In brief: Start by defining who oversees ESG, who makes operational decisions, who owns each data set and how significant issues are escalated. Then connect sustainability risks, opportunities, metrics and targets to existing strategy, risk, budgeting and performance processes.
IFRS S1 organises sustainability-related financial disclosures around governance, strategy, risk management, and metrics and targets. These are not merely four headings for a report. Together they describe how an organisation receives information, evaluates consequences, allocates resources and checks whether action is working. A small organisation may use existing management meetings rather than create a new committee, but responsibilities and evidence must still be explicit.
Governance: define oversight and decision rights
Document which board or committee receives ESG information, how often it meets, what competence it needs and which decisions require escalation. Management papers should identify the issue, business impact, options, assumptions, recommendation and owner. Minutes should record challenge and follow-up, not simply state that a sustainability report was noted.
Strategy: connect ESG to business choices
Identify sustainability risks and opportunities that could affect revenue, costs, assets, supply, access to finance or stakeholder trust. Connect each material issue to products, markets, capital expenditure, procurement and workforce plans. This prevents strategy language from becoming detached from the decisions that determine actual performance.
Risk management: use the existing control system
ESG risks should enter the enterprise risk process with named owners, likelihood, impact, controls and review dates. Additional time horizons may be needed for climate, nature or value-chain issues. The objective is not a separate sustainability register, but a consistent view of risks that management can compare and prioritise.
Metrics and targets: measure progress that matters
Every metric needs a definition, boundary, unit, period, source and reviewer. Targets should state the baseline, deadline, scope, interim milestones and resources required. Separate measured results from estimates and explain data gaps. A small, controlled set of useful metrics is more valuable than a long dashboard without decision owners.
A practical implementation sequence
Use one accountability matrix that links oversight, management, data ownership and assurance. Begin with the most material issues and the management forums that already control related budgets or operations. This keeps governance proportionate while making it visible and repeatable.
- Assign board or committee oversight and a fixed review frequency.
- Name an executive owner and operational owner for each material issue.
- Map ESG risks into the enterprise risk register and budget process.
- Create a data dictionary for the first set of decision-useful metrics.
- Report progress, variance, causes and corrective action at each review.
For every step, retain the owner, source, reporting period, method, version, reviewer and known limitations. Estimates can be useful during transition, but they should never be presented as measured data.
Decision risks to control
- Creating a committee with no decision rights or follow-up process.
- Treating every ESG topic as equally material and avoiding prioritisation.
- Reporting positive figures without boundaries, methods or missed targets.
Useful evidence includes terms of reference, responsibility matrices, meeting packs, minutes, risk registers, approved targets and action logs. Review whether these records show actual challenge and decisions, rather than a governance structure that exists only on paper.
Frequently asked questions
Does an SME need a separate ESG committee?
Not necessarily. Existing management or board meetings can provide oversight if responsibilities, agenda, information, decisions and follow-up are clearly documented.
Which function should lead ESG?
A strategy, finance, risk or corporate affairs function may coordinate, but operational teams must own the data and actions within their processes.
How often should the board review ESG?
Use a frequency proportionate to risk. A structured annual review with quarterly progress updates is a practical starting point, with immediate escalation for significant events.
Should targets be set before the baseline is complete?
Build a reasonable baseline first. Where data is incomplete, set a transparent data-improvement milestone before presenting a precise performance target.
Authoritative sources
- IFRS S1 General Requirements for Disclosure of Sustainability-related Financial Information
- Introduction to the ISSB and IFRS Sustainability Disclosure Standards
This article is for general information and education only. It is not legal, investment, financial, assurance, certification, compliance or other professional advice.