The Climate Exposure Test: Put Physical Risk Into Pounds, Not Colours

Most physical climate risks enter a board pack as a colour. Flooding is amber. Heat is amber. Supplier disruption is amber. The company can see the warning, but the colour does not say how much cash is exposed, which customer promise would fail first or whether a £100,000 intervention is sensible.

That is why the discussion stalls. Operations can describe the vulnerability. Sustainability can describe the hazard. Finance can describe the insurance policy. None of them has yet turned the exposure into a decision.

For a large group, that gap may be absorbed by specialist risk teams, several sites and spare capacity. For an SME or mid-market business, it can be far more direct. One warehouse may carry most finished stock. One production line may serve the highest-margin customer. One overseas supplier may depend on a port, power grid or water source that the buyer has never examined.

The question is not whether the company can predict the next flood, heatwave, storm or drought. It cannot. The question is whether leaders understand how a physical event would travel through the business, how much it could cost and which response offers the best protection for the money.

That is the difference between recording a risk and making a decision.

Start with the critical flow, not the hazard list

Many physical-risk reviews begin with a list of hazards: flood, heat, wind, wildfire, drought and coastal exposure. The list is necessary, but it is a poor place for a leadership team to start. It encourages a debate about probability before the business has agreed what must be protected.

Start instead with the flows that create and collect revenue.

For a manufacturer, that might be the movement of one critical component through a production line and into a customer's plant. For a distributor, it might be stock entering one fulfilment centre and leaving within a fixed service window. For a professional-services firm, it could be people, power and data access at a location that supports a regulated client process. For a food business, it may be the uninterrupted cold chain from supplier to retailer.

Trace the flow end to end. Include the parts you do not own:

• sites and equipment;
• tier-one and critical lower-tier suppliers;
• power, water, cooling and telecommunications;
• ports, roads, rail, airports and third-party logistics;
• workforce availability and safe working conditions;
• stock buffers, substitute inputs and alternative capacity;
• customer delivery windows and contractual penalties.

A building can be physically unharmed while the business inside it cannot trade. The electricity substation may fail. Staff may be unable to travel. A supplier may lose water. A road may close. A customer may reject a delayed delivery. Ownership is not the same as exposure.

This is also why insurance is only one part of the answer. A policy may pay for damaged equipment and still leave the company carrying lost contribution, customer recovery costs, management distraction, reputational damage or the working-capital strain of rebuilding stock.

Put disruption into a cash range

Physical-risk models can become technically elaborate. Most leadership teams do not need that level of detail for the first decision. They need a defensible range that distinguishes a tolerable interruption from one that changes the company's year.

For each critical flow, estimate five components:

Cash exposure = lost contribution + response and recovery cost + working-capital pressure + contractual or customer cost - recoveries

Lost contribution

Use contribution, not revenue. Ask how much gross profit or contribution margin is lost for each day the flow is unavailable, and how much demand can be recovered later. A postponed order and a permanently lost customer are not the same economic event.

Response and recovery cost

Include overtime, expedited freight, temporary premises, equipment hire, clean-up, specialist contractors, data recovery and the cost of qualifying alternatives. These costs often arrive before any insurance payment.

Working-capital pressure

Disruption can trap cash even when the annual P&L effect looks manageable. Inventory may be stranded. Customers may delay payment. Suppliers may require deposits. Replacement stock may have to be bought before damaged stock is written off or reimbursed.

Contractual and customer cost

Capture service credits, penalties, refunds and the cost of retaining priority customers. Then consider the harder question: if service fails for two weeks, which customer is most likely to switch, dual-source or renegotiate?

Recoveries

Record insurance, supplier remedies and other recoveries by amount and timing. A £500,000 insured loss that requires the company to fund four months of recovery is not neutral to cash.

Use a low, central and high case. The purpose is not to predict the event precisely. It is to make the scale visible enough to compare with the cost of a response.

The six-question Climate Exposure Test

Run the test with the CEO, CFO, COO or operations lead, procurement, facilities and the person responsible for sustainability or risk. Where the business is small, the same person may hold several roles. What matters is that commercial, operational and financial evidence are in the room together.

Score each question 0, 1 or 2 using evidence available today.

1. Which business flows must keep moving?

Score 0: The team has a list of sites, suppliers or risks, but no agreed view of the flows that create the most revenue, margin or customer obligation.

Score 1: The most important flows are known informally, but they have not been traced across suppliers, infrastructure, people and customers.

Score 2: The business has named its critical flows, mapped them end to end and identified the maximum tolerable interruption for each.

The test is deliberately commercial. A small site can be critical if it produces a high-margin item with no substitute. A large site can be less critical if work can move elsewhere within hours.

For each flow, capture one sentence in this form:

If [asset, supplier or service] is unavailable for [period], [customer or revenue stream] is affected because [specific dependency], with an estimated cash exposure of [range].

If the team cannot complete the sentence, it does not yet understand the exposure.

2. Where is the hidden concentration?

Score 0: Concentration is assessed only at owned sites and direct suppliers.

Score 1: Important third-party dependencies are known, but lower-tier suppliers, utilities, logistics routes or workforce constraints are not consistently tested.

Score 2: Critical flows have been checked for single points of failure across sites, suppliers, infrastructure, people and substitute capacity.

The most important concentration is often not the largest line in the purchasing ledger. It is the item with a long qualification period, the machine with a unique tool, the route with no practical alternative or the supplier whose own critical input comes from one source.

Ask procurement to go one level deeper on the ten inputs that would stop revenue fastest. Ask operations what can genuinely move to another site and how long the transfer takes. Ask facilities which utilities have tested back-up. Ask sales which service failure would change a customer's buying behaviour.

Do not accept "we have another supplier" without checking whether that supplier is approved, has available capacity and depends on the same geography or infrastructure.

3. What is the full cash effect of interruption?

Score 0: The risk has a probability and impact label but no financial estimate.

Score 1: The business has estimated asset damage or lost revenue, but not the full cash effect or the timing of recoveries.

Score 2: The low, central and high cases cover lost contribution, recovery cost, working capital, customer consequences and recoveries by timing.

The value of a cash range is not precision. It is comparability. It lets leaders put a resilience investment beside other uses of capital.

Suppose a site interruption could last between three and fifteen trading days. Daily lost contribution is £35,000. Forty per cent of demand can be recovered later, but emergency production elsewhere costs £90,000, working capital peaks £250,000 higher and the insurance excess is £75,000. That is already a much more useful decision than "flood risk: amber". The figures are illustrative, not a client case.

The same logic applies to chronic stress. Repeated heat may not close a site, but it can reduce labour productivity, increase cooling cost, shorten equipment life and create more quality failures. Model the annual effect rather than waiting for one dramatic event.

4. Which response gives the best protection for the money?

Score 0: The default response is more insurance or a general continuity plan.

Score 1: Several actions have been identified, but their costs, implementation times and risk reduction have not been compared.

Score 2: Each material exposure has an explicit choice among retain, reduce, transfer or avoid, supported by cost, timing and residual risk.

There are four basic responses.

Retain

Accept the exposure because the cash effect is tolerable, response cost is disproportionate or the risk cannot be reduced economically. Retention should still include a trigger, owner and funding plan.

Reduce

Lower the likelihood or consequence. Options include physical protection, drainage, cooling, back-up power, alternative tooling, multisourcing, stock buffers, flexible working patterns, route changes or revised maintenance.

Transfer

Move part of the financial consequence through insurance, contract terms, supplier obligations or service agreements. Check exclusions, deductibles, limits, waiting periods and the timing of cash receipts.

Avoid

Remove the dependency by relocating, redesigning the product or process, exiting an exposed location, changing a supplier or declining an obligation the business cannot protect.

The right answer may combine two responses, but it should never be 'do nothing by default'.

5. What triggers action, and who can decide?

Score 0: The continuity plan contains contacts, but no measurable trigger, decision owner or spending authority.

Score 1: Triggers and owners exist for some events, but escalation depends on senior availability or informal judgement.

Score 2: Each critical exposure has an observable trigger, a named decision owner, pre-agreed authority and a first-hour action.

A forecast is not useful unless it changes a decision. Triggers might include a weather warning level, reservoir threshold, supplier shutdown notice, temperature limit, port status, insurance notification deadline or stock cover falling below a set number of days.

Match the trigger to authority. Who may move production, approve emergency freight, buy buffer stock, close a site, communicate with customers or draw a contingency facility? If every decision waits for the CEO, the plan contains a leadership bottleneck.

Write the first action in plain language. "Monitor the situation" is not an action. "At the named warning level, the operations director moves priority orders to site B and the finance director releases up to £75,000 of emergency capacity" is.

6. Is physical risk inside normal planning?

Score 0: Physical risk is reviewed for disclosure, insurance or compliance, separate from budgets and operating plans.

Score 1: It appears in the enterprise risk register and continuity plan, but capital requests and supplier choices do not consistently use the analysis.

Score 2: Exposure informs capital allocation, insurance renewal, supplier strategy, site decisions and quarterly performance reviews.

The test of integration is simple. Can a resilience action compete for capital using the same evidence standard as a new machine, sales hire or software investment?

For each proposed action, show:

• cash exposure before the action;
• implementation cost and time;
• expected reduction in likelihood or consequence;
• residual cash exposure;
• operational and commercial benefits beyond risk reduction;
• owner and review date.

Not every decision needs a sophisticated net present value model. A short, credible comparison is enough to stop resilience spending from being treated either as morally compulsory or indefinitely optional.

Read the score, then check the zeros

Add the six scores for a total out of 12.

Download the Physical Climate Risk Ledger

The total is not the only result. A zero on question 1 means the team may be protecting the wrong assets. A zero on question 3 means it cannot judge proportional investment. A zero on question 5 means the plan may fail at the moment it is needed.

Disagreement is also evidence. If finance scores the cash analysis as 2 and operations scores it as 0, the issue is not averaging. It is finding which assumptions are missing.

A 30-day physical risk review

A first decision-quality view can be built in 30 days if the scope stays narrow.

Week 1: Map the critical flows

Choose the three to five flows that protect the most revenue, contribution or customer obligation. Trace sites, suppliers, infrastructure, people and customers. Record maximum tolerable interruption.

Week 2: Quantify the cash range

Build low, central and high cases. Include contribution, recovery cost, working capital, customer consequences and recoveries. Record the assumptions that would change the result most.

Week 3: Compare the responses

For each material exposure, compare retain, reduce, transfer and avoid. Cost the practical options, estimate implementation time and describe the residual risk. Include low-cost measures and operating changes, not only capital projects.

Week 4: Decide and embed

Fund, defer or reject each response explicitly. Set triggers, owners, authority and review dates. Put the chosen measures into the capital plan, insurance renewal, supplier plan and operating review where relevant.

Finish with a short exercise. Pick the largest exposure and simulate the first four hours. Do not rehearse a polished crisis presentation. Test whether the named people can see the trigger, make the decision, access the cash and contact the customer.

Four mistakes to avoid

1. Treating historical weather as the full forecast

Past events are useful, but they may understate future exposure or miss chronic changes. Use credible forward-looking information where the decision horizon justifies it, and keep the response flexible where uncertainty is high.

2. Protecting owned assets while ignoring dependencies

A dry warehouse is not resilient if the road, substation, workforce or critical supplier fails. Follow the business flow beyond the property line.

3. Counting insured value as cash resilience

Insurance can transfer loss, but it does not necessarily prevent interruption or fund recovery at the time cash is needed. Test exclusions, waiting periods, excesses and payment timing.

4. Funding only the dramatic answer

The best response may be a contract change, a second approved supplier, a revised shift pattern or a modest stock buffer. Do not let a large engineering project crowd out smaller measures with faster payback.

Make the risk compete for capital

Physical climate risk becomes manageable when it stops being a special language. The leadership team does not need another collection of coloured boxes. It needs the same things it would demand for any material business decision: a critical flow, a range of value at stake, practical choices, a named owner and evidence that the chosen response is worth its cost.

That is the purpose of the Climate Exposure Test. It does not promise certainty about the weather. It gives the business a better way to decide under uncertainty.

Allington Advisors helps leadership teams connect sustainability exposure with operating reality, financial impact and capital priorities. If one site, supplier, utility or route could stop a material share of revenue, a focused physical exposure and resilience review can show what to protect first and what not to fund.