ISO 32210 implementation for financial institutions: sustainability built into how you lend, invest and insure.

What it is

What is ISO 32210 and what is it used for?

ISO 32210 is the international guidance standard on sustainable finance for the organisations that provide it. Developed by ISO's technical committee on sustainable finance, ISO/TC 322, it sets out overarching principles, practices and shared terms for financing activities, and asks a firm to judge materiality two ways: what sustainability issues mean for the institution, and what the institution's financing means for people and the environment.

It suits firms at every stage of maturity. ISO's committee describes it as applying at asset, project and service level, across debt, equity, risk transfer, blended products and other financial services. Boards use it to test whether sustainability commitments actually reach credit and investment decisions.

Current edition. ISO 32210:2022, the first edition, published by ISO on 18 October 2022. iso.org lists it as a published standard with no revision or amendment under way. It is guidance: it contains no requirements to certify against, and ISO operates no certification scheme for it. ISO 32210 explained: the seven principles in practice

Who it is for

Who uses ISO 32210?

Any organisation that lends, invests, underwrites or advises can apply it, whatever its size or experience. Financial firms come to Sterling for ISO 32210 from four directions:

• Institutional clients and investors ask how you manage sustainability. Questionnaires probe governance, portfolio risk and targets; an ISO-based programme gives consistent, evidenced answers.
• A mandate, tender or development-finance partner expects a recognised framework. An international standard, properly applied, shows sustainability sits inside decision-making.
• Supervisors and regulators are raising expectations on climate and environmental risk. ISO 32210 does not replace any rule, but its governance, scenario and disclosure practices build the capability those expectations assume. We work alongside your legal and compliance advisers on what applies to you.
• A group parent wants one approach across subsidiaries. The principles give a common language, with local teams applying them to their own books.

Principles

What are the ISO 32210 principles and requirements?

Strictly, ISO 32210 has principles and recommended practices rather than requirements. Clause 4 states seven sustainable finance principles; clause 5, on implementation, explains how to put each one into operation. The list pairs each principle with the practices ISO names for it; your programme is checked against the standard itself as it is built.

• Governance and culture: governing-body accountability for sustainability, systematic review, and performance management and remuneration that reward the right outcomes.
• Strategy alignment and objectives: a sustainability statement or policy, benchmarking and gap analysis, a transition plan with an implementation plan, and sustainability built into new products and services.
• Risk and opportunity management and impact assessment: assessment at organisational level and at client, asset and portfolio level, scenario analysis, and alignment with the other principles.
• Stakeholder engagement: hearing the stakeholders affected by your financing, so their perspective informs what you treat as material.
• Monitoring, measuring and metrics: indicators that track sustainability performance, including an asset management plan where real assets are held.
• Reporting, transparency and assurance: communicating performance openly, with claims that can be traced and, where chosen, independently assured.
• Continual improvement and enhancing ambition: raising targets and practice as capability, data and markets mature.

Implementation route

How do you implement ISO 32210?

Because there is no certificate, success is measured by what changes in your decisions and what you can show for it. Sterling works in five stages, sized to your portfolio and your appetite for change.

1. 01
   Set the scope and the level of ambition.Agree the entities, business lines and asset classes to cover, who is asking questions, and what the board wants the programme to deliver.
2. 02
   Gap analysis: compare current practice with the seven principles.Policies, committees, credit and investment processes, data and disclosures reviewed against the guidance, with actions, owners and dates agreed.
3. 03
   Put governance, policy and the transition plan in place.Board accountability, a sustainability policy, objectives, and a transition plan linked to products, pricing and remuneration.
4. 04
   Assess risk and impact across clients, assets and portfolios.Screening and assessment built into origination and investment workflows, scenario analysis where material, and stakeholder input on what matters.
5. 05
   Measure, report, review and raise ambition.Metrics with traceable sources, an internal review before anything is published, the first report, and the next cycle planned under Sustain™.

Check what you are being offered before you sign. ISO 32210 gives guidance and ISO runs no certification for it, so treat any offer of an "ISO 32210 certificate" with caution and confirm the standard's status on iso.org yourself. If you want your sustainability report assured, ask which assurance standard the provider will apply and verify its credentials directly. The certification buyer's checklist

Cost

How much does ISO 32210 implementation cost?

A regional lender and a global asset manager need very different programmes. The fee follows the scope, and every part is shown.

Timeline

How long does ISO 32210 implementation take?

Pace depends on board calendars, the state of your data and how far processes must change. As a working estimate, allow about four to eight months to reach a first report, because risk assessments and metrics need to run long enough to produce figures worth publishing. Milestones are tracked in Effivity.

If an investor deadline or annual report date is fixed, tell us at the outset and we will plan backwards from it, flagging early where decisions are needed.

Your engagement

What your ISO 32210 engagement includes

Delivery follows Sterling OS™. You choose the level of support: Design™, where we guide and your team builds, or Drive™, where we carry the work and your people approve and own it. Automate™ is Effivity, running the programme from the first workshop, and Sustain™ keeps it current after the first report.

• Scope, gap analysis and roadmap

  Responsibilities, dates and decision owners agreed before work starts.

• Policy, governance and transition plan

  Drafted with your board, risk and business heads, on Sterling's own templates.

• Effivity ISO & GRC software

  Registers, assessments and metrics in one workspace, included with the engagement at no additional cost.

• Training for everyone

  Internal auditor training for your review team, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

• Internal review and leadership review

  An independent-minded check of the programme against its commitments before anything is published.

• First report and next cycle

  Support with the first disclosure and a plan for raising ambition next year.

Sterling does not certify, attest or validate. ISO 32210 carries no certificate, and any report assurance you commission is the assurance provider's own opinion.

Often combined with

Standards organisations pair with ISO 32210

• AA1000AA1000 implementation and requirements: apply the AccountAbility Principles and SES, then prepare for AA1000AS v3 assurance by a licensed provider.
• AML / CFT programme (FATF)AML/CFT compliance programme built on the FATF Recommendations: risk assessment, due diligence, monitoring, reporting, records and training, in one all-inclusive proposal.
• APRA CPS 234 and CPS 230APRA CPS 234 and CPS 230 compliance for banks, insurers and super funds: information security, operational risk, continuity and service providers, all-inclusive proposal.
• B Corp CertificationB Corp certification made clear: the new B Lab Standards, Foundation Requirements, seven Impact Topics, the audit route and how Sterling prepares you.
• Basel and UK operational resilienceOperational resilience compliance for PRA and FCA firms: important business services, impact tolerances, mapping, scenario testing and the Basel principles.
• BSP circulars (Philippines)BSP circulars compliance for Philippine banks and BSFIs: IT risk management, information security, business continuity and outsourcing, in one all-inclusive proposal.