Category: Sustainability and ESG
ESG Framework
Also known as: ESG, Environmental, Social, and Governance Framework, ESG Reporting Framework
Simply put
An ESG framework is a structured set of guidelines that helps a company measure, manage, and publicly report its performance on environmental, social, and governance issues. It gives stakeholders a consistent way to understand how an organization handles sustainability-related risks and opportunities and its broader ethical impact. These frameworks are generally voluntary reporting standards rather than binding law, and the specific requirements can vary by jurisdiction, sector, and entity type.
Formal definition
An ESG framework is a standardized structure of guidelines or standards that organizations use to assess, measure, and disclose environmental, social, and governance metrics, typically for the purpose of public reporting. It provides a consistent methodology for evaluating an organization's sustainability performance and its management of ESG-related risks and opportunities, as well as its ethical impact on the environment and society. In practice, multiple distinct frameworks exist, and their scope, mandatory or voluntary status, and applicability depend on jurisdiction, sector, and the reporting entity; this entry is educational and not legal, audit, or compliance advice.
Why it matters
ESG frameworks matter because they give organizations and their stakeholders a consistent way to measure, manage, and communicate performance on environmental, social, and governance issues. Without a shared structure, sustainability disclosures can be inconsistent, difficult to compare, and hard to verify, which undermines the confidence of investors, regulators, and other stakeholders who rely on that information to understand how an organization manages sustainability-related risks and opportunities. A framework provides a common methodology that helps make reporting more comparable and credible.
For boards and senior management, ESG frameworks are relevant to how the organization identifies and responds to risks and opportunities that may fall outside traditional financial reporting but can still affect reputation, stakeholder trust, and long-term resilience. Because these frameworks address an organization's broader ethical impact on the environment and society, they can shape how the organization is perceived and how it accounts for its conduct to external parties.
It is important to keep the limitations in view. ESG frameworks are generally voluntary reporting standards rather than binding law, and multiple distinct frameworks exist. Their scope, whether they are mandatory or voluntary, and how they apply depend on jurisdiction, sector, and the reporting entity. Choosing and applying a framework therefore involves judgment about what is appropriate for a given organization, and this entry is educational rather than legal, audit, or compliance advice.
Who it's relevant to
Boards and Board Committees
Boards and their relevant committees generally exercise oversight of how the organization approaches sustainability-related risks and opportunities and its broader ethical impact. An ESG framework can inform the information the board receives and reviews, though implementation and data collection typically sit with management rather than the board itself.
Senior Management
Management is generally responsible for measuring, managing, and reporting ESG performance in practice, including selecting and applying an appropriate framework and preparing the disclosures the organization publishes. Because framework applicability varies by jurisdiction, sector, and entity type, management must exercise judgment about what is appropriate for the organization.
Investors and External Stakeholders
Investors, regulators, and other stakeholders rely on ESG disclosures to understand how an organization handles sustainability-related risks and opportunities. A consistent framework gives them a more comparable basis for that understanding, though the voluntary and varied nature of frameworks means comparability across organizations is not guaranteed.
Compliance, Risk, and Assurance Functions
Compliance and risk functions may consider how ESG-related risks and opportunities intersect with the organization's obligations, while assurance functions may be engaged where disclosures are verified. The relevant obligations and the availability of assurance depend on jurisdiction, sector, and whether a given framework is voluntary or subject to binding requirements.
Inside ESG
Environmental pillar
The set of considerations addressing an organization's impact on and exposure to the natural environment, which may include climate-related risks, greenhouse gas emissions, energy and resource use, waste, and biodiversity. The specific metrics and disclosures used vary by framework, sector, and jurisdiction.
Social pillar
Considerations relating to an organization's relationships with people and communities, which may include labor practices, health and safety, diversity and inclusion, human rights, and supply chain conduct. Coverage and definitions differ across frameworks.
Governance pillar
Considerations relating to how an organization is directed and controlled, which may include board composition and oversight, executive remuneration, shareholder rights, ethics, and controls over the reliability of ESG information. This pillar intersects with, but is not identical to, the broader corporate governance discipline.
Reporting and disclosure standards
The structures a framework provides for identifying, measuring, and communicating ESG information. Some standards are voluntary (for example, certain reporting frameworks and codes), while others may be mandatory disclosure requirements in particular jurisdictions or for particular entity types. The distinction between voluntary standard and legal requirement depends on the applicable regime.
Materiality determination
The process of deciding which ESG topics are significant enough to assess or disclose. Different frameworks apply different materiality lenses (for example, investor-focused financial materiality versus broader impact-oriented materiality), and the approach affects what is measured and reported.
Assurance and controls
Mechanisms intended to support the reliability of ESG information, ranging from internal controls over ESG data to external assurance. The nature and rigor of assurance vary and are not uniform across frameworks or jurisdictions.
Common questions
Answers to the questions practitioners most commonly ask about ESG.
Is an ESG framework a legally binding standard that companies must follow?
Generally, no. Most widely referenced ESG frameworks are voluntary standards or reporting frameworks rather than binding law. The distinction matters: a framework typically provides a structure for identifying, managing, or disclosing environmental, social, and governance matters, while legal requirements arise from specific statutes, regulations, or listing rules that vary by jurisdiction, sector, and entity type. In some jurisdictions, elements of ESG disclosure have been made mandatory for certain entities, but the underlying framework itself is often adopted voluntarily or referenced within a mandatory regime. Whether any particular obligation applies to a given organization depends on the facts and the applicable law, and should be assessed with professional advice.
Are all ESG frameworks essentially the same, so it doesn't matter which one we use?
No. ESG frameworks differ meaningfully in scope, purpose, and intended audience. Some focus on disclosure and reporting, others on materiality assessment, and others on management processes or ratings methodology. They can differ in whether they emphasize financial materiality, broader stakeholder impacts, or both, and in the metrics, definitions, and boundaries they use. Treating them as interchangeable risks producing disclosures that are inconsistent, incomparable, or misaligned with the expectations of the intended users. Selection generally depends on the organization's sector, stakeholders, regulatory context, and reporting objectives, and is a matter for management judgment subject to board oversight.
Who within the organization should own the ESG framework and its implementation?
Accountability is typically distributed rather than held by a single function. Management generally owns the operational implementation, embedding ESG considerations into processes, collecting data, and preparing disclosures, while the board or a designated committee typically holds oversight responsibility for ESG strategy, risk, and reporting integrity. Some organizations assign day-to-day coordination to a sustainability or ESG function, but that does not transfer accountability for underlying risks, which often sits with the relevant risk owners in the business. Assurance functions, where involved, provide independent evaluation rather than ownership. The precise allocation depends on the organization's structure, size, and governance arrangements.
How does an ESG framework relate to our existing enterprise risk management and internal control systems?
An ESG framework is generally most effective when integrated with, rather than run parallel to, existing risk and control structures. ESG matters can give rise to risks that fit within an established enterprise risk management approach, and disclosures often depend on controls over data quality and reporting comparable to those applied to other reported information. Organizations frequently map ESG-related risks to their existing risk taxonomy, apply their defined risk appetite and tolerance where relevant, and consider control design and operating effectiveness for ESG data in the same way they would for other material information. How closely these are integrated depends on the maturity of the organization's systems and the significance of ESG matters to it.
What should the board consider when overseeing ESG reporting quality?
In an oversight capacity, a board or its committee typically focuses on whether management has appropriate processes rather than performing the reporting itself. Considerations often include whether the chosen framework fits the organization's context, whether the basis of any materiality determination is sound, whether data sources and controls are reliable, and whether disclosures are consistent with what the organization says elsewhere. Boards frequently consider the level of assurance obtained over ESG information and whether that assurance is proportionate to how the information is used. These are matters of judgment that depend on the organization's circumstances, and this guidance is educational rather than legal, audit, or compliance advice.
How can an organization begin implementing an ESG framework in a proportionate way?
Implementation is generally approached in stages rather than all at once. Common early steps include clarifying the reporting objectives and intended users, assessing which ESG matters are relevant to the organization, and selecting a framework aligned to that scope and to any applicable requirements. Organizations often follow this by identifying data gaps, assigning clear ownership for data and processes, and establishing controls proportionate to the significance and use of the information. Proportionality generally reflects the organization's size, sector, resources, and the expectations of its stakeholders and regulators. Because the appropriate approach depends on specific facts and jurisdiction, organizations typically tailor implementation with input from relevant internal functions and, where needed, professional advisers.
Common misconceptions
An ESG framework is a single, universally mandatory standard that all organizations must follow.
There is no single global ESG framework. Multiple frameworks and standards exist, many of which are voluntary, while certain disclosure obligations may be legally binding only in specific jurisdictions or for specific entity types. Whether a given framework applies depends on the applicable law, sector, and organizational facts.
Adopting an ESG framework guarantees strong ESG performance or compliance.
A framework provides structure for measurement and disclosure; it does not by itself produce outcomes. The effectiveness of any framework depends on the design of associated controls and their operating effectiveness, as well as accurate data and appropriate oversight. Following a reporting standard is distinct from achieving substantive results.
The 'G' in ESG is the same thing as corporate governance as a discipline.
The governance pillar of an ESG framework overlaps with corporate governance but is narrower and framed within the ESG reporting context. Broader corporate governance, covering board oversight, accountability, and control structures, is a related but distinct discipline, and ESG governance metrics do not capture its full scope.
Best practices
Clarify at the outset which framework or standard is being applied and whether it represents a voluntary standard or a binding disclosure requirement for your jurisdiction, sector, and entity type, rather than assuming universal application.
Distinguish clearly between the environmental, social, and governance pillars when defining scope, and document how materiality is being determined so stakeholders understand what is and is not covered.
Assign clear accountability: specify which management functions own ESG data and controls, and reserve oversight of the ESG framework and its disclosures for the board or the relevant committee, without conflating the two roles.
Distinguish control design from operating effectiveness when evaluating ESG data and reporting, and consider internal controls and, where appropriate, external assurance to support the reliability of disclosed information.
Track how applicable legal requirements and voluntary standards evolve across relevant jurisdictions, since obligations vary and change over time, and update processes accordingly.
Treat framework adoption as a means of structuring measurement and disclosure rather than a guarantee of performance, and obtain professional legal, audit, or compliance advice for specific obligations, as glossary guidance is educational only.