Back to Frameworks

SEC Climate Disclosure Rule

United States
v2024
9 domains
25 controls

SEC Final Rule: The Enhancement and Standardization of Climate-Related Disclosures for Investors. Adopted March 6, 2024 (Release Nos. 33-11275; 34-99678). Requires registrants to disclose climate-related risks, governance, strategy, risk management, metrics, and GHG emissions in registration statements and annual reports. Phased compliance beginning 2025. Note: Subject to partial stay pending judicial review as of 2025.

Verified

SEC Climate Disclosure Rule is a compliance framework from United States with 9 domains and 25 controls that map to 84 other frameworks. The largest domains are Strategy, Business Model and Outlook (7 controls), Metrics and Targets (4 controls), Financial Statement Effects (3 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (9)

Assurance

1 controls
Controls in the Assurance domain of SEC Climate Disclosure Rule1 controls
CodeTitle
SECCLIM-5Attestation and Assurance

Disclosure Controls and Filing Location

2 controls

Disclosure Controls and Filing Location

Controls in the Disclosure Controls and Filing Location domain of SEC Climate Disclosure Rule2 controls
CodeTitle
SEC-CLM-19Disclosure Controls and Internal Controls for Climate Information
SEC-CLM-20Filing Location and Inclusion in Registration Statements

Financial Statement Effects

3 controls

Financial Statement Effects

Controls in the Financial Statement Effects domain of SEC Climate Disclosure Rule3 controls
CodeTitle
SEC-CLM-16Severe Weather Event Financial Statement Effects
SEC-CLM-17Carbon Offsets and Renewable Energy Certificates Financial Statement Effects
SEC-CLM-18Estimates and Assumptions Affected by Climate Risks

Governance

3 controls
Controls in the Governance domain of SEC Climate Disclosure Rule3 controls
CodeTitle
SEC-CLM-09Board Oversight of Climate Risks
SEC-CLM-10Management Role in Climate Risk Assessment
SECCLIM-1Governance: Board Oversight, Management Role

Metrics

1 controls
Controls in the Metrics domain of SEC Climate Disclosure Rule1 controls
CodeTitle
SECCLIM-4Metrics and Targets: GHG Emissions, Climate Targets

Metrics and Targets

4 controls

Metrics and Targets

Controls in the Metrics and Targets domain of SEC Climate Disclosure Rule4 controls
CodeTitle
SEC-CLM-12Targets and Goals Disclosure
SEC-CLM-13GHG Scope 1 Emissions Disclosure
SEC-CLM-14GHG Scope 2 Emissions Disclosure
SEC-CLM-15GHG Emissions Methodology and Assurance

Risk Management

3 controls
Controls in the Risk Management domain of SEC Climate Disclosure Rule3 controls
CodeTitle
SEC-CLM-01Climate Related Risk Identification
SEC-CLM-11Climate Risk Management Process
SECCLIM-2Risk Management: Identification, Assessment, Integration

Strategy

1 controls
Controls in the Strategy domain of SEC Climate Disclosure Rule1 controls
CodeTitle
SECCLIM-3Strategy: Material Impacts, Time Horizons, Adaptation

Strategy, Business Model and Outlook

7 controls

Strategy, Business Model and Outlook

Controls in the Strategy, Business Model and Outlook domain of SEC Climate Disclosure Rule7 controls
CodeTitle
SEC-CLM-02Physical Risk Disclosure
SEC-CLM-03Transition Risk Disclosure
SEC-CLM-04Time Horizon Specification
SEC-CLM-05Strategy, Business Model, and Outlook Impact
SEC-CLM-06Mitigation and Adaptation Activities
SEC-CLM-07Transition Plan Disclosure
SEC-CLM-08Scenario Analysis Disclosure

Your Compliance Coverage

If you comply with SEC Climate Disclosure Rule, you already cover:

Maps to 84 other frameworks

25 total controls
EASA Part-IS - Information Security in Aviation
1 source controls mapped|5 target controls covered
4%
Vietnam PDPD
1 source controls mapped|1 target controls covered
4%
Vietnam Law on Cybersecurity (No. 24/2018/QH14)
1 source controls mapped|1 target controls covered
4%
Vermont Artificial Intelligence and Consumer Data Act (AICDA)
1 source controls mapped|1 target controls covered
4%
US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule
1 source controls mapped|2 target controls covered
4%
UNICEF Policy Guidance on AI for Children (2021)
1 source controls mapped|1 target controls covered
4%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
1 source controls mapped|1 target controls covered
4%
Turkey KVKK
1 source controls mapped|1 target controls covered
4%
TSA Pipeline Cybersecurity Directives
1 source controls mapped|1 target controls covered
4%
ISO 27005
1 source controls mapped|6 target controls covered
4%
Annex 11 to EU GMP - Computerised Systems
1 source controls mapped|1 target controls covered
4%
South Korea ISMS-P
1 source controls mapped|2 target controls covered
4%
ISO 20400:2017 - Sustainable Procurement
1 source controls mapped|1 target controls covered
4%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
1 source controls mapped|5 target controls covered
4%
ISO 22320:2018
1 source controls mapped|1 target controls covered
4%
ISO 27018
1 source controls mapped|1 target controls covered
4%
NIST SP 800-53 Rev 5
1 source controls mapped|6 target controls covered
4%
Authorised Economic Operator (AEO) Programmes - Global Standards
1 source controls mapped|2 target controls covered
4%
SQF Code Edition 9 - Safe Quality Food
1 source controls mapped|2 target controls covered
4%
APRA CPS 230 Operational Risk Management
1 source controls mapped|4 target controls covered
4%
PCI SSF
1 source controls mapped|3 target controls covered
4%
ISO 31000
1 source controls mapped|6 target controls covered
4%
ISO 22000
1 source controls mapped|1 target controls covered
4%
Kuwait National Cybersecurity Framework
1 source controls mapped|1 target controls covered
4%
IEC 62443
1 source controls mapped|3 target controls covered
4%
BS 65000:2014 - Guidance on Organizational Resilience
1 source controls mapped|2 target controls covered
4%
ISO 28001:2007 Supply Chain Security Management
1 source controls mapped|1 target controls covered
4%
ISO 45001
1 source controls mapped|1 target controls covered
4%
SASB Standards
1 source controls mapped|3 target controls covered
4%
ISO 27019
1 source controls mapped|3 target controls covered
4%
AS9100D - Aerospace Quality Management System
1 source controls mapped|1 target controls covered
4%
AICPA Privacy Management Framework (PMF)
1 source controls mapped|1 target controls covered
4%
ISO/IEC 23894:2023
1 source controls mapped|6 target controls covered
4%
PCI P2PE
1 source controls mapped|3 target controls covered
4%
NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management
1 source controls mapped|1 target controls covered
4%
NIST Cybersecurity Framework 2.0
1 source controls mapped|5 target controls covered
4%
IEC 62304:2015 Medical Device Software Lifecycle Processes
1 source controls mapped|3 target controls covered
4%
Singapore AI Governance Framework
1 source controls mapped|1 target controls covered
4%
NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
1 source controls mapped|3 target controls covered
4%
Barbados Data Protection Act 2019
1 source controls mapped|1 target controls covered
4%
ISO 27017
1 source controls mapped|1 target controls covered
4%
4%
ISO 37000:2021 - Governance of Organizations
1 source controls mapped|2 target controls covered
4%
NIST SP 1800-32
1 source controls mapped|3 target controls covered
4%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
1 source controls mapped|2 target controls covered
4%
API 1164
1 source controls mapped|3 target controls covered
4%
Aged Care Quality Standards 2019 (repealed edition)
1 source controls mapped|1 target controls covered
4%
Singapore Cybersecurity Act 2018
1 source controls mapped|1 target controls covered
4%
BSI IT-Grundschutz
1 source controls mapped|3 target controls covered
4%
APRA CPS 234
1 source controls mapped|2 target controls covered
4%
Saudi Arabia PDPL
1 source controls mapped|1 target controls covered
4%
IEC 60601-1 - Medical Electrical Equipment Safety
1 source controls mapped|3 target controls covered
4%
FFIEC IT Examination Handbook
1 source controls mapped|3 target controls covered
4%
4%
UAE Virtual Asset Regulatory Authority (VARA) Regulations
1 source controls mapped|3 target controls covered
4%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
1 source controls mapped|2 target controls covered
4%
ISO 22313:2020 - Guidance on Business Continuity Management Systems
1 source controls mapped|1 target controls covered
4%
ISO/IEC 27031:2011
1 source controls mapped|1 target controls covered
4%
ISO/IEC 38500:2024 - Governance of IT
1 source controls mapped|1 target controls covered
4%
SANS Incident Handler's Handbook and PICERL Methodology
1 source controls mapped|1 target controls covered
4%
ISO/IEC 29134:2023
1 source controls mapped|1 target controls covered
4%
PCI PIN Security
1 source controls mapped|3 target controls covered
4%
ISO/IEC 27003:2017
1 source controls mapped|3 target controls covered
4%
ISO 26262:2018 - Functional Safety for Road Vehicles
1 source controls mapped|1 target controls covered
4%
FBI CJIS Security Policy
1 source controls mapped|2 target controls covered
4%
IAIS Insurance Core Principles (ICPs)
1 source controls mapped|2 target controls covered
4%
FFIEC Cybersecurity Assessment Tool (CAT)
1 source controls mapped|2 target controls covered
4%
GDPR
1 source controls mapped|1 target controls covered
4%
ISO/IEC 29147:2018
1 source controls mapped|1 target controls covered
4%
ASIS SPC.1-2009 - Organizational Resilience Standard
1 source controls mapped|1 target controls covered
4%
NIST SP 800-190
1 source controls mapped|1 target controls covered
4%
ISO 27799
1 source controls mapped|1 target controls covered
4%
Bahrain PDPL
1 source controls mapped|1 target controls covered
4%
FedRAMP High
1 source controls mapped|1 target controls covered
4%
NIST SP 800-53 Revision 5.1 HIGH
1 source controls mapped|1 target controls covered
4%
FedRAMP Moderate
1 source controls mapped|1 target controls covered
4%
NIST SP 800-53 Rev 5 MODERATE
1 source controls mapped|1 target controls covered
4%
NIST SP 800-53 Rev 5 LOW
1 source controls mapped|1 target controls covered
4%
ISO 13485
1 source controls mapped|1 target controls covered
4%
ICAO Annex 17 - Aviation Security (AVSEC)
1 source controls mapped|2 target controls covered
4%
AML/CTF Act 2006 (Australia)
1 source controls mapped|2 target controls covered
4%
US Consumer Product Safety Commission (CPSC) - Connected Product Safety
1 source controls mapped|1 target controls covered
4%

What is SEC Climate Disclosure Rule and who does it apply to?

SEC Climate Disclosure Rule is a compliance framework from United States with 9 domains and 25 controls. SEC Final Rule: The Enhancement and Standardization of Climate-Related Disclosures for Investors. Adopted March 6, 2024 (Release Nos. 33-11275; 34-99678). Requires registrants to disclose climate-related risks, governance, strategy, risk management, metrics, and GHG emissions in registration statements and annual reports. Phased compliance beginning 2025. Note: Subject to partial stay pending judicial review as of 2025. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does SEC Climate Disclosure Rule actually require?

SEC Climate Disclosure Rule has 25 controls organised across 9 domains. The largest domains are Strategy, Business Model and Outlook (7 controls), Metrics and Targets (4 controls), Financial Statement Effects (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of SEC Climate Disclosure Rule do I already cover?

SEC Climate Disclosure Rule maps to 84 other compliance frameworks. The top mapping partners are EASA Part-IS - Information Security in Aviation (4% coverage), Vietnam PDPD (4% coverage), Vietnam Law on Cybersecurity (No. 24/2018/QH14) (4% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement SEC Climate Disclosure Rule?

Start your SEC Climate Disclosure Rule compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about SEC Climate Disclosure Rule requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 25 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.

Get Started Free →

Free forever — no credit card required