate resources to implement the risk framework. For SFC-licensed corporations, the Code of Conduct for Persons Licensed by or Registered with the SFC (the Code) imposes a general duty to act with due skill, care, and diligence—a duty that now encompasses climate risk awareness.

Step 1: Assign a Board-Level Committee. The legislation provides that the board must designate a specific committee—typically the risk committee or the audit committee—to oversee climate-related risks. The committee should receive quarterly reports on climate risk exposure, including transition risks (e.g., carbon tax impacts on portfolio companies) and physical risks (e.g., flood exposure of real estate collateral). The court procedure is that minutes of these meetings must be documented and retained for at least seven years under Cap. 155 Banking Ordinance record-keeping requirements.

Step 2: Define Management Accountability. The SFC’s Manager-In-Charge (MIC) regime under the Code requires at least one MIC to be responsible for environmental, social, and governance (ESG) risk management. For banks, the HKMA expects a Chief Climate Officer or equivalent role to report directly to the Chief Risk Officer. The ordinance provides that the designated officer must have a written terms of reference approved by the board, specifying escalation procedures for material climate events.

Step 3: Integrate into Remuneration. The HKMA’s 2024 circular on “Sound Remuneration Practices” recommends that climate risk metrics be linked to variable compensation for senior management. A practical approach is to weight 10–15% of the annual bonus pool on achievement of climate risk reduction targets, such as reducing financed emissions by a defined percentage year-on-year.

Strategy: Scenario Analysis and Business Model Resilience

The TCFD requires disclosure of the actual and potential impacts of climate-related risks and opportunities on the organisation’s businesses, strategy, and financial planning. In Hong Kong, the HKMA’s Climate Risk Stress Test (CRST) exercise, first conducted in 2023 and repeated in 2025, requires all retail banks with total assets exceeding HK$50 billion to model three scenarios: a net-zero pathway, a disorderly transition, and a “hot house world” scenario of 3°C warming by 2100.

Step 1: Select Relevant Scenarios. The ordinance provides that scenario selection must be based on the bank’s or corporation’s specific portfolio composition. For a bank with large exposure to the property sector, physical risk scenarios should include typhoon frequency and sea-level rise projections for the Hong Kong coastline, sourced from the Hong Kong Observatory’s 2024 climate projections report. For a securities firm with significant holdings in energy-sector bonds, transition risk scenarios should model the effect of the Hong Kong Climate Action Plan 2050’s carbon pricing mechanism, which is expected to reach HK$200 per tonne of CO₂ by 2030.

Step 2: Conduct Quantitative Impact Assessment. The HKMA’s CRST methodology requires banks to calculate the impact on credit risk parameters (probability of default, loss given default) under each scenario. The court procedure is that the results must be submitted to the HKMA in a prescribed format, with a narrative explanation of assumptions. For SFC-licensed firms, the Fund Manager Code of Conduct now requires that scenario analysis be applied to at least 80% of assets under management by value, with results disclosed in the annual ESG report.

Step 3: Identify Strategic Vulnerabilities. The legislation provides that firms must publish a “climate risk statement” that identifies the top three climate risks to business model resilience. For example, a bank with 40% of its mortgage portfolio in low-lying areas of the New Territories must disclose the proportion of loans exposed to 1-in-100-year flood events. The statement must be approved by the board and filed with the HKMA or SFC within 60 days of the financial year-end.

Risk Management: Integration into Existing Frameworks

The TCFD recommends that organisations disclose how they identify, assess, and manage climate-related risks. The HKMA’s SPM module CR-2 states that climate risks must be integrated into the bank’s overall risk management framework, not treated as a separate silo. For SFC-licensed corporations, the Code requires that risk management policies cover climate risks as part of the “material risks” category under the General Principles.

Step 1: Map Climate Risks to Existing Risk Categories. The court procedure is that climate risk must be mapped to credit risk, market risk, operational risk, and liquidity risk. For instance, a sudden carbon price increase may trigger credit rating downgrades for high-emitting counterparties, which falls under credit risk. The HKMA’s 2025 guidance on “Climate Risk Taxonomy” provides a standardised mapping table that all authorised institutions must adopt.

Step 2: Establish Risk Appetite Limits. The legislation provides that the board must set explicit limits for climate risk exposure. For example, a bank may set a limit that financed emissions from its corporate loan book must not exceed a baseline of 500,000 tonnes CO₂ per annum, with a reduction target of 10% per year. The SFC’s Code requires that licensed corporations set concentration limits for investments in sectors classified as “high transition risk” under the Hong Kong Green Finance Association’s taxonomy.

Step 3: Implement Monitoring and Escalation Procedures. The HKMA expects banks to have a real-time dashboard that tracks climate risk indicators, such as the proportion of loans to carbon-intensive industries or the number of properties in flood-prone zones. The ordinance provides that any breach of a climate risk appetite limit must be escalated to the board within 24 hours, with a remediation plan filed with the HKMA within seven business days. For SFC-licensed firms, a similar escalation requirement applies under the Code’s Principle 3 (Management and Control).

Metrics and Targets: Measurement, Disclosure, and Verification

The TCFD recommends disclosure of the metrics and targets used to assess and manage climate-related risks and opportunities. In Hong Kong, the HKEX’s Listing Rules (Appendix 27, Environmental, Social and Governance Reporting Guide) require listed issuers to disclose scope 1, 2, and 3 greenhouse gas emissions, with scope 3 disclosure becoming mandatory for issuers with a market capitalisation exceeding HK$10 billion from 1 January 2026. For financial institutions, the HKMA’s 2025 “Climate Risk Data Standard” requires common reporting templates for financed emissions, calculated using the Partnership for Carbon Accounting Financials (PCAF) methodology.

Step 1: Calculate Financed Emissions. The legislation provides that authorised institutions must use the PCAF standard to calculate emissions attributable to their lending and investment portfolios. The formula is: Financed Emissions = (Attribution Factor) × (Emissions of Counterparty). The attribution factor is the outstanding loan amount divided by the total enterprise value of the counterparty. For equity investments, the attribution factor is the market value of the investment divided by the enterprise value. The HKMA requires that these calculations be audited by an external assurance provider by 2026.

Step 2: Set Science-Based Targets. The SFC’s revised Fund Manager Code of Conduct encourages fund managers to set targets aligned with the Science Based Targets initiative (SBTi). For banks, the HKMA expects a target to reduce financed emissions intensity by 30% by 2030, relative to a 2024 baseline. The ordinance provides that the target must be published in the annual climate risk report and updated every two years.

Step 3: Verify and Disclose. The court procedure is that all climate metrics must be subject to independent limited assurance by a Hong Kong-accredited auditor. The HKMA’s 2025 circular on “Assurance of Climate Disclosures” specifies that the assurance provider must be a member of the Hong Kong Institute of Certified Public Accountants (HKICPA) and hold a practising certificate. The final disclosure must be filed with the HKMA or SFC within four months of the financial year-end, and for listed entities, published in the annual ESG report under Appendix 27.

Actionable Takeaways

1. Appoint a board-level climate risk committee and a designated MIC for ESG risk before the HKMA’s mid-2026 ICAAP deadline, and document all meetings with formal minutes.
2. Conduct TCFD-aligned scenario analysis for at least 80% of assets under management or loan book value, using the HKMA’s three prescribed scenarios and the Hong Kong Observatory’s 2024 climate projections.
3. Integrate climate risk into your existing risk management framework by mapping risks to credit, market, operational, and liquidity categories, and set board-approved appetite limits with 24-hour escalation procedures.
4. Calculate financed emissions using the PCAF methodology and engage an HKICPA-accredited assurance provider to audit the results before the 2026 regulatory deadline.
5. Publish a climate risk statement approved by the board within 60 days of the financial year-end, and ensure scope 3 emissions disclosure for listed entities from 1 January 2026.

This does not constitute legal advice. Consult a solicitor for your specific case.