Sustainability Reporting Readiness

What is currently driving the demand for sustainability reporting at your company?

Who is asking determines which framework governs, how prescriptive the requirements are, and how much rides on getting the numbers right. A regulatory mandate carries filing deadlines and potential liability; investor and customer demands are contractual or commercial but still create real exposure if reported figures later prove unsupportable.

With no external mandate, the priority is monitoring applicability triggers and retaining baseline data, not building full reporting infrastructure.

Official guidance: U.S. Securities and Exchange Commission

Have you formally scoped which standards, topics, and metrics apply to you - for example a documented mapping of required disclosures under IFRS S1 and IFRS S2, the SEC climate rule items, or your customers' specific data requests?

Scoping is the highest-leverage step: it converts diffuse ESG pressure into a finite list of disclosures and metrics. IFRS S1 requires material information about sustainability-related risks and opportunities that could reasonably be expected to affect the entity's prospects, with materiality judged from the perspective of primary users of general purpose financial reports. The common trap is skipping straight to data collection and gathering metrics no framework or counterparty actually requires.

Run a structured applicability and materiality assessment before investing in data or controls - IFRS S1 defines the disclosure perimeter everything else depends on.

Official guidance: U.S. Securities and Exchange Commission

What is the current state of your greenhouse gas emissions inventory?

Greenhouse gas emissions are the one metric almost every regime demands: IFRS S2 paragraph 29(a) requires gross Scope 1, Scope 2, and Scope 3 emissions measured in accordance with the Greenhouse Gas Protocol Corporate Standard unless a jurisdictional authority requires a different method. The recurring trap is an inventory built once by an outside consultant that no one inside the company can explain, reproduce, or update the following year.

IFRS S1 and IFRS S2 as issued, including the metrics and measurement requirements referenced in this step.

Official guidance: U.S. Securities and Exchange Commission

• ISSB IFRS Sustainability Disclosure Standards

Beyond emissions, does each reported sustainability metric have a named owner and a repeatable collection process - for example energy, workforce, safety, or waste data drawn from defined systems on a defined calendar?

Sustainability data typically lives outside the finance function - facilities, human resources, environmental health and safety, procurement - where no one has historically been accountable for reporting-grade accuracy. COSO Principle 13 frames the standard: the organization obtains or generates and uses relevant, quality information to support internal control. The trap is treating a once-a-year spreadsheet collection as a process; comparability collapses when definitions and owners change between periods.

Assign metric-level ownership and repeatable collection before reporting externally - COSO Principle 13 requires relevant, quality information, and an ad hoc year-end scramble cannot deliver it.

Official guidance: U.S. Securities and Exchange Commission

Where reported metrics depend on third parties - landlords, logistics providers, franchisees, or suppliers feeding Scope 3 - do you have defined data-sharing arrangements or documented estimation methodologies for those inputs?

Scope 3 emissions and many workforce and sourcing metrics depend on data the company does not control. IFRS S2 requires disclosure of Scope 3 emissions and of the measurement approach, inputs, and assumptions used, so a documented estimation methodology is acceptable where primary data is unavailable - an undocumented guess is not. The trap is signing customer contracts that promise supplier-level data the company has no mechanism to obtain.

Value-chain data dependencies are unresolved - secure data-sharing arrangements or adopt documented estimation methodologies before committing to report Scope 3 or supplier-dependent metrics.

Official guidance: U.S. Securities and Exchange Commission

Are there documented controls over the sustainability figures you report - defined preparers and reviewers, reconciliation of reported figures to source data, and retained evidence of review - comparable in discipline to your financial reporting controls?

External sustainability figures increasingly carry the same exposure as financial data - regulatory liability, contractual representations, and greenwashing claims - but are rarely produced under equivalent control. The COSO 2013 framework applies to reporting objectives generally, not only to financial statements, so preparer-reviewer separation, reconciliation to source, and evidence retention are the same disciplines. The trap is a well-controlled general ledger sitting next to an uncontrolled ESG spreadsheet feeding the same annual report.

The 2013 framework and related COSO guidance on applying internal control to sustainability information.

Official guidance: U.S. Securities and Exchange Commission

• COSO Internal Control - Integrated Framework

Does the board or a designated committee exercise documented oversight of sustainability reporting - a charter reference, scheduled reporting to the board, and review of significant judgments such as materiality calls and methodology choices?

Governance is a mandated disclosure, not background: IFRS S1 and IFRS S2 both require a description of the governance body responsible for sustainability-related risks and opportunities, its mandate, and how it is informed. The SEC climate-related disclosure rules likewise call for description of board oversight of climate-related risks, subject to the rules' current legal status. The trap is disclosure drafted to imply oversight that charters and minutes cannot actually evidence.

Establish documented board or committee oversight - IFRS S1 and IFRS S2 both require disclosure of the governance body responsible, and an empty answer is itself a red flag to users.

Official guidance: U.S. Securities and Exchange Commission

If an assurance provider asked tomorrow, could you hand over support for each reported figure - the methodology, the source data, the calculation, and evidence of review - without rebuilding anything after the fact?

Assurance over sustainability disclosures is spreading quickly: the SEC climate rules as adopted phase in attestation over Scope 1 and Scope 2 emissions for larger filers, ISSA 5000 gives providers a global engagement standard, and investors increasingly discount unassured figures. The test is reperformability - an independent party should be able to trace any reported figure to source and reproduce it. The trap is confusing a published number with a supported one.

Fundamentals are in place - formalize the reporting calendar, run pre-assurance readiness testing, and confirm disclosure consistency across every channel. Close the evidence gap before external assurance or regulatory filing - support rebuilt after the fact rarely survives testing.

Official guidance: U.S. Securities and Exchange Commission