SEMESTER I
Post Graduate Professional EN4A-403
Development Program in
Climate Action & ESG Framework
Sustainability (Risk Identification
and Strategy
development for
business Continuity)
Faculty: Sunila Uday Sahasrabudhe
Faculty Profile- Mrs. Sunila Uday Sahasrabudhe
ESG and Environment specialist with over 24 years of experience.
Certified Lead Auditor of ISO 14001:2015 (EMS), IMS Internal Auditor and certified for IOSH, GRI
reporting, Climate Change assessment
Worked with prestigious organizations, including Biocon Limited , L&T, AECOM, Sesa Goa Limited ,
Vedanta Aluminium Limited and Arpwood Partners as Vice President – ESG, conducted monitoring and
compliance efforts on ESG key performance parameters for financial deals.
Lead Environment Specialist for 2 national prestigious projects, including Mumbai Trans Harbour Link
(MTHL) and Mumbai Metro Line 3 (the underground metro project from Colaba to SEEPZ)
Lead auditor in IFC based EHS audits for thermal power plant, wind farm sector, solar power plants
garment manufacturing, pharmaceutical, FMCG, Building construction projects, private helicopter
services, educational institutes and rubberized coir and foam manufacturing units.
Specialist in conducting legal compliance assessment, EHS audits, Phase 1 and Phase 2 assessments and
IFC based ESIA, Environment Health Safety Social Due Diligence (EHSS DD)
Chapter 1: ESG
Risk identification and Strategy
development for Business Continuity
• What is Business Continuity
• What is Risk Identification
• Types of Business Risks
• Process of Risk Identification
• Examples of Risk identification , and
Strategy development for Business
continuity of five sectors
• Pharma Sector
• Automobile Sector
• Textile Sector
• Metal and Mining Sector
• Fast-Moving Consumer Goods
(FMCG) Sector
What is definition of Business Continuity
An organization's capability to maintain its essential functions
during and after an unplanned disruption, such as a cyberattack,
natural disaster, or pandemic, by implementing pre-defined
processes and strategies to minimize downtime and recover
operations as quickly as possible.
It involves proactively assessing risks, identifying critical
business processes, and establishing contingency plans to ensure
the business can continue to deliver products and services within
acceptable timeframes, ultimately protecting its reputation,
finances, and regulatory compliance.
Introduction: Risk Identification
• the systematic process of recognizing, analyzing, and
documenting potential threats to organizational objectives
before they occur and uncertainties that could negatively
impact a business
Identification
• is the foundational process in business risk management
• provides the basis for risk mitigation and management
strategies.
Types of Business Risks
Environmental
Financial Compliance
Operational and Social Reputational
Risks: Credit, Risks:
Risks: Failures Risks: Impact Risks: Damage
cash flow, and Violations of
in processes or on society and to brand or
market laws or industry
systems. the trust.
fluctuations. standards.
environment.
Process of Risk Identification
Analyze Context: Understand the internal and
external environment.
Identify Threats: List potential events or
conditions that could cause harm.
Steps in Risk
Identification Assess Vulnerabilities: Determine assets or
processes susceptible to threats.
Evaluate Consequences: Estimate potential
business impact.
Document Findings: Record and regularly
update risk information.
Risk Heat Map
A Risk Heat Map is a visual tool used in risk
management to present risk data .
It represents individual values in a matrix using
color-coded sections to indicate varying levels of risk.
A standard Enterprise
Risk register template
Risk Risk Risk Mitigation Contingency Last
Risk ID Likelihood Impact Owner Status
Category Description Score Actions Plan Updated
Employee Incident
Data breach In
001 IT Security High Severe 15 IT Security training, response xx
risk Progress
firewalls team
Operationa Supply chain Multiple Stockpile
002 Medium High 10 Operations Open xx
l disruption suppliers critical parts
Criteria for Prioritizing Risks for Quantitative Analysis
High Impact on Objectives:
Risks that could cause significant cost overruns,
severe schedule delays, or
critical operational disruption
High Priority in Qualitative Analysis:
After a qualitative review, the risks rated as “high” in both likelihood and impact are prioritized for
quantitative methods, as these pose the greatest threat to achieving project goals.
Complex or Interrelated Risks:
Risks which are complex or have multiple dependencies that could cascade into bigger problems,
quantitative methods
Major Financial Exposure:
Risks with the potential for large financial losses, such as regulatory penalties, currency fluctuations, or
catastrophic failures
Critical Business Decisions:
During investment, contract, or strategic choice depend on risk exposure, the quantitative analysis provides
objective, data-driven input for decision-makers.
Pharma Sector
Pharma Sector
Pharmaceutical companies face risks at multiple stages including manufacturing, quality control,
supply chain, and distribution. Common risks include:
Manufacturing Risks: Supply Chain Risks:
Quality Risks: Out-of-
Contamination, equipment Disruptions impacting raw
specification test results,
malfunction, process material availability, cold chain
stability issues, packaging and
deviations, failure in failures affecting sensitive
labeling errors, and data
sterilization, and poor-quality products like vaccines, and
integrity problems during
control leading to batch recalls counterfeit drugs entering the
quality assurance.
or product failures. market.
Personnel and Operational
Regulatory and Compliance
Risks: Human errors,
Risks: Non-compliance with
inadequate training,
GMP standards, inspection
equipment maintenance
failures, delays in approvals,
failures, and communication
and documentation lapses
gaps impacting production and
increasing liability.
safety.
Top 20 examples of risks for Pharma Sector
• Supply chain or distribution failure (raw material shortages, • Failure to innovate or meet changing customer needs and
transportation delays) therapeutic trends
• Talent attraction and retention challenges impacting
• Supply chain dependence on high-risk countries or single
expertise and continuity
suppliers
• Financial risks including liquidity shortfalls and capital
• Counterfeit pharmaceuticals infiltrating the supply chain availability constraints
• Commodity price volatility affecting raw material costs
• Regulatory or legislative changes causing compliance challenges
• Insider threats including employee fraud or inadvertent
• Legal risks such as contract disputes or litigation expenses errors
• Product liability or safety claims and associated legal costs
• Business interruption including manufacturing shutdowns or
pandemics • Environmental and sustainability compliance risks impacting
operational licenses
• Product quality failures leading to recalls or patient harm
• Mergers, acquisitions, or restructuring risks impacting
• strategic focus and integration
Clinical trial failures or delays impacting drug development
timelines • Damage to brand or corporate reputation due to adverse
events or controversies
• Intellectual property theft or patent litigation losses
• Cyber attack or data breach impacting sensitive patient and
• research data
Pricing and reimbursement pressures affecting revenue models
Business Continuity for Pharma Sector
Pharmaceutical business continuity focuses on ensuring uninterrupted manufacturing, supply, and regulatory compliance
even during disruptions.
Preventive Controls and
Critical Processes Contingency Planning: Backup
Monitoring: Real-time
Identification: Mapping key suppliers for raw materials,
environmental monitoring,
manufacturing steps and supply alternate manufacturing sites,
predictive analytics for process
chain nodes critical to product and robust cold chain logistics for
deviations, and automation to
availability and safety. temperature-sensitive products.
reduce human errors.
Regulatory Alignment: Crisis Management and
Maintaining updated standard Communication: Training crisis
operating procedures (SOPs), response teams, internal
CAPA (Corrective and Preventive communication plans, and
Actions) systems, and stakeholder management during
documentation to quickly emergencies impacting
respond to inspections or recalls. production or supply.
Strategy Development for Pharma Sector
Business risk mitigation in pharma requires agility, integration of technology, and a proactive mindset to adapt to
evolving risks while ensuring patient safety and regulatory compliance.
Strategy Area Mitigation Actions KPIs to Track Progress
Regulatory Compliance Automated tracking, audits, training Regulatory audit success rate
Supplier redundancy index, on-time delivery
Supply Chain Resilience Multiple suppliers, visibility tools
%
Product batch pass rates,
Quality Assurance FMEA, CAPA, real-time monitoring
deviations recorded
Clinical Trial Management Risk-based monitoring, recruitment Trial retention rate, adverse event resolution
Cybersecurity Vulnerability assessment, training Number of security incidents
Financial Stability Portfolio diversification Revenue diversification ratio
Risk register completeness,
Governance & Integration Cross-functional teams, software
compliance scores
Training completion rates, risk issue
Training & Culture Awareness programs
reporting
Textile Sector
Textile Sector
The textile industry faces diverse risks across its supply chain from raw material sourcing to
production and distribution:
Supply Chain Operational Risks: Environmental Regulatory & Market Risks:
Risks: Machinery Risks: Compliance Risks: Volatility in demand,
Disruptions due to breakdowns, fire Chemical pollution, Compliance issues fast-changing
supplier insolvency, hazards in water overuse, and related to labor laws fashion trends, and
fluctuating raw production sites, waste management (e.g., child labor, price competition
material availability occupational safety challenges from the working conditions), impacting
(e.g., cotton), risks, and quality use of dyes and environmental profitability.
geopolitical impacts, control failures finishing chemicals. regulations, and
and transportation during dyeing, ethical sourcing
delays. spinning, weaving, standards.
and finishing
processes.
Examples of KPIs for Textile Risk Reduction
1. First Pass Yield (FPY)
Measures the percentage of products passing quality standards without rework, reflecting overall process efficiency and defect
control.
2. Defect Rate
Tracks the percentage of defective units identified during production, helping pinpoint quality issues for targeted corrective
actions.
3. Inventory Turnover Ratio
Indicates how efficiently inventory is managed, reducing the risk of stockouts or excess holding costs impacting cash flow and
supply.
4. Lead Time
Measures the time taken from order placement to product delivery, highlighting supply chain responsiveness and risks of delays.
5. Capacity Utilization Rate
Shows the extent of manufacturing capacity use, indicating potential overloading or underutilization risks affecting efficiency.
6. Employee Absenteeism Rate
Monitors labor availability and workforce reliability, which are critical for consistent production and risk reduction related to
workforce shortages.
7. On-Time Delivery Rate
Assesses the reliability of delivering products on schedule, reducing customer dissatisfaction and contractual penalties risk.
8. Waste and Rework Percentage
Measures material waste and proportion of products needing rework, reflecting production efficiency and cost risk mitigation.
Business Continuity Strategy for Textile Sector
Supply Chain Diversification: Sourcing raw materials from multiple suppliers and regions to
reduce dependency risks.
Safety and Risk Controls: Fire prevention systems, machinery maintenance schedules, worker
safety training, and hazard controls to prevent accidents.
Environmental Controls: Adopting cleaner production methods and waste treatment to maintain
compliance and avoid shutdowns.
Crisis Management Plans: Contingency plans for labor strikes, political unrest, or natural
disasters affecting critical production units.
Documentation & Compliance: Regular audits and adherence to international standards improve
resilience and reputation.
Automobile Sector
Automobile Sector
Supply Chain Technological Regulatory and Operational Risks: Market Risks:
Risks: Risks: Compliance Risks: Manufacturing Fluctuating
Delays or shortages Risks related to Meeting stringent defects, machinery consumer
of critical rapidly evolving safety, emissions, hazards, workplace preferences, trade
components like electric vehicle and environmental safety incidents, and barriers, and
semiconductors, technology, regulations globally, quality control economic
geopolitical autonomous driving with failures risking issues affecting downturns
disruptions, and software, battery recalls, fines, or product safety and impacting demand
financial performance, and sales bans. reliability. and profitability.
inefficiencies cybersecurity
impacting parts threats from
availability and increased vehicle
production connectivity.
continuity.
Business Continuity Strategy for Automobile Sector
Supply Chain Diversification and Monitoring: Multiple suppliers for critical parts, real-time
tracking, and predictive analytics for early disruption warnings.
Technology Risk Mitigation: Rigorous testing of autonomous systems, cybersecurity frameworks,
and backup systems for critical software updates.
Regulatory Compliance Management: Proactive tracking of regulatory changes, automated
compliance reporting, and continuous quality audits.
Safety Management and Training: Employee training programs, strict safety protocols, and
emergency response planning to reduce workplace accidents.
Crisis Response Plans: Comprehensive risk mitigation roadmaps, real-time risk dashboards, and
cross-functional crisis teams to handle operational disruptions like factory shutdowns or recalls.
Metals and Mining Sector
Metals and Mining Sector
Mining and metal industries are associated with substantial operational and environmental risks including:
Safety Hazards: Risks from Environmental Risks: Tailings
Operational Risks: Equipment
mine collapses, explosions, gas dam failures, chemical spills,
failures, ore grade variability,
leaks, dust inhalation, and water contamination, and
energy supply interruptions,
heavy machinery accidents biodiversity impact requiring
and logistical challenges in
affecting worker health and strict controls and remediation
remote sites.
safety. plans.
Financial and Strategic Risks:
Regulatory and Compliance Commodity price volatility,
Risks: Meeting evolving mining project delays, resource
safety laws, environmental depletion, political risks
standards, and community including resource nationalism,
relations obligations to and labor shortages impacting
maintain operating licenses. profitability and project
viability.
Business Continuity Strategy for Metals and Mining Sector
Safety Management Systems:
Environmental Management
Implementation of layered Equipment Maintenance and
Plans: Tailings dam monitoring,
safety controls, real-time Asset Management: Predictive
pollution control technologies,
monitoring of hazardous maintenance, equipment
waste management strategies,
conditions, emergency redundancy, and risk-based
and restoration programs for
preparedness drills, and worker inspection to avoid downtime.
sustainable mining.
safety training programs.
Regulatory Compliance &
Supply Chain and Logistics Crisis Management Plans:
Stakeholder Engagement:
Resilience: Diversified Response plans for natural
Regular audits, transparent
suppliers, contingency disasters, labor disruptions,
communication with regulators
transport routes, and inventory political instability, and market
and communities to mitigate
buffer strategies for raw shocks with clear roles and
operational risks and ensure
materials and components. communication protocols.
social license to operate.
Example Scenario
A coal mining company identifies inundation from nearby water channels as a key hazard. They build embankments
along the quarry limits, conduct regular site inspections, and implement monitoring to prevent water ingress
disrupting operations and ensure workforce safety.
Fast Moving Consumer Goods (FMCG) Sector
• Toothpaste
• Soaps
• Shampoo
• Laundry Detergents
• Paper Towels
• Razors
Examples of FMCG • Diapers, Sanitary napkins
• Bottled Water
products • Soft Drinks
• Tea and Coffee
• Snacks products
• Cereals
• Cooking Oils
• Butter and Margarine
• Frozen Foods
FMCG Sector The FMCG sector faces a wide range of risks due to its fast-paced, consumer-oriented
nature:
Supply Chain Risks: Commodity Price Volatility:
Raw material unavailability, Fluctuating prices of raw
dependence on global suppliers, materials like edible oils, sugar
transportation disruptions, and impacting cost structures and
loss/spillage during transit profit margins.
affecting revenue and production
continuity.
FOODS AND PERSONAL CARE HEALTHCARE
Regulatory & Compliance BEVERAGES PRODUCTS PRODUCTS
Consumer Safety and Quality
Risks:
Risks:
Adherence to food safety,
Risks around product recalls,
labelling norms, sustainability
counterfeit products that affect
requirements, and consumer
consumer health and brand
protection laws affecting market
trust.
access and brand reputation.
HOME CARE
Market Risks: COMMODITIES
Cybersecurity Risks:
Intense competition, changing
Data breaches, vulnerabilities in
consumer preferences towards
consumer data platforms, and
healthier or sustainable
supply chain cyber risks due to
products, and rise of direct-to-
inter-connected vendors.
consumer models.
Business Continuity Strategy for FMCG Sector
Diversified & Localized Sourcing:
To mitigate supply chain shocks and geopolitical uncertainties.
Inventory & Logistics Management:
Robust warehouse management, demand forecasting, and multi-modal
transport planning to reduce stockouts and losses.
Quality Assurance & Anti-Counterfeiting Measures:
Product authentication technologies, rigorous quality testing, and
traceability systems.
Regulatory Monitoring & Adaptation:
Constant updates on regulations and integration of compliance
requirements into product development and packaging.
Cyber Risk Management:
Strengthening IT security, risk-based third-party audits, and incident
response plans tailored to consumer data protection.
Crisis Response & Communication Plans:
Transparent internal and external communication, stakeholder
engagement, and proactive brand management during crises.
Key Strategies for Risk Mitigation Plan
Contingency and Crisis Management Planning
Comprehensive Risk Identification and Assessment
Develop contingency plans for supply chain disruptions,
• Continuously identify internal and external risks such as supply natural disasters, political unrest, and other emergencies.
chain disruptions, quality control failures, regulatory changes, Establish alternate production facilities and logistics routes
and market volatility.
where feasible.
• Categorize risks by likelihood and impact for prioritization. Sustainability and Compliance
Supply Chain Diversification and Robust Supplier Management Adopt sustainable practices to reduce environmental risks
• Develop multiple sourcing options and maintain close and meet regulatory requirements.
relationships with suppliers to reduce dependency risk. Implement responsible sourcing and waste management to
protect brand reputation.
• Regularly audit and monitor suppliers for quality and compliance
Financial Risk Management
to avoid disruptions.
Hedge against currency and commodity price volatility.
Quality Control and Assurance Systems Monitor credit risks and maintain healthy cash flow and
• Implement standardized quality protocols across all stages of reserves.
production. Ethical Business Practices and Transparency
• Use statistical quality control and regular inspections to detect Promote ethical sourcing, labor rights, and compliance to
and address issues early. avoid reputational risks.
Increase supply chain transparency to identify and mitigate
Operational Risk Management hidden risks.
• Invest in maintenance and modernization of machinery to Effective Communication and Collaboration
prevent breakdowns. Foster collaboration between departments and key
• Train workers on safety protocols to reduce accidents and stakeholders for collective risk management.
improve productivity. Communicate risks and mitigation plans clearly across the
Market and Demand Analysis organization.
• Use data analytics and market research to anticipate consumer
trends and adjust production accordingly.
• Build flexibility to respond quickly to fashion changes or demand
shifts.
Happy to answer
your Questions
Thank you