Back to Frameworks

TCFD Recommendations

International
v2023
8 domains
30 controls

Task Force on Climate-related Financial Disclosures

Unverified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

Governance

2 controls
Controls in the Governance domain of TCFD Recommendations2 controls
CodeTitle
TCFD-GOV-ABoard Oversight of Climate-Related Risks and Opportunities
TCFD-GOV-BManagement's Role in Assessing and Managing Climate Risks

Implementation

5 controls
Controls in the Implementation domain of TCFD Recommendations5 controls
CodeTitle
TCFD-IMP-001Disclosure Location and Reporting Cadence
TCFD-IMP-002ISSB Transition and IFRS S2 Alignment
TCFD-IMP-003Scenario Analysis Capability and Data
TCFD-IMP-004Connectivity with Financial Statements
TCFD-IMP-005Internal Controls Over Climate Disclosures

Metrics and Targets

3 controls
Controls in the Metrics and Targets domain of TCFD Recommendations3 controls
CodeTitle
TCFD-MT-AMetrics Used to Assess Climate-Related Risks and Opportunities
TCFD-MT-BScope 1, 2, and 3 Greenhouse Gas Emissions Disclosure
TCFD-MT-CTargets and Performance Against Targets

Risk Management

3 controls
Controls in the Risk Management domain of TCFD Recommendations3 controls
CodeTitle
TCFD-RM-AProcesses for Identifying and Assessing Climate-Related Risks
TCFD-RM-BProcesses for Managing Climate-Related Risks
TCFD-RM-CIntegration of Climate Risks into Overall Risk Management

Strategy

3 controls
Controls in the Strategy domain of TCFD Recommendations3 controls
CodeTitle
TCFD-STR-AClimate-Related Risks and Opportunities Identified Over Short, Medium, and Long Term
TCFD-STR-BImpact of Climate Risks and Opportunities on Business, Strategy, and Financial Planning
TCFD-STR-CResilience of Strategy Under Different Climate Scenarios

TCFD Recommendations: Environmental Policy & Planning

5 controls

Environmental management system planning (TCFD Recommendations)

Controls in the TCFD Recommendations: Environmental Policy & Planning domain of TCFD Recommendations5 controls
CodeTitle
TCFD-01Environmental policy development
TCFD-02Environmental aspects and impacts identification
TCFD-03Legal and regulatory compliance obligations
TCFD-04Environmental objectives and targets
TCFD-05Action planning for environmental management

TCFD Recommendations: Operational Controls

5 controls

Environmental operational controls (TCFD Recommendations)

Controls in the TCFD Recommendations: Operational Controls domain of TCFD Recommendations5 controls
CodeTitle
TCFD-06Operational control procedures
TCFD-07Emergency preparedness and response
TCFD-08Resource and energy management
TCFD-09Waste management and reduction
TCFD-10Pollution prevention measures

TCFD Recommendations: Performance Evaluation

4 controls

Environmental performance monitoring (TCFD Recommendations)

Controls in the TCFD Recommendations: Performance Evaluation domain of TCFD Recommendations4 controls
CodeTitle
TCFD-11Environmental monitoring and measurement
TCFD-12Compliance evaluation
TCFD-13Internal environmental audit
TCFD-14Management review of environmental performance

Your Compliance Coverage

If you comply with TCFD Recommendations, you already cover:

Maps to 126 other frameworks

30 total controls
GRI Standards
5 source controls mapped|5 target controls covered
17%
EU SFDR (Sustainable Finance Disclosure Regulation)
5 source controls mapped|5 target controls covered
17%
ISO 14001
5 source controls mapped|5 target controls covered
17%
ISSB Standards
5 source controls mapped|5 target controls covered
17%
CDP (formerly Carbon Disclosure Project)
4 source controls mapped|2 target controls covered
13%
SASB Standards (ISSB Integrated)
4 source controls mapped|4 target controls covered
13%
SASB Standards
4 source controls mapped|3 target controls covered
13%
OECD AI Principles
4 source controls mapped|2 target controls covered
13%
NIST AI Risk Management Framework (AI RMF 1.0)
4 source controls mapped|4 target controls covered
13%
NIST AI 600-1: Generative AI Profile
4 source controls mapped|5 target controls covered
13%
LEED v4.1 - Green Building Rating System (US Green Building Council)
4 source controls mapped|3 target controls covered
13%
EU Taxonomy Regulation (Regulation 2020/852)
4 source controls mapped|4 target controls covered
13%
EU Taxonomy Regulation
4 source controls mapped|4 target controls covered
13%
ISO 20400:2017 - Sustainable Procurement
3 source controls mapped|3 target controls covered
10%
BREEAM - Building Research Establishment Environmental Assessment Method
3 source controls mapped|3 target controls covered
10%
ISO 37000:2021 - Governance of Organizations
3 source controls mapped|2 target controls covered
10%
ICMM Mining Principles (2024 Update)
3 source controls mapped|1 target controls covered
10%
ISO/IEC 38500:2024 - Governance of IT
3 source controls mapped|1 target controls covered
10%
OECD Recommendation on Artificial Intelligence (2024 Update)
3 source controls mapped|2 target controls covered
10%
ISO 26000:2010
3 source controls mapped|2 target controls covered
10%
GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6
3 source controls mapped|1 target controls covered
10%
TNFD Recommendations
3 source controls mapped|1 target controls covered
10%
UNESCO Recommendation on the Ethics of AI
3 source controls mapped|3 target controls covered
10%
Singapore AI Governance Framework
1 source controls mapped|1 target controls covered
3%
Nebraska Data Privacy Act
1 source controls mapped|1 target controls covered
3%
ISO 27018
1 source controls mapped|1 target controls covered
3%
Switzerland FADP
1 source controls mapped|1 target controls covered
3%
EDM Council CDMC - Cloud Data Management Capability Framework
1 source controls mapped|1 target controls covered
3%
Ley Orgánica de Protección de Datos Personales (LOPDP)
1 source controls mapped|1 target controls covered
3%
Rwanda DPL
1 source controls mapped|1 target controls covered
3%
Mexico LFPDPPP
1 source controls mapped|1 target controls covered
3%
AWS Well-Architected Security Pillar
1 source controls mapped|1 target controls covered
3%
FERPA
1 source controls mapped|1 target controls covered
3%
Regulation on the European Health Data Space (EHDS)
1 source controls mapped|1 target controls covered
3%
Indiana Consumer Data Protection Act
1 source controls mapped|1 target controls covered
3%
Iowa Consumer Data Protection Act
1 source controls mapped|1 target controls covered
3%
Law No. 172-13 on the Protection of Personal Data
1 source controls mapped|1 target controls covered
3%
PDPA Singapore
1 source controls mapped|1 target controls covered
3%
ESRB Privacy Certified
1 source controls mapped|1 target controls covered
3%
FedRAMP High
1 source controls mapped|1 target controls covered
3%
NIST SP 800-53 Revision 5.1 HIGH
1 source controls mapped|1 target controls covered
3%
IRS Publication 1075
1 source controls mapped|1 target controls covered
3%
FedRAMP Moderate
1 source controls mapped|1 target controls covered
3%
NIST SP 800-53 Rev 5 MODERATE
1 source controls mapped|1 target controls covered
3%
NIST SP 800-53 Rev 5 LOW
1 source controls mapped|1 target controls covered
3%
Jamaica DPA
1 source controls mapped|1 target controls covered
3%
Azure Security Benchmark
1 source controls mapped|1 target controls covered
3%
Personal Data Act (personopplysningsloven)
1 source controls mapped|1 target controls covered
3%
New Zealand Information Security Manual (NZISM)
1 source controls mapped|1 target controls covered
3%
ISO 45001
1 source controls mapped|1 target controls covered
3%
EU AI Act
1 source controls mapped|1 target controls covered
3%
EU Machinery Regulation (Regulation (EU) 2023/1230)
1 source controls mapped|1 target controls covered
3%
MTCS (Singapore)
1 source controls mapped|1 target controls covered
3%
South Korea PIPA
1 source controls mapped|1 target controls covered
3%
New Hampshire Data Privacy Act
1 source controls mapped|1 target controls covered
3%
Philippines DPA
1 source controls mapped|1 target controls covered
3%
Privacy Act 2020
1 source controls mapped|1 target controls covered
3%
Maryland Online Data Privacy Act of 2024
1 source controls mapped|1 target controls covered
3%
Kenya DPA
1 source controls mapped|1 target controls covered
3%
Kenya Data Protection Act
1 source controls mapped|1 target controls covered
3%
TEFCA - Trusted Exchange Framework and Common Agreement
1 source controls mapped|1 target controls covered
3%
Global Cross-Border Privacy Rules (Global CBPR) Forum
1 source controls mapped|1 target controls covered
3%
EDM Council DCAM - Data Management Capability Assessment Model
1 source controls mapped|1 target controls covered
3%
US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule
1 source controls mapped|1 target controls covered
3%
POPIA
1 source controls mapped|1 target controls covered
3%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
1 source controls mapped|1 target controls covered
3%
Oman National Cybersecurity Framework
1 source controls mapped|1 target controls covered
3%
EU Medical Devices Regulation (MDR 2017/745)
1 source controls mapped|3 target controls covered
3%
OWASP DevSecOps Maturity Model (DSOMM)
1 source controls mapped|1 target controls covered
3%
LGPD
1 source controls mapped|1 target controls covered
3%
Vietnam PDPD
1 source controls mapped|1 target controls covered
3%
India DPDP Act
1 source controls mapped|1 target controls covered
3%
Liechtenstein DPA
1 source controls mapped|1 target controls covered
3%
NIST SP 800-122
1 source controls mapped|1 target controls covered
3%
IEEE 7000
1 source controls mapped|1 target controls covered
3%
Peru DPL
1 source controls mapped|1 target controls covered
3%
Iceland DPA
1 source controls mapped|1 target controls covered
3%
Kentucky Consumer Data Protection Act
1 source controls mapped|1 target controls covered
3%
Bahrain PDPL
1 source controls mapped|1 target controls covered
3%
Saudi Arabia PDPL
1 source controls mapped|1 target controls covered
3%
MTCS - Multi-Tier Cloud Security (Singapore)
1 source controls mapped|1 target controls covered
3%
Montana Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
3%
Turkey KVKK
1 source controls mapped|1 target controls covered
3%
Qatar DPL
1 source controls mapped|1 target controls covered
3%
ISO 27017
1 source controls mapped|1 target controls covered
3%
NIST SP 800-144
1 source controls mapped|1 target controls covered
3%
ISMAP (Japan)
1 source controls mapped|1 target controls covered
3%
Japan AI Guidelines
1 source controls mapped|1 target controls covered
3%
NIST SP 800-145
1 source controls mapped|1 target controls covered
3%
NIST SP 800-146
1 source controls mapped|1 target controls covered
3%
Nigeria Data Protection Regulation (NDPR)
1 source controls mapped|1 target controls covered
3%
Indonesia PDP Law
1 source controls mapped|1 target controls covered
3%
Malaysia PDPA 2010
1 source controls mapped|1 target controls covered
3%
Privacy Act 1988 (Australia)
1 source controls mapped|1 target controls covered
3%
NIST SP 800-190
1 source controls mapped|1 target controls covered
3%
Minnesota Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
3%
Mauritius DPA
1 source controls mapped|1 target controls covered
3%
ISO 22000
1 source controls mapped|1 target controls covered
3%
PDPA Thailand
1 source controls mapped|1 target controls covered
3%
Philippines Data Privacy Act (RA 10173)
1 source controls mapped|1 target controls covered
3%
Oregon Consumer Privacy Act
1 source controls mapped|1 target controls covered
3%
FATF 40 Recommendations
1 source controls mapped|1 target controls covered
3%
GLI-33 - Gaming Laboratories International Event Wagering Systems
1 source controls mapped|1 target controls covered
3%
NIST Privacy Framework 1.0
1 source controls mapped|1 target controls covered
3%
New Jersey Data Privacy Act
1 source controls mapped|1 target controls covered
3%
Virginia CDPA
1 source controls mapped|1 target controls covered
3%
Tennessee IPA
1 source controls mapped|1 target controls covered
3%
Uruguay DPL
1 source controls mapped|1 target controls covered
3%
Texas Data Privacy Act
1 source controls mapped|1 target controls covered
3%
UAE PDPL
1 source controls mapped|1 target controls covered
3%
Taiwan PDPA
1 source controls mapped|1 target controls covered
3%
UK Data Protection Act 2018
1 source controls mapped|1 target controls covered
3%
UK AI Regulation Framework
1 source controls mapped|1 target controls covered
3%
Utah Consumer Privacy Act
1 source controls mapped|1 target controls covered
3%
IEC 62351 - Power Systems Communication Security
1 source controls mapped|1 target controls covered
3%
Security of Critical Infrastructure Act 2018 (SOCI)
1 source controls mapped|1 target controls covered
3%
NABERS - National Australian Built Environment Rating System
1 source controls mapped|3 target controls covered
3%
ISO 56002
1 source controls mapped|3 target controls covered
3%
ISO 41001:2018 - Facility Management Systems
1 source controls mapped|3 target controls covered
3%
ISO 39001:2012 - Road Traffic Safety Management
1 source controls mapped|3 target controls covered
3%
ISO 37002:2021 - Whistleblowing Management Systems
1 source controls mapped|3 target controls covered
3%
ISO 50001:2018 - Energy Management Systems
1 source controls mapped|3 target controls covered
3%
ISO 22313:2020 - Guidance on Business Continuity Management Systems
1 source controls mapped|3 target controls covered
3%
GHG Protocol
1 source controls mapped|1 target controls covered
3%

Frequently Asked Questions

What is TCFD Recommendations?

TCFD Recommendations is a compliance framework from International with 8 domains and 30 controls. Task Force on Climate-related Financial Disclosures It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does TCFD Recommendations have?

TCFD Recommendations has 30 controls organised across 8 domains. The largest domains are Implementation (5 controls), TCFD Recommendations: Environmental Policy & Planning (5 controls), TCFD Recommendations: Operational Controls (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does TCFD Recommendations map to?

TCFD Recommendations maps to 126 other compliance frameworks. The top mapping partners are GRI Standards (17% coverage), EU SFDR (Sustainable Finance Disclosure Regulation) (17% coverage), ISO 14001 (17% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with TCFD Recommendations compliance?

Start your TCFD Recommendations compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about TCFD Recommendations requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 30 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 700 frameworks.

Get Started Free →

Free forever — no credit card required