ESG risks have decisively moved from the margins of sustainability reporting into the core of prudential supervision. What was once perceived primarily as a disclosure or reputational topic should be now firmly embedded into governance, risk management and capital planning frameworks across the European banking sector.
The revised EU Banking Package encompassing CRR III and CRD VI in combination with granular technical standards and guidelines mandated to the EBA is envisaging ESG risks integration across three pillars of prudential banking supervision:
- Pillar 1 – so called “minimum” requirements for capital and liquidity adequacy: primary focus is on internal models-based approaches and how they could factor a broader range of factors sensitive to climate and environmental events and changes;
- Pillar 2 – so called “additional” requirements for capital and liquidity adequacy: stressing the importance on integration of ESG risks into governance frameworks, risk management practices, capital planning and stress-testing, supervisory review and evaluation process and capital buffers calibration; and
- Pillar 3 – so called “transparency” requirements: deal with the integration of ESG risks related datapoints into prudential reporting and public disclosures.
This means that climate and broader ESG risks are no longer treated as emerging or ancillary concerns, but as fully‑fledged risk drivers that must be identified, measured, managed and monitored in the same way as traditional financial risks.
Key prudential framework elements and their implementation in Luxembourg
Across EU the integration of ESG risks into prudential supervision is progressing rapidly and Luxembourg is taking steps to ensure alignment. Key framework elements and the respective implementation dates are as follows:
- CRR III (Regulation (EU) 2024/1623)
Entered into force in all EU member-states as of 1 January 2025 and introduced definitions of ESG risks and extended scope of application for ESG public disclosures to all institutions.
- CRD VI (Directive (EU) 2024/1619)
The transposition in Luxembourg began with the submission of Bill n°8627 to the Parliament in October 2025, amending the Law of 5 April 1993 on the financial sector. The parliament published draft law on 13 February 2026. The final adoption is expected soon considering the (overdue) January 2026 deadline attributed to the legislative process.
CRD VI represents a decisive step in cementing ESG risks within the prudential rulebook. For the first time, climate and environmental risks are explicitly incorporated into requirements relating to risk identification, measurement, management and monitoring as well as internal capital adequacy assessment process, governance, strategy and transition planning, supervisory review and evaluation process and stress testing.
- EBA Guidelines on the management of environmental, social and governance (ESG) risks (EBA/GL/2025/01)
These guidelines supplement CRD VI, making requirements more granular and targeted. The original EBA Guidelines entered into force and are applicable to ECB-supervised banks as of 11 January 2026.
The CSSF adopted the EBA Guidelines on ESG Risks Management through dedicated CSSF Circular 26/905 applicable to Less Significant Institutions other than Small non-complex institutions (SNCIs) from 1 April 2026. The CSSF Circular 21/773 is also amended to reflect its narrowed scope of application, as it will remain applicable to SNCIs until 10 January 2027, as well as to third-country branches.
CSSF adopted phased approach to implementation of the EBA Guidelines on ESG Risks Management
- EBA Guidelines on environmental scenario analysis (EBA/GL/2025/04)
These guidelines supplement EBA Guidelines on ESG risk management with the specific focus on the scenario analysis and stress testing methodologies. The original EBA Guidelines entered into force and will be applicable to ECB-supervised banks as of 11 January 2027. The CSSF has not yet fully adopted these guidelines.
- Other EBA technical standards and guidelines expected
There is also a number of technical standards and guidelines currently under consultation process (for example, technical standard on ESG Pillar III disclosure templates and guidelines on supervisory review and evaluation process and supervisory stress testing). Some other guidelines may be further revised to ensure coherence with the evolving prudential framework (for example when it comes to internal governance and remuneration).
Where banks still need to enhance their practices
Despite significant progress, ESG risk management is inherently iterative and wide‑ranging in its impacts. Observing the evolving framework and supervisory feedback, the following are areas that banks should seek to enhance:
- ESG risks assessment maturity
Assessment of ESG risk impacts should be gradually upgraded in terms of scope (e.g. nature and biodiversity), data feeds, sophistication of methodologies, etc. Considering that this is a starting point for application of proportionality principles, robust analysis and comprehensive justification is a must.
- Information availability, quality and usability
To adequately navigate complex notions of ESG risks and make informed decisions, Banks need to solve their data gaps, and do so in the Omnibus-adjusted environment. Spending more time on analytics rather than collection / quality assurance should be the end goal.
- Scenario analysis and stress testing methodologies
Scenario analysis and stress testing represent another frontier. While frameworks and guidance are now in place, translating climate scenarios into quantitative impacts on portfolios, capital and liquidity remains complex. Integrating these results meaningfully into ICAAP and ILAAP processes requires further methodological development and close collaboration between risk, finance and business functions.
- Business model evolution and transition plans
Translating ESG risk assessments into concrete changes in credit lifecycle management, pricing, supply chain decisions and ICT infrastructure requires organisational alignment and sustained investment. Prudential transition plans, linking risk assessments to forward‑looking financial impacts and strategic choices, are emerging as a critical tool in this process. Moreover, such plans will form a part of SREP package.
Enforcement signals and supervisory pressure
Recent enforcement actions at European level underline the seriousness with which supervisors now treat climate and environmental risks. As of 2025 and early 2026, the ECB has begun issuing penalties linked specifically to deficiencies in climate risk management, marking a new phase in supervisory enforcement. For example, ABANCA and Crédit Agricole were fined EUR 188,000 and EUR 7.6m respectively. These actions send a strong signal to the market: ESG risk management failures are no longer tolerated as transitional shortcomings.
In Luxembourg, the CSSF has reaffirmed in its latest supervisory priorities that ESG risk management remains a core prudential focus for banks. The supervisor will continue targeted inspections on governance and credit risk — increasingly embedding ESG aspects — and may conduct inspections specifically focused on ESG risks.
Looking ahead: beyond compliance towards the competitive advantage
Climate and environmental risks are now firmly embedded in the European prudential framework. For Luxembourg banks, the coming years will be characterised by continued supervisory scrutiny, evolving methodologies and increasing expectations around integration and effectiveness.
The direction of travel is clear: ESG risk management is no longer about preparing for future regulation; it is about operating effectively within an already transformed regulatory landscape. Institutions that invest early in robust governance, data‑driven methodologies and strategic integration will not only meet supervisory expectations but also strengthen resilience and position themselves to support the economic transition.
Indeed, Europe’s transition towards a Net Zero economy is driving profound changes across industries, requiring substantial investment and transformation. Banks play a critical role in financing this transition, supporting clients as they adapt business models, investing in new technologies and managing transition risks. Institutions that develop robust ESG risk assessment and pricing capabilities are better positioned to identify opportunities, structure sustainable finance products and engage proactively with clients.
In Luxembourg, this strategic dimension is already visible. Growth in sustainability‑linked lending and sustainable bond issuance reflects both client demand and banks’ increasing capacity to align financial products with environmental objectives. However, realising the full potential of sustainable finance requires strong risk management foundations, ensuring that transition opportunities are assessed consistently with prudential soundness.
