We studied the world’s top airlines and hospitality firms – many are still poor at reporting risks around climate and pandemics