Impacts, dependencies and governance are critical elements to assess companies’ biodiversity-related risks.