Make sustainability claims, metrics, and commitments traceable to an owner and an authority.
“ESG” is not one global compliance regime. An organization may face statutory reporting, adopted disclosure standards, listing requirements, investor commitments, customer requests, financing covenants, voluntary targets, or internal policy at the same time. Governance works when those obligations are separated, assigned, evidenced, and changed deliberately.
Substantively reviewed . This revision removes obsolete CSRD scope estimates, finalizes ISSB citations, stops treating the stayed SEC climate rule as operative, and reflects the 2026 EU Omnibus changes and revised-ESRS status.
Govern the obligation, the data, and the claim as separate objects.
A durable sustainability-governance model can answer three questions for any material disclosure or commitment: why are we saying this, who owns the evidence, and what would make us change it? That requires more than a sustainability committee. It requires an applicability register, accountable data owners, controlled calculations, approved claims, escalation, and evidence that decisions were actually carried out.
Keep the legal/standards perimeter separate from internal ambition. An organization may voluntarily use IFRS S1/S2, adopt a net-zero target, answer a customer's emissions questionnaire, or publish a sustainability report even when a specific mandatory reporting regime does not apply. Those choices still create governance and credibility risk, but they should not be mislabeled as statutory duties.
Connect material sustainability risks and controls to the broader enterprise governance model. The Board Technology & Risk Oversight Guide covers board information, challenge, and decision rights; this guide focuses on sustainability-specific accountability below that level.
Replace the “global ESG requirements” list with applicability records.
For every external or internal requirement, record the source, jurisdiction, covered entity or group, threshold, effective period, reporting standard/version, required assurance if any, accountable executive, reporting owner, data owners, and review trigger.
| Source type | Current 2026 example | Governance treatment |
|---|---|---|
| EU statutory reporting | Directive (EU) 2026/470 materially narrows CSRD scope, including the EUR 450 million net-turnover and 1,000-average-employee thresholds for the main individual/group reporting population, with amended transitional provisions. | Do not rely on the original 2022 CSRD rollout table. Confirm entity/group scope, reporting period, Member State implementation, ESRS version, and assurance requirements. |
| EU reporting standards | The Commission adopted simplified ESRS on July 3, 2026; its status page still identifies the delegated regulation as not in force until Official Journal publication. | Version the reporting criteria and record the legal status used for each reporting period. “Adopted” and “in force” are not interchangeable. |
| ISSB standards | IFRS S1/S2 are final standards effective under the ISSB from annual periods beginning January 1, 2024. | Record whether the organization is legally required by a jurisdiction to apply them or uses them voluntarily. Do not cite the ISSB effective date as proof of local legal applicability. |
| U.S. SEC climate rule | The SEC's 2024 climate rules are stayed; the Commission proposed rescission in full on May 29, 2026. | Do not treat the old phase-in or attestation dates as a current mandatory program baseline. Track the rulemaking if relevant to a registrant. |
| UK listed-company governance | The UK Corporate Governance Code 2024 applies to its specified listing categories on a comply-or-explain basis; Provision 29 applies for financial years beginning on or after January 1, 2026. | Where in scope, connect material sustainability-related controls to the company's overall risk-management/internal-control framework rather than building a disconnected “ESG controls” universe. |
| Voluntary / contractual | Targets, investor commitments, financing conditions, customer requirements, supplier codes, or voluntary reports. | Record the commitment owner, exact wording, evidence source, change/withdrawal process, and who approves external claims. |
Assign ownership from source data through external statement.
A single “Head of ESG” cannot credibly own facility meter data, finance consolidations, HR workforce data, supplier attestations, legal applicability, disclosure controls, and external assurance. Assign responsibility at the layer where the evidence originates and retain one accountable reporting owner for assembling the final statement.
| Role | Primary responsibility | Evidence |
|---|---|---|
| Board / board committee | Oversight and decisions assigned by applicable law, listing rules, charter, or enterprise governance. | Materials, minutes, challenges, approvals, unresolved material issues, follow-through. |
| Executive sponsor | Own the operating model, resources, cross-functional accountability, and material escalation. | Charter, delegated authorities, issue decisions, management certifications where used. |
| Reporting owner | Maintain reporting perimeter, criteria/version, disclosure mapping, timetable, and final assembly. | Applicability register, disclosure checklist, consolidation records, sign-offs. |
| Data owners | Own source completeness, quality, definitions, and remediation for their domains. | Source inventories, reconciliations, exceptions, lineage, review evidence. |
| Legal / compliance | Confirm applicability, status, material legal interpretations, and change triggers. | Authority records, interpretation memos, counsel input where appropriate. |
| Internal audit / independent assurance | Provide independent assurance according to charter or engagement scope; do not own management's controls. | Plans, testing, findings, reports, management responses. |
RACI charts are useful only if they reflect real decision rights. For material disclosures, record who can approve a methodology change, accept an evidence limitation, restate a prior-period figure, withdraw a public claim, or accept residual reporting risk.
Treat materiality as a documented decision process, not a workshop artifact.
Under the EU sustainability-reporting framework, double materiality remains a central concept for in-scope reporting: organizations assess both material impacts and sustainability matters that are financially material under the applicable criteria. IFRS S1/S2 use investor-focused materiality within general purpose financial reporting. These frameworks are not interchangeable.
Preserve the universe considered, evidence sources, stakeholder inputs where required, thresholds or qualitative factors, judgments, disagreements, approvers, and changes from the prior period. Link each resulting material topic to disclosure requirements, data owners, controls, metrics, and assurance coverage.
Revisit materiality after acquisitions, divestitures, major incidents, new facilities, material supplier changes, new products, significant regulatory changes, or a change in reporting criteria. Do not wait for the annual reporting cycle if the underlying facts have materially changed.
Govern sustainability claims with the same discipline as reported metrics.
Statements such as “renewable,” “carbon neutral,” “net zero,” “aligned,” “sustainable,” “science based,” or “compliant” can create legal, consumer-protection, investor, contract, and reputation risk. Maintain a claim register for material public statements and connect each claim to the evidence and definition that support it.
- Record the exact public wording and where it appears.
- Define the metric, boundary, time period, exclusions, offsets/credits if any, and methodology.
- Identify the source systems and calculation version.
- Record the approving business, legal/compliance, and reporting owners.
- Set an expiry or review trigger when source data, methodology, target status, regulation, or business scope changes.
Do not infer that a voluntary framework endorsement or assurance engagement proves every marketing claim. Assurance conclusions are limited to the subject matter and criteria in the assurance report.
Make regulatory freshness part of governance.
The 2025–2026 CSRD changes are a practical example of why sustainability governance needs short review windows. A static compliance calendar based on the original CSRD waves would now be materially wrong for many entities. Likewise, a control matrix built around the SEC's stayed 2024 climate rules would misstate the current U.S. federal rule status.
Use trigger-based reviews for new legislation, final rules, stays, court decisions, delegated-act publication, regulator guidance, material-framework amendments, jurisdictional adoption of ISSB standards, assurance-standard adoption, acquisitions/divestitures, and changes to public targets.
Every changed requirement should identify downstream impacts: reporting perimeter, data collection, controls, contracts, supplier requests, system configuration, board materials, assurance scope, public claims, and archived prior-period documentation.
Current primary sources
- Directive (EU) 2026/470 — current CSRD/assurance scope amendments and value-chain protections.
- Directive (EU) 2025/794 — stop-the-clock changes.
- European Commission CSRD implementing and delegated acts — current revised-ESRS status.
- IFRS S1 and IFRS S2 — final ISSB standards.
- SEC proposed rescission of climate-related disclosure rules.
- UK Corporate Governance Code 2024.
Sources and status reviewed September 2, 2026. Confirm current jurisdictional applicability before treating any framework or reporting standard as mandatory.
Turn Sustainability Governance & Accountability Guide | Zeph Tech into a decision-ready next step.
Use the source-backed research to pressure-test assumptions, then build a reusable evaluation brief before you compare products, scope implementation, or request a fit review.