Banking Risk · Sustainable Finance · Audit

Green Finance & Climate Risk in Banking

A practical review framework for banks, finance companies, risk teams, compliance officers and internal auditors. Use it to organise governance reviews, identify evidence gaps and challenge climate-related risk controls—not as a substitute for applicable law, the institution’s approved policies or professional judgment.

Jurisdiction focus: Bangladesh, with international reference material where relevant. Source review date: 28 October 2026.

1. Regulatory starting points

Climate Risk Management

Begin with Bangladesh Bank’s November 2025 Guideline on Climate Risk Management for Banks and Finance Companies. Map the applicable expectations to board oversight, risk management, business processes, monitoring and reporting.

Read the official Bangladesh Bank guideline (PDF)

Sustainability & Climate Disclosure

Review the institution’s disclosure governance, data ownership, methodology, consistency and evidence trail against the applicable Bangladesh Bank disclosure guideline and subsequent instructions.

Read the 2023 disclosure guideline (PDF)

Environmental & Social Risk

Assess how environmental and social due diligence is integrated into credit origination, approval, monitoring, escalation and portfolio reporting. Confirm the currently applicable version and amendments before testing.

Check Bangladesh Bank’s official circular register

Currency control: A circular’s publication date does not by itself establish that it remains the latest applicable instruction. Before relying on a requirement, check the issuing authority’s register for amendments, replacement instruments, effective dates and scope. This page is professional review support, not legal advice or a regulator-issued interpretation.

2. Governance and control review

Board & senior management

  • Approved responsibilities and escalation routes are documented.
  • Climate and environmental risks are considered in the institution’s risk appetite and relevant policies.
  • Management information reaches the appropriate governance forum with recorded decisions.

Risk identification & assessment

  • Physical and transition risk drivers are identified where material to the portfolio and business model.
  • Risk assessments document methodology, assumptions, data limitations and review frequency.
  • Material exposures are connected to relevant credit, market, liquidity and operational risk processes.

Credit & portfolio controls

  • Environmental and social screening and due diligence are evidenced where required.
  • Approval conditions, covenants, exceptions and monitoring actions are traceable.
  • Sector and geographic concentrations are considered using justified methods and available data.

Data, disclosure & assurance

  • Data lineage, ownership, quality checks and estimation methods are documented.
  • Disclosed metrics reconcile to source records and approved reporting.
  • Internal audit findings, remediation owners, deadlines and retest evidence are retained.

3. Practical audit-testing matrix

Control areaSuggested testEvidence to requestPotential red flag
GovernanceTrace a material climate-risk issue from identification through committee review and decision.Board/committee minutes, risk appetite, policy, action register.No clear accountability, decision trail or escalation.
Risk assessmentReperform a sample risk assessment and challenge key assumptions and data limitations.Methodology, source data, assumptions, validation and approval records.Unsupported assumptions or undocumented overrides.
Credit due diligenceSample relevant credit files and trace screening results into approval and monitoring decisions.Screening forms, due diligence, approvals, covenants and follow-up.Missing due diligence or exceptions without approval.
Portfolio monitoringTrace a reported exposure or risk indicator to source systems and investigate changes over time.Portfolio reports, data extracts, reconciliations and escalation records.Unexplained movements, stale data or absent escalation.
DisclosureReconcile selected published metrics to underlying records and approved reporting.Disclosure workpapers, sign-offs, calculation logic and reconciliations.Inconsistent figures, unclear methodology or unsupported claims.
RemediationRetest a closed finding and verify evidence demonstrates sustainable correction.Issue log, root-cause analysis, action evidence and retest results.Closure based on assertion rather than independently checked evidence.

Sampling note: Select samples based on risk, materiality, portfolio exposure and applicable requirements. These are suggested audit procedures, not a prescribed regulatory sample size.

4. Suggested evidence register

For each test, record the requirement or policy reference, control objective, population and sample rationale, evidence identifier, test steps, result, exception severity, root cause, responsible owner, due date and retest outcome. Distinguish verified facts from observations, inferences, assumptions and unverified items.

Use a consistent assurance sequence: DISCOVER → INSPECT → VERIFY → TEST → CHALLENGE → ASSESS → RISK-RATE → REMEDIATE → RETEST → ASSURE.

5. International reference points

Basel Committee

Use the Basel Committee’s climate-related financial risk principles as an international reference point, while separately identifying which expectations are adopted or applicable in Bangladesh.

Basel Committee — climate-related financial risks

Disclosure standards

Where useful, compare disclosure practices with the IFRS Sustainability Disclosure Standards. Do not imply that international standards automatically create a local legal obligation.

IFRS Sustainability Standards Navigator

6. Related RegTech Nexus AI resources

Source and use disclaimer

This resource is an independent educational and audit-support framework published by RegTech Nexus AI. It is not issued, endorsed or approved by Bangladesh Bank, BIS, Basel Committee or IFRS Foundation. Confirm the latest official instruments, institutional applicability and any amendments before making compliance decisions. No climate-risk score, regulatory status or compliance conclusion is generated by this page.