This Discussion Paper provides a comprehensive proposal on how ESG factors and ESG risks could be included in the regulatory and supervisory framework for credit institutions and investment firms. The paper identifies for the first time common definitions of ESG risks, building on the EU taxonomy and an overview of current evaluation methods. It also outlines recommendations for the incorporation of ESG risks into business strategies, governance and risk management as well as supervision.