How to Implement ESG Reporting

Why ESG Reporting Matters

ESG reporting has evolved from a voluntary exercise to a business imperative. Over 90% of S&P 500 companies now publish sustainability reports, and regulatory mandates are making disclosure obligatory for thousands of additional companies worldwide. The CSRD, ISSB-based standards, and California disclosure laws are creating a global reporting ecosystem that many businesses cannot avoid.

Beyond compliance, ESG reporting drives internal value: it identifies operational efficiencies, reveals supply chain risks, strengthens stakeholder relationships, and improves access to capital. MSCI research has linked higher ESG ratings to lower cost of capital and higher valuations.

Step 1: Assess Regulatory Requirements and Stakeholder Expectations

Before selecting frameworks or building systems, understand what you must and should report:

• Regulatory scan: Identify mandatory reporting obligations based on your jurisdiction, size, and listing status. Key regulations include CSRD (EU), ISSB-based rules (mandatory in Australia since 2025 and for the largest Japanese listed companies from years ending March 2027; voluntary so far in the UK and Canada), California SB 253 (first Scope 1 and 2 reports due November 10, 2026; SB 261 is on hold pending appeal), and national requirements.
• Investor expectations: Review ESG questionnaires you receive (CDP, MSCI, Sustainalytics, ISS) and investor engagement feedback. These reveal what your capital providers want to see.
• Customer requirements: Many B2B companies face ESG questionnaires from enterprise customers, particularly in regulated industries.
• Peer benchmarking: Analyze what industry leaders disclose, which frameworks they use, and their reporting maturity.

Map these requirements into a consolidated framework that identifies common datapoints across multiple stakeholder needs.

Step 2: Select Your Reporting Frameworks

Choose frameworks based on regulatory obligations and strategic priorities:

• GRI Standards: Most comprehensive, stakeholder-oriented. Referenced or required by more than 40 stock exchanges and market regulators, according to GRI, and widely expected by ESG ratings agencies.
• ESRS (European Sustainability Reporting Standards): Mandatory for CSRD-scope companies. Detailed, prescriptive, and based on double materiality.
• ISSB (IFRS S1/S2): Investor-focused, financially material disclosure. Increasingly adopted as baseline in multiple jurisdictions.
• SASB Standards: Industry-specific metrics now part of the ISSB family. Still widely used standalone for sector-specific materiality.
• TCFD: Climate-specific disclosure framework built on four pillars: Governance, Strategy, Risk Management, Metrics & Targets. The TCFD disbanded in October 2023; IFRS S2 carries its recommendations forward, and the ISSB now monitors climate disclosure.
• CDP: Questionnaire-based disclosure. Since 2024 a single integrated questionnaire covers climate, water, forests and more, aligned with IFRS S2.

Most companies use 2-3 frameworks. Map overlapping requirements to avoid duplicate data collection.

Step 3: Conduct Materiality Assessment

Materiality determines which topics matter for your report. See our detailed guide on conducting a materiality assessment.

Key outputs: prioritized list of material ESG topics, documentation of the assessment process, and board approval.

Step 4: Build Data Infrastructure

ESG data is the foundation of credible reporting. Build systems that scale:

Environmental data:

• Energy consumption by source and facility (utility bills, meters, BMS systems)
• GHG emissions (calculated from activity data using emission factors)
• Water withdrawal, consumption, and discharge
• Waste generated by type and disposal method
• Renewable energy procurement and certificates

Social data:

• Employee headcount, demographics, diversity metrics
• Health and safety incidents (LTIR, TRIR)
• Training hours and programs
• Living wage analysis
• Supply chain labor audits and findings
• Community investment and engagement

Governance data:

• Board composition and independence
• ESG oversight structure
• Executive compensation links to ESG
• Ethics and compliance incidents
• Lobbying and political contributions

Data quality principles:

• Define clear ownership for every metric
• Establish collection frequency (monthly/quarterly, not annual scrambles)
• Implement validation checks (year-over-year variance, benchmarks)
• Maintain audit trails documenting data sources and calculations
• Conduct internal quality assurance before external reporting

Step 5: Establish Governance and Accountability

ESG reporting requires organizational commitment:

• Board oversight: Assign ESG reporting oversight to a board committee (audit, sustainability, or risk committee)
• Executive ownership: Appoint a senior executive (CFO, CSO, or COO) as the ESG reporting sponsor
• Cross-functional working group: Include representatives from sustainability, finance, legal, HR, operations, procurement, and IT
• Policies: Develop an ESG reporting policy covering scope, frameworks, data management, internal controls, and assurance
• Internal controls: Apply the same rigor to ESG data as financial data — segregation of duties, review procedures, documentation requirements

Step 6: Write and Publish Your Report

Structure your ESG report for both compliance and readability:

1. Strategy and governance: How ESG connects to business strategy, board oversight, risk management integration
2. Material topics: For each material topic — management approach, policies, actions, performance data, targets
3. Performance data: Comprehensive data tables with multi-year trends, methodological notes
4. Framework indices: GRI Content Index, SASB disclosure table, TCFD alignment, ESRS datapoint mapping
5. Assurance statement: Third-party assurance report (limited or reasonable)

Publish in formats that serve different audiences: PDF for comprehensive stakeholders, web-based for accessibility and SEO, XBRL for regulators, data files for ESG ratings agencies.

Step 7: Seek External Assurance

Assurance significantly increases report credibility:

• Limited assurance: Review-level engagement. The assurer checks processes and samples data. Required under CSRD.
• Reasonable assurance: Audit-level engagement with extensive testing. The CSRD will not require it: the 2026 Omnibus I directive dropped the planned move from limited to reasonable assurance. California's SB 253 calls for reasonable assurance of Scope 1 and 2 emissions from 2030.

Engage your assurer early in the reporting cycle so they can advise on evidence requirements and test controls throughout the year.

Step 8: Continuous Improvement

Each reporting cycle should be better than the last:

• Post-mortem: After each report, document what worked, what didn't, and improvement actions
• Expand scope: Progressively add topics, improve Scope 3 coverage, strengthen data quality
• Technology: Invest in ESG data management platforms as your reporting matures
• Integration: Move toward integrated reporting where ESG and financial data tell one coherent story
• Stakeholder feedback: Actively seek and incorporate feedback from investors, ratings agencies, and assurers

How Council Fire Can Help

Council Fire supports organizations at every stage of ESG reporting — from first materiality assessment through mature, assured, multi-framework disclosure. We build internal capacity so your reporting improves independently over time. Contact us to discuss your reporting needs.