ESG delivery risk