How Is the Integration of Climate-Related Risk into Enterprise Risk Management at Firm Level? A Systematic Literature Review

Although climate change is increasingly recognized as a material risk for firms, the extent to which climate-related risks are operationally integrated into enterprise risk management (ERM) processes remains unclear. This article presents a structured literature review to answer the question of how firms have integrated climate risk assessment, considering both physical and transition risks, into ERM processes. Following the PRISMA 2020 protocol, 22 published articles from Web of Science and Scopus, published between 2018 and 2026, were included in the review. Articles covering financial institutions, as well as policy-only and sectoral-only studies, were excluded. The articles were screened through five eligibility criteria: firm-level focus, governance, risk assessment, climate risk management and/or ERM, and type of climate risk. All articles were assessed by two researchers to reduce bias, and Cohen’s kappa was calculated. Following coding and qualitative analysis, the findings indicate that firms have advanced governance structures, disclosure practices, and analytical assessment tools for climate risk assessment, while operational integration into ERM systems remains limited. Results also reveal persistent integration gaps, including strategic–operational disconnection, temporal and methodological mismatches, symbolic implementation, and systemic and knowledge barriers. These challenges constrain the effective translation of climate risk information into risk management practices and strategic planning. Overall, the study, based only on academic literature, concludes that climate risk integration is still incomplete and weakly embedded within ERM systems. In the expanding regulatory landscape, particularly with IFRS S2, the study provides a baseline for understanding current firm-level practices and future developments in climate risk integration at the academic level.