Managing a large estate, you can probably name the sites that have flooded in the last five years. What you cannot tell your finance director is the portfolio-wide exposure, which ten sites carry the greatest risk of a costly event this year, or what the total cost of inaction looks like over a five-year horizon. A well-constructed flood risk assessment produces exactly those numbers. This guide explains how to build one that goes beyond a map and delivers something finance can act on.
Why does flood risk evaluation look different for a multi-site estate?
At portfolio scale, flood zone classification returns an unmanageable list, not a decision. The operational question is which sites carry the most financial exposure, in what order, and what each one would cost in a serious event.
A single-site assessment can review one flood source in isolation. A portfolio assessment cannot. Three distinct flood types each require a separate data layer and carry different risk profiles:
Fluvial flooding (riverine): caused by rivers overflowing their banks. Risk is documented in national flood zone maps and typically requires sustained rainfall over 24 to 48 hours, giving some operational lead time.
Pluvial flooding (surface water): caused by rainfall that exceeds drainage capacity. Not tied to proximity to rivers, affects any urban site and accounts for a significant and growing proportion of flood incidents at commercial properties globally. This is the most consistently underestimated type across multi-site estates.
Coastal flooding: caused by storm surge or tidal events. Geographically specific but growing in frequency and severity under current climate trajectories.
A portfolio assessment needs a consistent methodology across all three types, applied to every location, to produce a picture that is comparable across the estate. Running fluvial checks on half the portfolio and ignoring surface water exposure on the other half produces a risk register that misrepresents where the real exposure sits.
Practical tip: Run a surface water check on every site, not just those near rivers or those that have flooded before. Urban sites far from any watercourse can sit in high surface water flood risk areas due to drainage constraints. This is the category most commonly missed in portfolio-level reviews.
What data sources should you use to map flood risk across a global estate?
The right starting point for portfolio flood mapping is a provider that can return results for hundreds of locations, across all three flood types, in a single batch. Free government tools return one site at a time and cannot aggregate results, model financial exposure or produce outputs compatible with regulatory reporting.
For an estate operating across multiple countries, the most widely used global data providers are:
JBA Risk Management: global flood maps covering riverine, surface water and coastal sources, modelled across multiple return periods
Fathom Global: high-resolution flood hazard data with global coverage, used widely for portfolio screening and insurance pricing
FEMA (the US Federal Emergency Management Agency): the standard reference for US locations, covering fluvial and coastal flood zones
National mapping agencies: most countries maintain official flood hazard maps, useful for individual site checks but typically unable to support batch queries across a mixed-country portfolio
Climate projections matter here. IFRS S2 (the International Financial Reporting Standards climate disclosure standard) and TCFD (the Task Force on Climate-related Financial Disclosures) both require organisations to assess physical risk under defined climate scenarios, typically 1.5°C and 2°C warming pathways. Using historical probability alone understates risk for any site with a long asset life. Select a data provider that models forward risk under these scenarios, not just current conditions.
The SmartResilience approach to physical climate risk methodology explains how hazard data, climate scenarios and site-level asset data combine into a quantified assessment across multiple geographies.
Key takeaway: Free national tools are the right starting point for a single site. For a multi-site estate, you need a provider or platform that batches across the full portfolio, covers all three flood types and models climate change projections alongside current probability.
How do you translate flood exposure into financial figures at site level?
Three financial metrics translate a zone flag into a number finance recognises: annualised average loss, the 1-in-50-year event cost and the 1-in-100-year event cost. This is the step most flood risk assessments stop short of, and the main reason they fail to produce action.
Annualised average loss (AAL) is the expected cost of flooding across all probability scenarios, weighted by likelihood. It is the figure commercial insurers use to price flood exposure, and the number that connects a zone classification to a budget line. Alongside AAL:
1-in-50-year event cost: a moderate but plausible scenario, useful for operational planning and budget forecasting
1-in-100-year event cost: the severe scenario required by TCFD, IFRS S2 and CSRD (the EU Corporate Sustainability Reporting Directive) reporting, and the standard for insurance underwriting at most commercial properties
AAL modelled against climate projections: the forward-looking figure IFRS S2 requires, showing how annualised exposure changes under 1.5°C and 2°C scenarios
To calculate these figures for each site, the inputs required are: site revenue, stock value, business interruption duration for different flood depths, reinstatement costs and current insurance excess. Most multi-site businesses hold this data at site level but have never applied it to flood probability. The result is that finance and leadership consistently underestimate what the estate is actually exposed to.
There is a second, compounding factor. Minor weather damage at individual sites, a soaked stockroom, a temporary closure after heavy rain, a burst drain following a storm, is routinely expensed locally and never aggregated or reported centrally. When these costs are captured and rolled up across an estate, the actual annual cost of weather-related damage is almost always higher than any central P&L line reflects. Capturing this baseline is the entry point for building a credible internal business case.
Sainsbury's avoided £3m in flood damage across more than 1,000 sites by building this financial picture first, then connecting it to site-specific operational monitoring. The £3m figure represented the projected cost of events the business would have faced without early warning and site-level action plans in place.
How do you prioritise which sites to address first?
Once financial exposure is calculated per site, the estate can be tiered. The risk profile of each location, probability combined with the cost of an event, determines where monitoring effort and capital investment should concentrate.
A workable tiering structure for a multi-site estate:
Tier 1: high probability, high financial exposure. - These sites require immediate mitigation investment and site-specific monitoring. Capital requests for this tier can be justified using the AAL and 1-in-100-year event cost already calculated.
Tier 2: high probability and moderate exposure, or moderate probability and high exposure. - These sites require a defined response plan and monitoring, with mitigation investment phased over 12 to 24 months.
Tier 3: low probability, low exposure. - These sites require standard portfolio review without near-term capital requirement, and should be re-assessed when climate projections are updated or the physical estate changes.
Tiering by financial exposure frequently changes which sites move to the top of the list. A distribution warehouse in a surface-water flood zone, holding significant stock with limited drainage, may carry a higher AAL than a head office in a recognised flood zone that has never actually flooded. Ranking by zone classification alone misses this.
The prioritisation analysis also builds the internal business case. A ranked site list showing AAL alongside the cost of available mitigation measures frames the ask for finance as a return on investment. Flood barriers, drainage upgrades and building elevation improvements can each be modelled against the specific financial exposure of the site they protect, so capital requests are justified at project level.
How do you connect your assessment to operational monitoring and reporting?
Connecting an assessment to operations requires three things: a live monitoring system calibrated to each site, flood risk data applied to your insurance renewal conversation, and a regulatory disclosure layer that updates as the portfolio changes. Most businesses that have completed a flood risk assessment have not taken any of these steps, and that gap is where flood damage happens.
Live monitoring
National alert services in most countries cover fluvial and coastal events. Surface water flooding, which drives the majority of commercial flood incidents, sits outside the scope of most national warning systems. A catchment-level river warning provides no useful information about drainage conditions at an individual urban store or distribution centre.
Volume creates a second problem. During periods of elevated risk, a large multi-site operator may receive hundreds of national flood alerts per day. At that volume, operations teams cannot distinguish a credible warning for a specific high-risk site from background noise.
Site-specific early warning calibrates alerts to the conditions of each individual location: the water level, rainfall intensity or drainage threshold at which that specific site is genuinely at risk. Each alert arrives with a site-specific operational runbook telling the site manager exactly what to do before conditions deteriorate. Sainsbury's built this capability across more than 1,000 sites, with each location receiving alerts relevant to its own exposure. How live monitoring feeds into physical risk reporting explains how this operational layer connects to the disclosure outputs the business also needs.
Insurance negotiations
Flood risk data changes the insurance renewal conversation in two ways: by identifying which sites carry the highest exposure before the insurer does, and by demonstrating the mitigation steps already in place.
Insurers are tightening terms on flood-exposed commercial property across most markets. Excesses are rising. A business entering renewal negotiations without site-level risk data has no basis for challenging the underwriter's assessment of exposure or for demonstrating that risk has been actively managed. A documented assessment, a financial quantification layer, evidence of active monitoring and a record of mitigation investments present the organisation as a managed risk. That evidence directly affects the terms available at renewal.
Regulatory reporting
IFRS S2, TCFD, CSRD and ASRS (the Australian Sustainability Reporting Standards) all require organisations to disclose site-level financial exposure to physical climate risks, including flood. The AAL and event-cost methodology this guide describes is the input those disclosures need.
A static report produced once and filed cannot meet these obligations as portfolios grow and climate projections update. A live platform keeps the disclosure current automatically.
Should flood risk factor into property acquisition decisions?
Flood risk evaluation should start before a site is acquired, not after it floods for the first time. A flood screen at acquisition stage identifies inherited exposure before it becomes a balance sheet liability.
Three checks are sufficient at this stage:
Flood zone classification: the relevant national or global source covering fluvial and coastal exposure at the location
Surface water depth mapping: from a specialist provider covering drainage capacity and surface water flood extents
1-in-100-year event cost estimate: the projected financial exposure under a severe flood scenario, using the site's revenue and operational profile
Organisations that embed this screen into due diligence avoid acquiring high-exposure sites that then require costly retrospective mitigation. The same financial estimates provide consistent asset-level data for climate risk disclosure from the moment the site enters the portfolio.
How does SmartResilience support multi-site flood risk evaluation?
SmartResilience runs the process this guide describes at portfolio scale, connecting assessment to live operations across every site.
What a SmartResilience climate assessment covers:
Site-level financial quantification across all three flood types: AAL and event costs calculated for every location using global hazard models, climate scenario projections and each client's own financial data
Live monitoring calibrated to each site: site-specific early warning with operational runbooks that reach site managers before conditions deteriorate, not generic national alerts
Continuously updated outputs: as sites are added or retired, as climate projections change and as regulatory requirements evolve, the platform reflects the current portfolio state rather than a snapshot taken at a single point in time
Clients running this at scale:
Sainsbury's avoided £3m in flood damage across more than 1,000 sites. The assessment did not sit in a folder; it became the operational system the business runs on.
Many organisations have completed a flood risk assessment. Fewer have one that produces a financial number their CFO can act on and a monitoring system their site managers can use. If the assessment does not answer both questions, the gap between what is known and what can be done remains open.
Request a demo to see how SmartResilience quantifies flood exposure and deploys site-specific early warning across your estate.
