Emissions Intensity

Expanded Definition

Emissions intensity is a normalised sustainability metric that compares greenhouse gas emissions to an activity measure such as revenue, units produced, passenger-kilometres, or compute usage. It is used to show whether an organisation is becoming less carbon-intensive as it scales, restructures, or changes its product mix.

Unlike absolute emissions, emissions intensity is designed for comparability across periods and business models. That makes it useful in reporting and target-setting, but it also introduces a governance challenge: the denominator must be chosen consistently, and any shift in accounting boundaries can make the metric look better without reflecting real operational change. Definitions vary across vendors and reporting regimes, so teams should document whether they are measuring operational emissions, value-chain emissions, or both.

For sustainability and risk teams, the key issue is not just reducing emissions total but understanding efficiency and trajectory. The most common misapplication is treating a lower intensity figure as proof of decarbonisation when the denominator changed, which occurs when revenue growth, outsourcing, or production mix shifts are not disclosed.

Examples and Use Cases

Implementing emissions intensity rigorously often introduces measurement complexity, requiring organisations to weigh comparability against the overhead of more granular data collection.

• A cloud provider reports emissions per unit of compute so it can compare data-centre efficiency across quarters, even when customer demand rises.
• A manufacturer tracks emissions per tonne of output to identify whether process upgrades are reducing carbon cost per product line.
• A financial services firm reports emissions intensity by revenue to show decarbonisation progress while the business expands into new regions.
• A procurement team uses supplier emissions intensity to distinguish between a high-emitting vendor with low output and a genuinely inefficient supplier, while aligning measurement practices with NIST SP 800-53 Rev 5 Security and Privacy Controls for stronger governance discipline.
• NHIMG’s Ultimate Guide to NHIs is relevant where emissions intensity is applied to AI and automation infrastructure, because workload growth can mask inefficient identity and access sprawl.

In practice, emissions intensity is most valuable when the organisation explains the denominator, the boundary, and the methodology in the same reporting cycle.

Why It Matters for Security Teams

Security and governance teams increasingly encounter emissions intensity where cloud, AI, and infrastructure platforms are subject to sustainability oversight. The metric can influence procurement decisions, architectural choices, and vendor risk reviews, especially when digital services are tied to energy consumption and workload growth. That makes the quality of the underlying data important, not just the headline figure.

For NHI-heavy environments, emissions intensity can also expose hidden inefficiency in automation estates. When service accounts, API keys, and agentic workflows proliferate, compute demand often grows faster than business value. NHIMG notes that NHIs outnumber human identities by 25x to 50x in modern enterprises, which makes operational sprawl a material governance issue, not a niche technical detail. The Ultimate Guide to NHIs is a useful reference point for understanding how identity lifecycle and visibility affect platform efficiency. In a control environment, emissions metrics should be paired with process integrity, using sources such as NIST SP 800-53 Rev 5 Security and Privacy Controls to support accountable measurement and reporting.

Organisations typically encounter the real impact only after a sustainability audit, investor challenge, or platform cost review, at which point emissions intensity becomes operationally unavoidable to address.