Companies that do not have an ESMS in place may face a variety of risks, including financial, legal, and reputational risks. Companies may also be exposed to environmental and social liabilities, such as fines, penalties, and other sanctions. Additionally, companies may face increased scrutiny from stakeholders, including investors, customers, and regulators.