What ISO 14090 and 14091 are, how they frame climate change adaptation and vulnerability assessment, and why physical climate risk is rising up the GCC agenda.
Introduction
Most climate effort focuses on mitigation — cutting emissions. But there is a second half of the climate problem that the Gulf, of all regions, cannot ignore: adaptation — managing the impacts that are already coming. ISO 14090 and ISO 14091 are the standards that frame it. As heat, water stress and extreme events intensify, and as IFRS S2 demands physical-risk disclosure, climate adaptation is rising up the GCC agenda. This article explains the standards.
What the two standards do
They work as a pair, addressing the adaptation side of climate:
- ISO 14090 sets out the principles, requirements and guidelines for adaptation to climate change — how an organisation plans, implements and reviews adaptation.
- ISO 14091 provides the methodology to assess climate vulnerability, impacts and risk — the analysis that informs adaptation planning.
In sequence: ISO 14091 tells you what you are exposed to; ISO 14090 tells you what to do about it. They sit in the family of ISO standards for ESG.
Adaptation vs mitigation
It is worth being clear about the distinction, because the two are often conflated:
| Mitigation | Adaptation | |
|---|---|---|
| Goal | Reduce emissions | Manage climate impacts |
| Addresses | The cause of climate change | The consequences |
| Example | Cutting Scope 1–3 emissions | Cooling, water resilience, asset protection |
| ISO standards | 14064, 14068 | 14090, 14091 |
Cutting emissions is the right thing to do. Adapting to the heat and water stress already locked in is the necessary thing to do. The Gulf needs both.
Why it matters: from risk to disclosure
Physical climate risk is no longer just an operational concern — it is a disclosure requirement. IFRS S2 and TCFD require organisations to assess physical risks and demonstrate resilience. ISO 14091’s vulnerability and risk assessment provides the analytical foundation for that disclosure; ISO 14090’s adaptation planning demonstrates the response. Together they turn a reporting obligation into a managed resilience programme — and connect naturally to broader business-continuity and resilience thinking.
How ESGweise helps
ESGweise helps GCC organisations assess physical climate risk and plan adaptation to ISO 14090 and 14091 — running vulnerability and risk assessments, designing adaptation responses, and feeding the analysis into climate-risk and scenario work and IFRS S2 disclosure. See our strategy practice.
Conclusion
ISO 14090 and 14091 address the half of climate that the Gulf cannot afford to ignore: adaptation. As physical risk intensifies and disclosure rules demand its assessment, these standards give GCC organisations a structured way to understand their vulnerability and plan their response — turning physical climate risk from an unmanaged exposure into a deliberate, evidenced programme.
Frequently asked questions
What is the difference between ISO 14090 and ISO 14091?
ISO 14090 sets out the overall principles, requirements and guidelines for adaptation to climate change — how an organisation plans and implements adaptation. ISO 14091 provides the methodology for assessing climate vulnerability, impacts and risk, which feeds the adaptation planning that ISO 14090 governs.
How is climate adaptation different from mitigation?
Mitigation reduces greenhouse gas emissions to limit future climate change; adaptation manages the impacts of climate change that are already locked in or unavoidable — heat, water stress, sea-level rise, extreme weather. Most climate strategies need both, and ISO 14090/14091 address the adaptation side.
Why does physical climate risk matter for GCC organisations?
The Gulf is highly exposed to physical climate risk — extreme heat, water scarcity, coastal and infrastructure vulnerability. These risks affect operations, assets and supply chains. ISO 14090 and 14091 provide a structured way to assess and adapt to them, and that physical-risk analysis increasingly feeds disclosure under IFRS S2 and TCFD.
How do ISO 14090/14091 relate to climate disclosure?
Climate disclosure under IFRS S2 and TCFD requires organisations to assess physical climate risks and their resilience. ISO 14091's vulnerability and risk assessment provides the analytical basis for that disclosure, while ISO 14090's adaptation planning demonstrates the response — turning a disclosure requirement into a managed programme.