ESG reporting is now a CFO problem, not a sustainability team problem

When the European Commission's Corporate Sustainability Reporting Directive came into full effect for large listed companies, the requirement was not for a glossy annual report with carbon commitments. It was for audited, double-materiality-assessed disclosures covering climate risk, social metrics, and governance structures, all subject to third-party assurance. The CFO's signature sits on financial statements. Increasingly, it will sit on these too.

This shift is not cosmetic. The infrastructure required to produce reliable ESG disclosures, the data systems, the internal controls, the audit trail, is the same infrastructure that underpins financial reporting. Which means the CFO either owns this or watches it become a liability.

The regulatory and market pressure converging in 2026

The CSRD is the most visible pressure point for European-headquartered companies and their non-EU subsidiaries that meet the revenue or employee thresholds. But it is not the only one. The SEC's climate disclosure rules, despite facing litigation in the US, have pushed large American companies to build disclosure capabilities they would not otherwise have prioritized. The ISSB standards (IFRS S1 and S2) have been adopted or are under adoption in over 20 jurisdictions. A CFO overseeing a multinational operation now faces a patchwork of overlapping requirements that are, despite their differences, converging on the same fundamental demand: make your ESG claims auditable.

The market dimension is equally concrete. BlackRock, Vanguard, and State Street have all updated their stewardship policies in recent years to include specific expectations on climate-related financial disclosures. Institutional investors managing pension capital in particular face their own regulatory pressure from bodies like the European Insurance and Occupational Pensions Authority. The demand for credible, comparable ESG data is flowing directly through the capital structure.

On the financing side, the green bond market exceeded $500 billion in annual issuance by the mid-2020s, and sustainability-linked loans now include financial covenants tied to ESG performance metrics. Miss a target, pay a higher margin. This is no longer a reputational mechanism. It is a direct cost-of-capital mechanism.

What this means for the CFO

The first and most practical implication is data governancedata governanceData governance is the set of policies, roles, and processes that ensure data is accurate, secure, well-defined, and used responsibly across an organization.View full definition →. ESG metrics, particularly Scope 3 greenhouse gas emissions, supply chain labor indicators, and water usage, are collected across dozens of business units, geographies, and third-party vendors. The accuracy problems that emerge in this data are not unlike those that emerged in revenue recognition or intercompany eliminations before finance functions built rigorous processes around them. The CFO needs to treat ESG data qualitydata qualityThe degree to which data is fit for purpose: accurate, complete, consistent, timely, valid and unique. Poor quality data undermines analytics, reporting and AI.View full definition → with the same skepticism applied to any unaudited management account.

Several large companies discovered this the hard way. In 2021 and 2022, a wave of greenwashing investigations hit asset managers, including DWS, whose sustainability chief resigned amid regulatory scrutiny from BaFin and the SEC over claims in marketing materials that did not match internal data. The lesson is not simply about marketing. It is about what happens when commercial claims outrun the underlying data infrastructure.

For finance teams in 2026, the practical build-out typically involves three things that do not yet sit cleanly within most ERP or FP&A systems: a system of record for non-financial data, a control framework for validating that data before it goes to an external auditor, and a mapping of which ESG metrics are actually financially material under the double-materiality lens required by CSRD. The last point matters because double materiality requires companies to assess not just how ESG factors affect the company's finances, but how the company's activities affect the environment and society. That second leg requires judgment calls that need to be documented and defensible.

The CFO also needs to think about where the cost of compliance lands versus where the strategic value gets created. Compliance costs for CSRD implementation are real: large multinationals have reported internal estimates in the range of several million euros for initial build-out, depending on complexity. But companies that have built credible ESG data capabilities are also better positioned to price green financing, respond to procurement requirements from large customers with their own scope 3 obligations, and retain institutional investors during periods of market stress.

The internal governance question

One structural issue that often gets deferred: who controls the ESG data pipelinedata pipelineETL (Extract, Transform, Load) is a data integration process that pulls data from sources, reshapes it into a consistent format, and writes it into a target system.View full definition →? In many companies as of 2026, sustainability teams collect it, IR teams report it, and finance teams sign off on the financials that increasingly reference it. That three-way split creates gaps. The CFO's office needs a defined role in the data production process, not just a review at the end.

Some companies have solved this by embeddingembeddingAn embedding is a numerical vector that represents data (text, images, or items) in a way that captures meaning, so similar items sit close together in space.View full definition → a finance business partner directly within the sustainability reporting function. Others have elevated the Chief Sustainability Officer to a seat on the CFO's direct reporting line. Neither approach is inherently superior, but the ambiguity of the status quo is the actual risk.

Concrete priorities for the CFO's agenda

• Conduct an honest internal audit of your current ESG data collection process. If your Scope 1 and 2 figures cannot be traced to individual facility-level records with a clear methodology, they will not survive external assurance.
• MapMapUsing software to automate repetitive marketing tasks and campaigns, enabling personalisation at scale across channels like email, web, and social.View full definition → your financing structure against ESG performance covenants. If you have sustainability-linked debt, model the financial impact of missing targets at current performance trajectories.
• Get ahead of your external auditors. The firms conducting limited assurance on ESG disclosures are building their frameworks now. The CFOs who engage early define the scope; those who engage late accept whatever the auditor requires.
• Do not let legal and compliance own the materiality assessment alone. Double materiality is a financial judgment as much as a legal one. The CFO's perspective on which risks are financially significant belongs in that process from the start.
• Review what your top five institutional investors are actually asking for in stewardship letters and voting guidelines, then compare that to what you are currently disclosing. The gap is where your IR team is currently improvising.

The CFO who treats ESG reporting as a compliance checkbox handled by another function is building a risk that will surface at the worst possible moment: during a capital raise, a major acquisition, or a regulatory review. The finance function built rigorous controls around financial reporting over decades for exactly this reason. The same logic applies here, and the timeline is shorter.