Assess, continuously monitor, and manage third-party ESG risks
The European Banking Authority (EBA) Guidelines on the Management of Environmental, Social, and Governance (ESG) Risks detail how EU-regulated financial institutions should identify, measure, manage, and monitor these risks to ensure short, medium, and long-term resilience goals. The Guidelines establish a comprehensive framework for financial institutions to manage ESG-related risks and will go into effect on January 11, 2026, and on January 11, 2027, for small and non-complex institutions.
While the Guidelines primarily focus on institutions' internal processes, they also emphasize the importance of considering ESG risks associated with third-party entities, such as clients, suppliers, counterparties, and other business partners.
The Mitratech Third-Party Risk Management solution includes a dedicated ESG assessment to assess third parties against a number of ESG topics correlated with continuous external monitoring into vendor practices and regulatory mapping to address EBA requirements.
Determine ESG risks associated with clients, suppliers, and other external parties.
Assess how entities' ESG practices may impact the institution's risk profile.
Outline strategies for maintaining resilience in the face of ESG-related disruptions.
Integrate third-party ESG risks into the institution's overall risk management processes to ensure effective monitoring and mitigation of potential risks.
Prepare plans to address financial risks stemming from ESG factors, including those arising from third-party relationships.
How Does ESG Fit Into Your TPRM Program?
Our 14-page guide shares a best practices framework for incorporating ESG into your third-party risk management program.
Build comprehensive supplier profiles that compare and monitor vendor ESG scores, sustainability ratings, firmographic data, recent business and reputational insights, and financial performance. Compare ESG scores against other vendors in RFx responses for informed sourcing decisions.
Centralize the onboarding, distribution, discussion, retention, and review of vendor contracts, and leverage workflow to automate the contract lifecycle, ensuring enforcement of ESG requirements.
Use a simple assessment with clear scoring to track and quantify inherent risks for all onboarded suppliers.
Leverage a dedicated ESG risk assessment that examines risks from 10 common ESG domains including: Community; CSR strategy; Emissions; Human Rights; Innovation; Management; Product Responsibility; Resource Use; Shareholders; and Workforce.
Continuously monitor scope 1, 2 and 3 data for a supplier's direct and indirect emissions, carbon EVIC (equivalent value in cash) intensity for each supplier, as well as for bribery and corruption, labor, and modern slavery concerns in a central vendor dashboard.
Access qualitative insights from over 550,000 public and private sources of reputational information, including negative news, regulatory and legal actions, sanctions, adverse media, OFAC violations, conflicts of interest and more.
Tap into financial information from a network of millions of businesses across 160+ countries. Access 5 years of organizational changes and financial performance, including turnover, profit and loss, shareholder funds, and more.
Screen against a global PEP database with access to over 1.8 million politically exposed person profiles, including families and associates, to instantly identify potential leadership risks.
Enable vendors to submit proactive event assessments related to environmental disclosures, board changes, notifications and other events – and dynamically update their risk scores based on the results.
Normalize, correlate, and analyze assessment results and continuous monitoring intelligence for unified risk reporting and remediation.
Simplify ESG compliance reporting by mapping assessment results and risks to common ESG frameworks such as, EU Corporate Sustainability Reporting Directive (CSRD), German Corporate Supply Chain Due Diligence Act (LkSG), Global Reporting Initiative (GRI), ISO 26000, Sustainability Accounting Standards Board (SASB), Task Force on Climate-Related Financial Disclosure (TCFD), and United Nations Global Compact (UNGC).
Take actionable steps to reduce ESG risk with built-in remediation recommendations and guidance.
Store and distribute energy, pollution, diversity, accounting, and conflict of interest policy documents and more for dialog and attestation. Leverage built-in automated document analysis based on AWS natural language processing and machine learning analytics to confirm key criteria are addressed.
Identify, alert, and communicate exceptions to common behavior with built-in report templates.
Reduce the potential for business disruption by ensuring that new vendors adhere to legal environmental and labor practices.
Add context to cybersecurity assessments and automate the scheduling, collection, analysis, management, and remediation of vendor risks in a central platform.
Ensure that supply chain partners have sound ESG policies in place to reduce the risk of fines, non-compliance, and reputational damage.
Environmental, social and governance practices are under increasing regulatory scrutiny. How well is your third-party risk...
Run these 5 plays to align procurement and IT security for success on the TPRM field.
Discover key insights into ESG compliance, focusing on third-party risk management, adherence to regulations, and an...