ESG Strategy, Reporting and Regulatory Compliance

GRI is a voluntary global framework for sustainability reporting, widely used as the baseline for ESG disclosure globally but not legally mandatory in most jurisdictions. CSRD is the EU's mandatory sustainability reporting directive applying to large EU companies on a phased timeline, with reporting requirements defined by the European Sustainability Reporting Standards. IFRS S1 and S2 are the ISSB standards, a global baseline adopted by regulators in the UK, Australia, Canada, Japan and many other jurisdictions.

The frameworks that apply to your organization depend on your legal domicile, listing status, revenue size and the regulatory requirements of the markets in which you operate. Many organizations are subject to multiple frameworks simultaneously, which is why an integrated reporting architecture that maps a single data set to multiple frameworks is the practical approach.

ESG ratings agencies score organizations against their own proprietary methodologies, which weight different indicators differently. Improving a rating requires first understanding which specific indicators are dragging the score down relative to sector peers, then determining whether the underlying performance gap is real or a disclosure gap, and addressing whichever it is with targeted action.

Broad disclosure improvements rarely move ratings efficiently. The most effective approach works backwards from the scoring methodology of each agency, identifying the precise changes in governance, policy documentation, quantitative data disclosure or management systems that will move the needle on the specific indicators with the highest weighting in that agency's model.

Assurance readiness means having the data quality, methodology documentation, data governance controls, audit trail and internal review processes in place for a third-party auditor to provide a formal opinion on the accuracy of your sustainability disclosures. Under CSRD, limited assurance is mandatory from the first reporting year, with reasonable assurance required from 2028.

The organizations that struggle most with assurance are those that prepare for it retrospectively. The most efficient approach builds assurance-ready data controls into the reporting infrastructure from the outset, rather than retrofitting governance around data collected without audit requirements in mind.

Climate scenario analysis requires organizations to evaluate their exposure to physical and transition risks across multiple recognized climate pathways, typically including a 1.5 degree Celsius scenario, a 2 degree scenario and a higher warming scenario, and to quantify the financial impact of those risks on revenue, costs, asset values and capital requirements.

The most common gap we see is organizations producing scenario narratives that describe climate risks qualitatively but cannot translate them into financial terms that investors and auditors can test. This is the standard the latest regulatory guidance is moving toward, and the organizations building that quantification capability now are ahead of the curve.