Temps de lecture : 7 min
Ecrit par Florian Masseube
"It is not the strongest who survive, but those who adapt best to change."
— Charles Darwin
Climate, geopolitical instability, rising inequalities, regulatory acceleration… Companies today navigate a shifting, complex, sometimes unpredictable environment. And in this turbulent sea, one word keeps coming back insistently: resilience.
But being resilient is not just about resisting shocks. It is about anticipating them, adapting to them, and turning them into levers for transformation. This is where risk management takes on its full strategic dimension. And when it is coupled with a Corporate Social Responsibility (CSR) approach, it becomes much more than a protective tool: it becomes a driver of sustainable performance.
1. Risks and CSR: two concepts now inseparable
For a long time, risk management focused on financial, operational, or legal dimensions. We talked about claims, accidents, compliance failures. But this view is now largely outdated.
Companies are facing systemic, often invisible or poorly mapped risks, but with potentially devastating impacts: climate disruption, loss of biodiversity, social movements, ethical consumer expectations, supply chain disruptions related to irresponsible practices… All of these factors can directly affect business continuity, reputation, and even access to financing.
👉 CSR thus becomes an essential prism for thinking about risks differently: more broadly, more finely, more strategically.
And this is not a figment of the imagination. The European CSRD directive now requires certain companies in Europe to conduct a double materiality analysis, a tool that requires looking at both:
- The risks that the world imposes on the company (financial materiality),
- And those that the company imposes on the world (impact materiality).
Group Ebra double materiality matrix: 2024 Sustainability Report
2. Working on risks is investing in its sustainability
Caring about its CSR risks is not a sign of pessimism. It is a sign of strategic clarity.
Several concrete benefits emerge from this approach:
- Anticipating disruptions : by understanding weak signals, one avoids being caught off guard by a sudden change (e.g.: bans on certain substances, changes in reporting standards, societal pressure…).
- Gaining the trust of stakeholders : employees, investors, and customers today seek companies that take their impact seriously.
- Meeting regulatory requirements : CSRD, duty of vigilance, green taxonomy… obligations are multiplying, and sanctions for non-compliance are too.
- Strengthening the robustness of business models : a company that secures its critical resources, trains its employees on ESG issues, and engages with its stakeholders is naturally more resilient.
📊 A McKinsey study shows that companies integrating ESG criteria strategically are 2.6 times more likely to be considered leaders in long-term performance.
3. What approaches to manage CSR risks? A stepwise maturity progression
The good news is that it is not necessary to be a multinational to get started. There is a progression that is accessible and suitable for all sizes of companies, from small businesses to mid-sized enterprises. Here is a 4-step process (it is possible to stop at step 1 and have a gradual approach in the process) :
🔹 Step 1: The enriched CSR SWOT — to structure the initial reflection
The SWOT (strengths, weaknesses, opportunities, threats) is a simple yet remarkably effective tool to start thinking about CSR strategically. The idea here is to integrate an ESG reading grid.
Examples :
- Strength : locally established company with short supply chains → competitive advantage.
- Weakness : dependence on an imported raw material with a high carbon impact.
- Opportunity : development of the market for responsible products.
- Threat : tightening of environmental regulations or consumer pressure.
🎯 The challenge is to go beyond the classic diagnosis to bring forth a broader understanding of the environment in which the company operates.
🔹 Step 2: The mapping of CSR risks — to prioritize critical issues
Once the major trends are identified, it is time to move on to a more detailed analysis of the risks: their probability of occurrence, their potential impact, and the company's ability to manage them.
This mapping can be done through simple matrices (probability x impact) and collaborative workshops involving different functions of the company: production, HR, finance, communication…
Examples of risks to consider:
- Energy shortage,
- Social pressure on working conditions,
- Reputational risk regarding supplier practices,
- Climate-related events impacting logistics.
🔍 At this stage, it is already about breaking out of the silo: CSR becomes a shared, cross-cutting, strategic topic.
Reworld Media Non-Financial Report: 2021 Non-Financial Report
🔹 Step 3: Stakeholder consultation — to enrich and objectify the perception of risks
Companies are not alone in perceiving risks. Clients, suppliers, employees, financial partners, communities… all have different, often complementary, sometimes divergent views.
Asking them is to:
- Reveal blind spots,
- Test the consistency between the company's commitments and actual expectations,
- Build a collective vision of priorities.
This step can be conducted through surveys, qualitative interviews, or multi-stakeholder workshops. It becomes essential as soon as the company wishes to go beyond internal diagnosis.
🔹 Step 4: The double materiality matrix — to drive an integrated CSR strategy
This is the most advanced step. It allows for the intersection of two dimensions:
- What is material for the company's performance (impact on revenue, reputation, compliance…),
- What is material for society and the planet (emissions, human rights, pollution, biodiversity…).
This intersection brings to light the critical issues to be addressed as a priority, those that combine a strong societal impact and a strong business challenge.
💼 More and more investors, public buyers, and partners are now demanding this level of transparency and maturity.
4. Transforming risks into opportunities: the real strategic challenge
It is not enough to identify risks to create value. One must also know how to transform them into opportunities. And this is where collective intelligence, innovation, and boldness come into play.
A few examples:
- A company that anticipates the end of single-use plastics can hope to foresee compostable alternatives and gain new markets.
- A carrier that adapts to low emission zones (LEZ) becomes a more reliable partner for its clients.
- A small business that trains its employees on climate issues creates a more engaged and attractive internal culture.
💬 "Risks are not threats. They are weak signals. Invitations to act differently."
5. CSR risk management: a lever for awareness and distribution of responsibilities
Another virtuous effect — and often decisive — of CSR risk analysis is its ability to reveal shared responsibilities within the organization. When a company maps its social, environmental, or ethical risks, it often highlights issues that go far beyond the scope of the CSR department alone.
👉 It is at this precise moment that the awareness occurs in other departments : HR, purchasing, production, logistics, legal, or even IT realize that they are concerned, even directly exposed to certain risks.
Let’s take a few examples:
- A risk related to quality of work life or musculoskeletal disorders cannot be managed without strong involvement from human resources management and frontline managers.
- A risk of non-compliance in the supply chain immediately raises the question of purchasing practices, supplier monitoring, and thus purchasing management.
- A cyber risk or related to the protection of personal data naturally involves the IT teams and the DPO (Data Protection Officer).
How did the implementation of CSR go in your company?
At first, I was a bit alone in this approach. The management showed real commitment, but the other departments did not necessarily feel concerned. They were absorbed by their daily operational priorities, which made it difficult to integrate CSR into their practices.
What allowed you to engage them?
By adapting my speech to their challenges, their risks, and their opportunities. With the sales team, for example, I highlighted the concrete benefits in terms of customer relations. The same with finance. It’s foundational work, but when everyone sees what it can bring them, the buy-in follows naturally.
A significant result?
The sales department, for example, now sees CSR as a differentiation lever: it can create a different, longer-term, more human connection with clients.
🎯 In other words, the risk mapping becomes a powerful educational tool to bring forth a systemic vision of the issues and establish a common language between functions.
And this change in perception is crucial. It allows:
- To move away from a top-down or isolated logic of CSR,
- To redistribute responsibilities in a coherent and operational manner,
- To mobilize expertise where it exists,
- And to create a collective dynamic, more fluid, more credible, and more effective.
It is also an excellent way to evolve the governance of CSR, by integrating business units into CSR committees or the steering cells of action plans.
👉 Because ultimately, a company only progresses sustainably when risk management becomes everyone's business — and not just that of an “engaged” department.
Conclusion: from constraint to differentiation
Yes, CSR risk management requires time, analysis, and involvement. But it offers in return an invaluable advantage: the ability to make CSR a strategic lever, not a burden.
It allows teams to unite, strengthens the company's credibility, and builds a more sustainable, more desirable business model, better prepared to face the future.
And above all, it gives each leader a strong conviction:
👉 it is better to anticipate than to repair. It is better to act than to suffer.
📚 To go further
- World Economic Forum – Global Risks Report 2024
www.weforum.org/reports/global-risks-report-2024 - CDP – Global Climate Analysis
www.cdp.net - EFRAG – Double Materiality Guidance under CSRD
www.efrag.org - McKinsey & Company – The ESG premium: new perspectives on value and performance
www.mckinsey.com