Sustainability for Chief Financial Officers

The CFO's Sustainability Challenge

Sustainability has landed squarely on the CFO's desk — and it's not leaving. CSRD requires external assurance of sustainability statements (limited assurance, a lower level than a financial statement audit), ISSB standards require climate-related financial disclosures integrated with annual reports, and investors routinely tie ESG performance to cost-of-capital calculations. The CFO is no longer a bystander to sustainability reporting; they are a principal accountable party.

The financial implications are tangible. CSRD non-compliance exposes companies to legal penalties across EU member states. Qualified assurance opinions on sustainability statements carry the same reputational weight as financial audit qualifications. Climate-related asset impairments and transition costs must be recognized in financial statements. Carbon pricing mechanisms — whether through the EU ETS, CBAM, or voluntary internal carbon prices — directly affect operating margins and capital allocation decisions.

For CFOs accustomed to decades of standardized financial reporting infrastructure, the immaturity of ESG data systems is a particular frustration. Sustainability data lacks the controls, audit trails, and governance that finance teams take for granted. Bridging this gap — building financial-grade ESG data infrastructure — is arguably the CFO's most critical sustainability contribution.

Key Responsibilities

• Sustainability assurance readiness: Ensure that ESG data, controls, and documentation meet the standards required for limited assurance under CSRD (Omnibus I dropped the planned move to reasonable assurance) and, for companies covered by California's SB 253, reasonable assurance of Scope 1 and 2 emissions from 2030. Coordinate with external auditors and internal audit functions.

• Climate-related financial disclosure: Oversee the integration of climate risks and opportunities into financial statements, management commentary, and connected reporting between financial and sustainability disclosures.

• ESG data governance and controls: Establish SOX-equivalent controls over sustainability data — ownership, validation, approval workflows, and audit trails.

• Capital allocation for sustainability: Evaluate and approve investments in decarbonization, adaptation, and ESG compliance infrastructure. Apply internal carbon pricing to capital expenditure decisions.

• Sustainable finance strategy: Assess opportunities for green bonds, sustainability-linked loans, and other instruments that reduce cost of capital and align financing with ESG commitments.

• Tax and incentive optimization: Track the climate-related tax incentives that remain (the July 2025 U.S. budget law ended or cut back many IRA credits, while others, such as the 45X manufacturing and 45Q carbon capture credits, continue), EU innovation funds, national green subsidies, and carbon pricing mechanisms (EU ETS, CBAM).

• Investor relations on ESG: Support the IR function in responding to ESG-focused investor engagement, proxy advisor expectations, and ESG rating agency questionnaires.

Regulatory Pressure Points

CSRD assurance. Limited assurance is required from the first report. The EU's Omnibus I directive (in force March 18, 2026) removed the planned move to reasonable assurance and gave the Commission until July 1, 2027 to adopt limited assurance standards; until then, member states may apply national standards (Omnibus I).

Connected reporting under ESRS. CSRD requires consistency between sustainability and financial disclosures. The 2023 ESRS require companies to reconcile the climate-related financial effects they report under ESRS E1 to the relevant line items in the financial statements, though phase-ins let them hold these figures back at first. Under the simplified ESRS adopted in July 2026, which apply from financial year 2027, companies already reporting may omit anticipated financial effects before financial year 2028 and quantitative figures through 2029 (PwC). CFOs must ensure alignment across reporting teams.

EU CBAM (Carbon Border Adjustment Mechanism). Since CBAM's definitive period began on January 1, 2026, importers of carbon-intensive goods (cement, iron, steel, aluminum, fertilizers, electricity, hydrogen) must buy certificates reflecting the carbon price that would have applied under the EU ETS. Importers of 50 tonnes or less of covered goods a year are exempt (the threshold does not apply to electricity and hydrogen), and certificate sales open February 1, 2027. This directly affects procurement costs and margin analysis for affected sectors.

ISSB adoption in key markets. As of April 2026, 28 jurisdictions had adopted IFRS S1 and S2 in some form. Australia has phased in mandatory climate reporting under its version (AASB S2) since 2025, Japan's SSBJ standards apply to the largest Prime Market companies from years ending March 2027, and Singapore phased in climate reporting for listed companies from 2025. The UK issued its versions in February 2026 for voluntary use, with the FCA proposing to require them for listed companies from January 2027, and Canada's standards are voluntary. For multinational companies, this means navigating multiple sustainability disclosure regimes simultaneously — a coordination challenge that falls naturally to the CFO function.

Quick Wins

1. Map sustainability data to financial controls. Conduct a gap assessment comparing your ESG data governance against your financial reporting control framework. Identify the most critical gaps — typically audit trails, validation rules, and approval workflows — and extend existing financial controls to cover ESG data.

2. Integrate climate scenario analysis into financial planning. Use existing financial modelling tools to assess carbon pricing impacts, stranded asset exposure, and transition investment requirements under two or three climate scenarios. This produces immediately useful strategic intelligence.

3. Establish an internal carbon price. Even a shadow price of $50–100/tCO2e applied to capital expenditure decisions changes investment prioritization meaningfully and signals internal commitment to decarbonization.

4. Review sustainable finance eligibility. Assess whether your capital structure and project pipeline support green bond issuance, sustainability-linked loan margins, or other ESG-linked instruments. The pricing advantage on green bonds is now small (IFC and Amundi estimated the global greenium at about 1.2 basis points in 2024, IFC, 2025), so the case rests mostly on investor diversification and aligning financing with your commitments.

5. Coordinate assurance provider engagement early. If your statutory auditor will also perform sustainability assurance, engage them 6–12 months before the first reporting date to align on expectations, scope, and evidence requirements. Late engagement compresses timelines and increases costs.

How Council Fire Can Help

Council Fire works with CFOs to build the financial infrastructure that sustainability reporting demands. We understand that CFOs need controls, processes, and data systems that meet audit-grade standards — not aspirational frameworks or qualitative narratives.

Our team includes professionals with financial audit and assurance backgrounds who design ESG data governance frameworks, sustainability controls matrices, and assurance-ready documentation systems. We help CFOs navigate the cost implications of CSRD compliance, evaluate sustainable finance opportunities, and integrate climate risk into financial planning and capital allocation.

We bridge the gap between sustainability teams and finance teams — ensuring that ESG data flows into financial reporting processes with the same rigour and reliability expected of financial data.

FAQs

How much will CSRD compliance cost?

Costs vary by organizational complexity. A 2022 cost-benefit analysis prepared for EFRAG by CEPS and Milieu estimated that an average listed company already reporting under the NFRD would spend about €287,000 in one-off costs and about €320,000 a year on ESRS reporting, before assurance fees (EFRAG). The simplified ESRS that apply from financial year 2027 have 61% fewer mandatory datapoints. Costs decline as processes mature and internal capability builds.

Who owns ESG data — finance or sustainability?

Both. Sustainability teams typically coordinate data collection and reporting, but CFOs must ensure that the data meets financial-grade quality standards. The most effective model assigns sustainability as the "first line" owner with finance providing "second line" oversight — mirroring the three-lines model used for financial reporting.

Will sustainability assurance be performed by our financial auditor?

It can be. CSRD lets the statutory auditor that audits your financial statements provide the assurance, and member states may also allow a different auditor or an accredited independent assurance services provider. Using the statutory auditor offers efficiency gains (they already know your business and systems) but concentrates risk. Discuss the pros and cons with your audit committee.