Water Stewardship CDP: Basin-Level Risk and Disclosure

Key Takeaways

• CDP Water Security is the dominant entity-level investor framework, scoring companies A to D; the 2024 questionnaire integrated with TCFD/ISSB, TNFD, and SBTN freshwater methods, making CDP scores the most cross-referenced water disclosure metric.
• AWS Standard 2.0 is a site-level certification covering five outcomes: good water governance, sustainable water balance, water quality, important water-related areas, and WASH, many large companies use it to supply evidence for their CDP responses.
• A common investor mistake is treating aggregate water-withdrawal numbers as meaningful without basin context, withdrawing 1 million m3 in a water-rich basin and 100,000 m3 in a stressed one carry entirely different financial risks.
• CDP's 2024 essential criteria require basin-level data for high-risk locations, making group-level water totals insufficient for top-tier A-list scoring and for regulatory disclosures that follow TNFD priority-location principles.

What It Is

Two reference systems shape the field:

• CDP Water Security, run by the non-profit CDP since 2010 and integrated in 2024 into CDP's single Corporate Questionnaire alongside climate change and forests. CDP scores responses on an A to D scale with associated public letter grades. The 2024 methodology runs to roughly 50 pages of scoring criteria.
• AWS Standard 2.0, a site-level certification covering five outcomes: good water governance, sustainable water balance, good water quality, important water-related areas, and safe water, sanitation, and hygiene (WASH).

CDP is the dominant entity-level framework. AWS is the dominant site-level operational framework. Many large issuers use both, with AWS feeding evidence into CDP responses.

The Intuition

Water risk is local. A firm's group-level water-use number is almost meaningless without basin-level context, because withdrawing 1 million m3 in a water-rich basin is a different exposure from withdrawing 100,000 m3 in a stressed one. Climate disclosure has converged on tonnes of CO2 equivalent as a universal metric. Water has no equivalent: physical scarcity, water quality, regulatory regime, and ecosystem dependency vary by location and even by season.

CDP and AWS handle this by structuring disclosure around basin-level data (CDP) and site-level outcomes (AWS), rather than collapsing everything into a single corporate metric. Investors use the resulting datasets to identify exposure to high-risk basins, both directly and through suppliers.

How It Works

CDP's Water Security questionnaire (now part of the Corporate Questionnaire) has roughly a dozen modules covering current state, business impacts, procedures, risks and opportunities, facility-level data, and targets:

CDP Water Security 2024, structural elements (selected)

W1  Current state         withdrawals, discharges, basin-level data
W2  Business impacts      financial impacts of water-related events
W3  Procedures            risk identification, value-chain coverage
W4  Risks and opportunities  exposure, financial materiality, response
W5  Facility-level data   site list with risk indicators
W6  Governance            board oversight, policies
W7  Business strategy     scenario analysis, targets
W8  Targets and goals     quantified, time-bound
W9  Verification          assurance status
W10 Sign-off              authorising executive

The 2024 release explicitly aligned questions with TCFD/ISSB IFRS S2, TNFD, and the Science Based Targets Network (SBTN) freshwater methods. Each response is scored against criteria covering both completeness (was the question answered) and quality (does the response demonstrate awareness, management, and leadership).

Companies receive a letter score on the A-D scale plus an "F" for failing to provide enough information. Sector-specific scoring incorporates industry context.

Worked Example

A consumer goods firm with 78 manufacturing facilities globally completes the CDP Water Security module. It uses the WRI Aqueduct tool to overlay site locations on the Baseline Water Stress index. Eleven facilities are in extremely or highly stressed basins, accounting for 22% of group water withdrawal but 38% of group revenue.

In W4 the firm discloses three material water-related risks: drought-driven production curtailment in two Mediterranean basins (estimated 14 million EUR EBITDA at risk), tightening discharge limits in a South American basin, and reputational risk from a community dispute in a Southern African basin. Mitigation actions include AWS certification of the four highest-risk sites by 2027, a 35% reduction in water intensity at high-stress sites by 2030 against a 2020 baseline, and basin-level collective action agreements.

In W8, targets are reported with absolute and intensity baselines, target years, and assurance status (limited assurance through year 1, reasonable assurance from year 3). Verification statements from a Big Four firm support facility-level numbers.

Common Mistakes

1. Reporting group-level numbers without basin context. Aggregate water withdrawal disconnected from basin stress is uninformative. CDP's 2024 essential criteria explicitly require basin-level data for high-risk locations.

2. Confusing efficiency with stewardship. Reducing water intensity at a single facility does not constitute stewardship if neighbouring users compete for the same source. Stewardship requires basin-wide context and collective action where appropriate. AWS calls this "good water governance."

3. Ignoring value-chain water. For agriculture, apparel, food, beverages, and semiconductors, the largest water exposure usually sits upstream. Direct-operations disclosure understates risk. CDP's 2024 questionnaire explicitly extends to upstream and downstream where material.

4. Treating water and climate as separate workstreams. Many drought events are climate-driven, and many climate-mitigation pathways (cooling for thermal generation, irrigation for biofuels) are water-intensive. CDP, ISSB, and TNFD all push for integrated assessment.

5. Skipping the verification module. A response can score well on disclosure quality and still flag low because of missing assurance. Verification is mandatory for top-tier (A-list) recognition under CDP's essential criteria.

Frequently Asked Questions

Q: What is water stewardship CDP in simple terms? CDP runs an annual questionnaire where companies disclose their water withdrawals, basin-level exposures, business risks from water events, governance, and targets. CDP scores responses on an A-to-D scale. The A-list requires demonstrated leadership in water governance and third-party verification of key data.

Q: How does water stewardship disclosure affect investment decisions? Water-stressed basin exposure can create direct financial risk through production curtailment, regulatory withdrawal limits, community conflicts, and reputational damage. CDP Water scores help investors quickly identify which companies have mapped their basin-level exposure and have credible management plans versus those relying on group-level totals.

Q: What is a real-world example of CDP water risk disclosure? A consumer goods firm with 78 global manufacturing sites overlays them on the WRI Aqueduct tool. Eleven facilities in extremely stressed basins account for 22% of water withdrawal but 38% of group revenue. The CDP submission discloses three financial risks totalling 14 million EUR EBITDA at risk and targets AWS certification at the four highest-risk sites by 2027.

Q: How can investors identify companies with genuine water stewardship versus box-ticking? Check whether the CDP disclosure includes basin-level facility data, quantified financial impacts in the risk section, and third-party verification of targets. Companies reporting only aggregate withdrawal numbers with no basin context or financial impact quantification are not yet practicing genuine stewardship.

Q: How is water stewardship CDP different from climate disclosure? Climate risk can be measured as tonnes of CO2 equivalent, a single global metric. Water risk is inherently local, the same withdrawal volume carries different financial and ecological risk depending on basin-level scarcity, regulation, and seasonal variation. CDP water disclosure requires site-level data; aggregate numbers are insufficient.

Sources

1. CDP. "Full Corporate Scoring Methodology, Water Security 2024." https://cdn.cdp.net/cdp-production/comfy/cms/files/files/000/009/118/original/2024_Full_Corporate_Scoring_Methodology_-_Water_Security.pdf
2. CDP. "Water Security Scoring Essential Criteria 2024." https://cdn.cdp.net/cdp-production/comfy/cms/files/files/000/009/179/original/CDP_Water_Security_Scoring_Essential_Criteria_2024.pdf
3. CDP. "Full Corporate Questionnaire 2024." https://www.cdp.net/en/2024-disclosure/cdp-full-corporate-questionnaire
4. Alliance for Water Stewardship. "AWS Standard 2.0." https://a4ws.org/the-aws-standard-2-0/

Disclaimer

This article is educational content only and is not financial advice. Nothing here is a recommendation to buy, sell, or hold any security. Consult a licensed advisor before making investment decisions.