How to Assess Climate Vulnerability for Facility Assets: A 7-Step Methodology

A climate vulnerability assessment answers a straightforward question: what physical risks threaten this facility, and what could they cost? For a single building, a specialized consultant might spend weeks to deliver that answer. For a portfolio of 500 commercial properties spread across three continents, manual assessments become too slow and costly to be practical.

The methodology below breaks the assessment into seven discrete steps. Each step has specific data inputs, published scientific sources, and a quantifiable output. Together, they form a pipeline that moves from a raw address to an annualized dollar figure for climate-related physical risk.

This method measures two parts of climate vulnerability: whether hazards reach the site, and how the building responds to flood water. The third part, the site’s capacity to cope and adapt, comes from the site itself; our guide to climate vulnerability assessment covers it.

Step 1: Geocode Facility Addresses

Every spatial analysis starts with coordinates. A climate vulnerability assessment requires converting each facility’s street address into a latitude-longitude pair precise enough to place it on the correct side of a flood boundary.

Coordinate precision matters more than most teams realize. A rooftop-level geocode (accuracy within 10 meters) places a warehouse inside a specific flood zone. A city-centroid geocode (accuracy within 5 kilometers) might place it in the wrong county entirely. For flood depth modeling in Step 5, a small error can move a site onto a flood cell with a different depth.

Input	Output	Why It Matters
Street address	Latitude, Longitude	All downstream spatial queries depend on coordinate accuracy
Zip/postal code	Accuracy grade (rooftop, parcel, interpolated, centroid)	Low-accuracy geocodes need manual review before flood analysis
Country code	Confidence score	Flags ambiguous or unresolvable addresses

For portfolios, batch geocoding processes thousands of addresses in a single pass. Each record gets a confidence score and accuracy grade. Records below a confidence threshold get flagged for manual review before entering the risk pipeline. Try our free Zip Code to Lat/Long Converter to see coordinate conversion in action.

Step 2: Analyze Land Use and Environmental Context

With coordinates in hand, the next step examines what surrounds each facility. Satellite-derived land cover data reveals conditions that amplify or reduce climate risk at a site.

ESA WorldCover provides 10-meter resolution land cover classification for every point on Earth. At that resolution, you can distinguish between a warehouse surrounded by impervious pavement (high runoff, flood amplification) and one bordered by grassland and tree cover (natural drainage, lower surface temperatures).

Three environmental checks matter for a climate vulnerability assessment:

Land cover classification. The ESA WorldCover dataset assigns each 10m pixel to one of 11 classes: tree cover, shrubland, grassland, cropland, built-up, bare/sparse vegetation, snow/ice, permanent water, herbaceous wetland, mangroves, and moss/lichen. A facility surrounded by 80% built-up land faces different stormwater dynamics than one in an agricultural setting.

Change detection. Comparing land use and land cover snapshots over time flags sites where significant degradation has occurred. Newly deforested land upstream of a facility increases runoff. Rapid urbanization around a site reduces natural drainage. These changes compound forward-looking risk.

Biodiversity and deforestation proximity. For organizations reporting under the TNFD framework or complying with EUDR regulations, the land cover analysis identifies sites near active deforestation fronts or within biodiversity-sensitive areas. The same check flags a facility that sits inside or beside a protected area, such as a Ramsar-listed wetland, which can carry permitting conditions and lender scrutiny that a climate-only screen would miss.

Step 3: Review Historical Hazard Events

Before modeling what could happen in the future, check what has already happened. Historical hazard event data grounds the assessment in observed reality and builds confidence in forward-looking risk ratings.

For example, a facility rated “High” for river flood risk carries more weight when paired with evidence of 14 flood events within 10 kilometers over the past 25 years, including three that caused over $10 million in property damage each.

Two global records do most of the work: Google’s Groundsource flood-event dataset, compiled from news reports worldwide from 2000 to 2026, and NASA’s landslide catalog. National records, such as NOAA’s Storm Events Database in the US, add detail where they exist. News-based records place each event at the center of the reported area, so start with a tight radius, around 10 kilometers for floods, and widen it only if the record is thin.

Explore historical hazard data yourself: browse 913 flood events on our Historical Floods Map or 12,948 landslide events on our Landslide Risk Map.

Historical records do not only confirm the forward-looking ratings. Sometimes they correct them. Picture a site with a strong flood signal in the record: close to thirty flood episodes within ten kilometers, clustered in the same month year after year. Yet the median rainfall on those flood days is under two millimeters. That pattern tells you the flooding is not driven by rain landing on the site. It follows a nearby river, canal, or irrigation system. A rainfall-based projection would score extreme-rainfall risk as modest and understate the true flood exposure, while the recurring record and the river-flood rating are the more reliable signals. When a projection and the historical record disagree, the flood mechanism tells you which one to trust.

Step 4: Run a 12-Hazard Physical Risk Assessment

With the site’s location validated, its environmental context mapped, and its hazard history documented, the assessment moves to forward-looking climate projections. A physical risk assessment evaluates exposure to 12 distinct climate hazards using global climate model outputs. Each hazard has its own measurement approach. For example, heat stress is typically assessed using maximum daily temperature thresholds, while drought relies on standardized precipitation indices.

The data backbone is NASA NEX-GDDP-CMIP6, a bias-corrected, statistically downscaled dataset derived from CMIP6 global climate models at approximately 25km resolution. Five climate variables feed the hazard calculations: daily mean temperature, daily maximum temperature, daily minimum temperature, precipitation flux, and surface wind speed.

Each hazard is assessed across two emission scenarios and four time horizons. The table shows how each one is measured:

Hazard	Key Metric	Primary Data Source
Temperature Change	Mean temperature shift vs baseline	NEX-GDDP-CMIP6 (tas)
Heat Wave	Days above extreme heat threshold	NEX-GDDP-CMIP6 (tasmax)
Cold Stress	Days below freezing threshold	NEX-GDDP-CMIP6 (tasmin)
Drought	Precipitation deficit proxy (SPI analog)	NEX-GDDP-CMIP6 (pr)
Water Stress	Basin-level water stress index	WRI Aqueduct 4.0
Precipitation Change	Annual precipitation shift vs baseline	NEX-GDDP-CMIP6 (pr)
Extreme Rainfall	Days above the 99th percentile of daily rainfall	NEX-GDDP-CMIP6 (pr)
River Flood	Terrain-modified precipitation exposure	NEX-GDDP-CMIP6 + global terrain model
Sea Level Rise	Projected SLR vs elevation above sea level	IPCC AR6 + global terrain model
Severe Storm	Surface wind change plus historical tropical cyclone tracks	NEX-GDDP-CMIP6 (sfcWind) + NOAA IBTrACS
Wildfire	Fire weather days estimated from maximum temperature, reduced on built-up land	NEX-GDDP-CMIP6 + WorldCover
Landslide	Slope gradient + rainfall trigger	Global terrain model + NEX-GDDP-CMIP6 (pr)

The two SSP scenarios bracket the range of plausible futures. SSP2-4.5 represents a middle-of-the-road pathway with moderate mitigation (about 2.7°C warming by 2100). SSP5-8.5 represents a fossil-fuel-intensive pathway with limited climate policy (about 4.4°C warming by 2100). Assessing both scenarios shows how much additional risk the facility faces if global emissions remain high.

Each hazard receives a rating on a five-tier scale: Low, Moderate, High, Severe, or Extreme. A composite risk score aggregates the individual hazard ratings with geographic weighting adjustments: coastal sites weight sea level rise and severe storms higher and drought, water stress, wildfire, and landslide lower, while inland sites drop sea level rise from the score. These ratings come from a downscaled climate model on a grid about 25 km wide, so read them as a first pass.

The output of Step 4 identifies the two or three hazards of primary concern for each facility. These “hazards of interest” drive the detailed quantitative analysis in Steps 5 through 7.

Step 5: Model Flood Depth Across Return Periods

When the 12-hazard assessment flags river flood or sea level rise as a primary concern, the next step quantifies that risk with actual flood depth estimates in meters. Flood depth is the critical input for financial damage modeling in Step 6.

Riverine depth starts from a global flood-hazard map at about 90 m resolution for today’s climate. It is then scaled by the change that global flood models project for each scenario, taking the median of five climate models. Those flood projections come from the earlier CMIP5 model generation and are labeled with the matching SSP pathway. Coastal depth comes from a global coastal flood model, with a choice of sea level rise percentile and land subsidence. Full detail is on our flood depth methodology page.

Both flood types are modeled across four return periods, two scenarios, and three future time horizons:

Return Period	Baseline	SSP2-4.5 2050	SSP5-8.5 2050
RP10 (10% annual chance)	1.2m	1.4m	1.6m
RP50 (2% annual chance)	3.8m	4.3m	4.9m
RP100 (1% annual chance)	5.1m	5.8m	6.7m
RP500 (0.2% annual chance)	7.4m	8.5m	9.8m

Illustrative depths for a deep river-valley site. The loss example in Steps 6 and 7 uses a shallower floodplain site.

The model also flags edge cases: locations that are currently dry but become flooded under future climate scenarios (“new flood zones”), locations where the baseline flood map has gaps, and locations where climate models disagree significantly (high model spread).

One outcome deserves its own note: many sites return no flood depth at all, because the nearest modeled watercourse sits a kilometer or more away and no water reaches the building pad. A clean zero is a finding, not a missing value. It documents that the asset falls outside the modeled flood footprint, which is exactly what a lender, insurer, or disclosure reviewer wants on the record. Read it as a screening result rather than a guarantee, since a global model on a coarse grid can miss on-pad water that a site-specific hydraulic study would catch. The assessment should say plainly which case applies: outside the flood footprint, or not calculable.

River and coastal depths are estimated separately, and flooding from intense local rain is outside both, so a site can read dry here and still flood in a cloudburst.

Step 6: Apply Damage Curves to Quantify Financial Loss

Flood depth in meters becomes meaningful to decision-makers only when translated into dollars. Depth-damage functions are the published, peer-reviewed curves that map a given water level to a percentage of building value destroyed.

Two independently published datasets provide this translation:

FEMA HAZUS 4.0 covers the United States with 196 individual depth-damage curves spanning 33 building occupancy types (residential, commercial, industrial, agricultural, institutional). Each curve provides separate structural and contents damage ratios at 29 depth points from -4 feet (basement flooding) to +24 feet. The curves originate from Federal Insurance Administration claims data and US Army Corps of Engineers field studies.

JRC Huizinga et al. 2017 provides global coverage across 214 countries with continent-specific curves for 6 building sectors (residential, commercial, industrial, agriculture, transport, infrastructure). Country-specific construction cost data converts damage ratios into EUR per square meter.

The calculation follows a clear sequence. First, adjust the raw flood depth for the building’s first floor height to determine the actual water depth inside the structure. Then look up the damage ratio on the appropriate curve. Finally, multiply by replacement value.

Metric	HAZUS (US)	JRC (Global)
Flood depth above grade	4.5 ft (1.37m)	1.37m
First floor height	1.0 ft	0.3m
Depth in structure	3.5 ft	1.07m
Structural damage ratio	18.2%	n/a
Contents damage ratio	22.7%	n/a
Combined damage ratio	n/a	31.4%
Structural loss	$182,000	n/a
Contents loss	$113,500	n/a
Total estimated loss	$295,500	EUR 147,000

Illustrative calculation for a 1-story commercial building (COM4, no basement) with $1M structural replacement value and $500K contents. Riverine flood zone, RP100 depth.

For US properties, both HAZUS and JRC estimates are computed independently and returned side by side. The two are not directly comparable (HAZUS separates structure and contents; JRC combines them), but having both perspectives gives risk managers flexibility in their analysis.

Try the methodology yourself with our free Flood Damage Calculator. Enter a flood depth, building type, and replacement value to see HAZUS and JRC estimates computed in real time.

Step 7: Calculate Expected Annual Damage and Compile the Audit

Individual flood scenarios produce individual loss numbers. A RP100 event at one facility might cause $296,000 in damage. But how likely is that event in any given year, and what is the annualized cost of flood risk across all return periods?

Expected Annual Damage (EAD) answers that question by integrating losses across the full range of flood frequencies using trapezoidal approximation. EAD is a common input to climate risk disclosures, insurance reviews, and capital decisions.

Return Period	Annual Exceedance Probability	Estimated Damage	Trapezoidal Area
RP10	0.100	$45,000	n/a
RP50	0.020	$180,000	$9,000
RP100	0.010	$296,000	$2,380
RP500	0.002	$520,000	$3,264
Expected Annual Damage (EAD)			$14,644/year

The trapezoidal area between each pair of return periods represents the contribution of that frequency band to annualized loss. Summing all areas gives the EAD.

This calculation counts no damage from floods more frequent than the 10-year event and stops at the 500-year event, so it slightly understates the full annual figure. State both assumptions next to the number.

For this illustrative facility, the climate vulnerability assessment produces a clear financial metric: $14,644 per year in expected flood damage under baseline conditions. Run the same calculation under SSP5-8.5 2050 projections and the EAD rises, quantifying the incremental cost of climate change for this specific asset.

At the portfolio level, EAD values are aggregated and ranked. A register of 500 commercial properties produces a ranked table showing which facilities carry the highest annualized flood exposure, which hazards dominate, and how those exposures shift under different climate scenarios.

The final write-up follows the four areas used by the TCFD and now IFRS S2. Governance names who owns the assessment. Strategy presents the scenario results. Risk management documents the seven steps, data, and assumptions. Metrics report the amount and share of assets vulnerable to physical risk, with EAD per site. See climate value at risk for the portfolio view.

For a portfolio of 500 commercial properties, Continuuiti delivers a ranked risk register with per-property EAD, 12-hazard profiles, historical event context, and flood depth projections. The complete climate vulnerability assessment runs as a single automated batch.

Frequently Asked Questions

Does this method measure adaptive capacity?

No model can see a site’s flood barriers, backup power, or continuity plans, so this method assumes none exist. Record those measures with the site team and adjust the ranking, as our climate vulnerability assessment guide explains.

What data do I need to start a climate vulnerability assessment?

At minimum, you need facility addresses (for geocoding) and building occupancy type (for damage curve selection). For more precise results, include building stories, basement presence, replacement value, and contents value. The climate hazard data, flood depth models, and damage curves are sourced from public scientific datasets and do not require proprietary data inputs.

Can climate vulnerability assessments be automated for large portfolios?

Yes. Each step in the methodology uses structured data inputs and published scientific models, making the entire pipeline automatable. Platforms like Continuuiti process the full 7-step assessment for thousands of properties in a single batch, from geocoding through EAD calculation, using peer-reviewed damage functions from FEMA HAZUS and JRC.

How much does a climate vulnerability assessment cost?

There is no public price list, and quotes vary widely with scope. The main cost drivers are the number of sites, whether you need a rating or a money figure per site, whether engineers visit, and how much documentation an auditor will need. Screening with published models costs far less per site than a site visit or a hydraulic study, so most programs screen every site first and pay for depth only where the screen points.