ESG reporting is now a CFO accountability issue, not a sustainability team problem

When Glencore restated its Scope 3 emissions data in 2023 after pressure from institutional investors, the reputational damage was significant, but the more lasting consequence was the signal it sent to boards: ESG numbers carry the same credibility risk as financial numbers. That episode, and dozens like it across mining, energy, and consumer goods, accelerated a shift already underway. Sustainability reporting is no longer a communications function. It is a financial control function, and that puts it squarely on the CFO's desk.

The regulatory pressure that changed the calculus

The European Union's Corporate Sustainability Reporting Directive, CSRD, is the single most consequential driver of this shift for multinational companies. By the time full phase-in is complete, it will require roughly 50,000 companies to publish audited sustainability disclosures alongside their financial statements. The International Sustainability Standards Board, ISSB, released IFRS S1 and S2 in 2023, providing a global baseline that jurisdictions from Canada to Singapore are now incorporating into local regulation. In the United States, the SEC's climate disclosure rule has faced legal challenges, but large accelerated filers have been preparing for mandatory Scope 1 and Scope 2 reporting regardless of the litigation outcome, because their European counterparts and customers require it anyway.

The practical implication is that ESG data is moving toward the same materiality threshold as financial data. Auditors, both external and internal, are being asked to provide limited assurance on sustainability statements now, with reasonable assurance requirements following in several jurisdictions. PwC, Deloitte, and KPMG have all built dedicated ESG assurance practices precisely because the audit exposure is real.

What has also changed is the capital market dimension. BlackRock, Vanguard, and State Street have all published voting guidelines that tie governance ratings partly to the quality and completeness of climate disclosures. For a large-cap CFO, a poorly controlled ESG reporting process is not an abstract risk. It directly affects proxy season outcomes and, increasingly, the cost of green bond issuances, where pricing is tied to verified sustainability performance rather than stated intentions.

What this means for the CFO

The first operational reality is data infrastructure. Most finance functions have spent decades building systems that produce auditable, reconcilable financial data. ESG data, by contrast, is often scattered across ERP systems, supplier portals, utility invoices, and manual spreadsheets maintained by facility managers who have never worked with an audit committee before. CFOs at companies like Schneider Electric and Danone have invested heavily in centralising this data into platforms that mirror the controls architecture of financial reporting. That investment is not optional once you are under CSRD scope.

The second implication is ownership clarity. The chief sustainability officer role is valuable, but in companies where the CSO reports outside of finance, there is a structural problem. The person accountable for the numbers is not the person who controls the systems and sign-off processes that produce them. Several large European companies have restructured this relationship in the past two years, moving ESG reporting governance directly under the CFO or CFO-adjacent functions, with the CSO retaining strategy and stakeholder responsibilities. This is not about territory. It is about audit readiness.

Third, materiality assessment needs to become a finance-led process, not a sustainability team exercise. The CSRD double materiality concept, which requires companies to assess both financial materiality and impact materiality, has direct consequences for what gets disclosed and therefore what gets scrutinised. If the finance function is not deeply involved in setting those materiality thresholds, the company risks either under-disclosing in ways that attract regulatory attention or over-disclosing in ways that create legal exposure.

Finally, there is the supply chain dimension that many CFOs have underestimated. Scope 3 emissions, which cover upstream and downstream value chain activity, are where the majority of most companies' carbon footprint sits. For a company like a large food manufacturer, Scope 3 can represent over 90% of total emissions. Collecting, verifying, and disclosing that data requires engagement with hundreds or thousands of suppliers, many of them smaller businesses without their own reporting capabilities. This is partly a procurement problem, partly a technology problem, and partly a commercial negotiation problem, and the CFO is the only executive with enough cross-functional leverage to drive it at scale.

Concrete actions worth prioritising now

• Conduct a gap analysis against CSRD or ISSB requirements now, even if your company is not yet in scope. The reporting obligations will arrive faster than most finance teams expect, and the internal control gaps typically take 18 to 24 months to close properly.
• MapMapUsing software to automate repetitive marketing tasks and campaigns, enabling personalisation at scale across channels like email, web, and social.View full definition → the data ownership for every ESG metric you currently disclose or plan to disclose. Identify which metrics rely on manual processes or unverified supplier data, and treat those as control deficiencies, not just data qualitydata qualityThe degree to which data is fit for purpose: accurate, complete, consistent, timely, valid and unique. Poor quality data undermines analytics, reporting and AI.View full definition → issues.
• Get your external auditors into the ESG conversation before they ask to be included. Understanding their assurance expectations early shapes how you design the underlying processes, rather than retrofitting controls after the fact.
• Revisit your materiality assessment process if it has been led primarily by the sustainability function. Finance input into what is material, and why, is becoming a disclosure governance expectation, not just good practice.
• Review the terms of any green bonds, sustainability-linked loans, or ESG-linked credit facilities your company has issued. The KPIs embedded in those instruments need to be supported by the same data quality standards as your formal disclosures. Several companies have faced investor complaints when reported performance against these KPIs proved inconsistent with external disclosures.

The CFO who treats ESG reporting as a compliance checkbox managed by another team is building a quiet liability. The audit, capital market, and regulatory consequences of poor ESG data governancedata governanceData governance is the set of policies, roles, and processes that ensure data is accurate, secure, well-defined, and used responsibly across an organization.View full definition → are no longer theoretical, and the timeline for getting controls in place is shorter than it looks from a distance.