How should financial institutions assess climate risks?