Skip to main content
Governance Authority
Category: Sustainability and ESG

Sustainability Strategy

Also known as: Sustainability Business Strategy, Sustainability Action Plan
Simply put

A sustainability strategy is a comprehensive, long-term plan that sets out how an organisation will align its business activities with environmental, social, and governance (ESG) goals. It typically translates broad ambitions into specific targets and actions, and includes steps to implement and monitor progress over time. Because strategy involves deliberate choices, an effective approach generally focuses on the issues most relevant to the organisation rather than attempting to address everything at once.

Formal definition

A sustainability strategy is a structured, long-term approach through which an organisation integrates environmental, social, and governance (ESG) considerations into its business activities, setting objectives and targets and defining the actions required to achieve them. In practice, development commonly proceeds through phases such as analysis, formulation, implementation, and monitoring, with materiality assessment, including double materiality in certain frameworks, used to prioritise the issues on which the organisation focuses. As a strategic exercise, it involves explicit trade-offs and choices about what to pursue and what to forgo. Note that this is a management-led planning and execution activity; board oversight, assurance over reported outcomes, and the specific disclosure obligations that may apply are distinct matters whose requirements vary by jurisdiction, sector, and entity type. This entry is educational and not legal, audit, or compliance advice.

Why it matters

A sustainability strategy matters because it converts broad ESG ambitions into deliberate, prioritised choices about where an organisation will focus its resources. As with strategy generally, the discipline lies in choosing what not to do; attempting to address every possible issue at once tends to dilute effort and obscure accountability. A well-constructed strategy anchors sustainability commitments in the issues most relevant to the organisation's activities, making it possible to set meaningful targets and track progress over time rather than pursuing disconnected initiatives.

The strategy also provides the structure against which oversight, assurance, and disclosure can operate, though these are distinct functions. Without a coherent strategy that identifies priority issues and defines the actions to achieve them, an organisation may struggle to demonstrate that its stated commitments translate into implemented change. This gap between stated ambition and actual practice is a recurring concern for those responsible for governance and reporting, particularly where the credibility of external claims can be tested.

It is important to be clear about the limits of a sustainability strategy. It is a management-led planning and execution activity. It does not, by itself, discharge board oversight responsibilities, provide independent assurance over reported outcomes, or satisfy any specific disclosure obligations that may apply. Those requirements vary by jurisdiction, sector, and entity type, and depend on facts and professional judgement outside the scope of the strategy document itself.

Who it's relevant to

Boards and their committees
While the strategy itself is management-led, the board and any relevant committee typically hold oversight responsibility for whether a sustainability strategy exists, aligns with the organisation's purpose, and is being implemented. Directors generally need to understand the priority issues identified through materiality assessment and how progress against targets is monitored, without assuming the operational execution that sits with management.
Management and sustainability teams
Management owns the development and execution of the strategy, running the analysis, formulation, implementation, and monitoring phases, conducting materiality assessments, and making the trade-offs about which issues to prioritise. This is where accountability for delivering against defined objectives and targets typically sits.
General counsel and compliance functions
These functions are generally concerned with how the strategy intersects with any disclosure obligations and other requirements that may apply, which vary by jurisdiction, sector, and entity type. Their focus is typically on ensuring external claims are supportable and that the strategy accounts for applicable legal and regulatory considerations, which are distinct from the strategy's planning content itself.
Assurance functions and internal audit
Assurance over reported sustainability outcomes is a distinct matter from the strategy's design. Internal audit and other assurance providers may assess whether the processes supporting the strategy, including target-setting and monitoring, operate as intended, but this oversight and assurance role should not be conflated with the management-led work of formulating and executing the strategy.
Smaller organisations
For smaller organisations, a sustainability strategy may take the form of a more streamlined action plan setting out targets across environmental, financial, and societal dimensions. The same principle of deliberate prioritisation applies, scaled to the organisation's resources and the issues most relevant to its activities.

Inside Sustainability Strategy

Materiality Assessment
A structured process to identify and prioritize the environmental, social, and governance issues most relevant to the organization and its stakeholders. The methodology and scope vary by framework and jurisdiction; some regimes apply a financial materiality lens while others adopt a double materiality approach that also considers the entity's impact on society and the environment.
Strategic Objectives and Targets
Defined goals, often time-bound and, where feasible, measurable, that translate sustainability commitments into operational direction. These are typically set by management and endorsed or overseen by the board; their status as voluntary aspirations versus binding commitments depends on the applicable disclosure regime and any contractual or regulatory obligations.
Governance and Accountability Structure
The allocation of oversight and execution responsibilities. The board or a designated committee generally holds oversight duties, while management owns the design and delivery of sustainability activities. Clear role definition helps avoid conflating board oversight with management's operational accountability.
Risk Integration
The linkage of sustainability-related risks and opportunities into the organization's broader enterprise risk management processes. Under frameworks such as ISO 31000 or COSO, this involves considering likelihood and impact and distinguishing inherent from residual exposure, rather than treating sustainability as a standalone silo.
Metrics, Data, and Reporting
The indicators, data collection processes, and disclosure practices used to track progress and communicate performance. Reporting may follow voluntary frameworks or, in certain jurisdictions and for certain entity types, mandatory disclosure requirements; which applies depends on jurisdiction, sector, and entity size.
Stakeholder Engagement
The processes through which the organization identifies, consults, and responds to parties affected by or interested in its sustainability performance. The depth and formality of engagement typically reflect the organization's context, applicable frameworks, and its own governance judgment.

Common questions

Answers to the questions practitioners most commonly ask about Sustainability Strategy.

Is a sustainability strategy the same as a company's ESG reporting obligations?
No. A sustainability strategy is the forward-looking set of objectives, priorities, and resource commitments an organization adopts to manage its environmental and social impacts and dependencies, whereas ESG reporting is the disclosure of information about those matters. The two are related but distinct: strategy concerns what the organization decides to do and why, while reporting concerns how it communicates performance to stakeholders. In some jurisdictions and for some entity types, certain sustainability disclosures are becoming legal requirements, but having a strategy is generally a matter of board and management judgment rather than a uniform legal mandate. Treating reporting compliance as a substitute for a substantive strategy conflates a communication activity with a governance and management decision. This entry is educational and not legal, audit, or compliance advice; specific obligations depend on jurisdiction, sector, and entity type.
Does adopting a sustainability strategy mean the board is now responsible for executing it?
Generally no. Consistent with the distinction between oversight and operational duties, the board typically oversees the sustainability strategy, reviewing its alignment with the organization's purpose and risk appetite, challenging management's assumptions, and monitoring progress, while management is typically accountable for developing and executing it. Some boards delegate closer review to a committee, such as a sustainability, risk, or audit committee, depending on the organization's structure. Attributing execution to the board, or reducing management's role to implementation without accountability, misstates how governance responsibility is usually allocated. The precise division depends on the entity's governance framework, applicable law, and its own board charter and delegations.
How should a sustainability strategy connect to the organization's enterprise risk management?
In many organizations, sustainability-related matters are treated as sources of both risk and opportunity that can be assessed through the existing enterprise risk management process rather than a wholly separate system. Under certain frameworks, this involves identifying sustainability-related risks, assessing their likelihood and impact, and considering them against the organization's risk appetite and tolerance. Care should be taken to distinguish inherent from residual risk when evaluating existing controls. Whether and how sustainability risks are integrated depends on the organization's chosen framework and maturity; integration is generally a matter of management judgment rather than a fixed legal requirement, though some jurisdictions are introducing specific risk-related disclosure expectations.
What role do the three lines of defense play in a sustainability strategy?
The three lines model can help clarify who owns which sustainability activity, though the model is a widely used framework rather than a universal mandate. Typically, operational management (first line) owns and manages sustainability-related risks and controls in day-to-day activities; risk and compliance functions (second line) may set policy, provide oversight, and monitor; and internal audit (third line) may provide independent assurance over the design and operating effectiveness of relevant controls. Applying the model to sustainability requires careful role definition, particularly where responsibilities are new or shared across functions. How an organization allocates these roles depends on its size, structure, and governance choices.
How can an organization set meaningful sustainability targets without overstating commitments?
Setting targets generally involves distinguishing aspirational goals from binding commitments, being clear about baselines, timeframes, and the assumptions behind them, and considering whether the organization can substantiate progress claims. Care is warranted because some jurisdictions are increasing scrutiny of misleading or unsupported sustainability claims. It is generally advisable to align targets with the organization's risk appetite and to define how performance will be measured and assured. Whether a particular target constitutes a legal or contractual obligation, versus a voluntary standard the organization holds itself to, depends on the facts and applicable law; professionals should apply their own judgment and seek advice where substantiation or disclosure exposure is a concern.
How can the effectiveness of a sustainability strategy be monitored over time?
Monitoring typically combines management reporting against defined objectives and metrics, board or committee review of progress, and, in some cases, independent assurance over selected data or controls. When evaluating controls that support the strategy, it is useful to distinguish control design from operating effectiveness, since a well-designed control may still fail to operate as intended. Organizations often review the strategy periodically to reflect changes in the operating environment, stakeholder expectations, and applicable requirements. The appropriate frequency and depth of monitoring depend on the organization's circumstances, its chosen frameworks, and any applicable regulatory expectations, which vary by jurisdiction and sector.

Common misconceptions

A sustainability strategy is primarily a communications or marketing exercise owned by the board.
Sustainability strategy is generally a management-owned function subject to board or committee oversight. The board typically oversees and challenges the strategy rather than executing it, and substantive strategy work involves operational, risk, and reporting activities beyond external communication.
Following a recognized framework such as ISO 31000, COSO, or the OECD Principles makes a sustainability strategy legally compliant.
These frameworks are generally voluntary guidance describing good practice, not binding law. Legal requirements arise from statutes, regulations, and listing rules that vary by jurisdiction, sector, and entity type; adopting a framework does not by itself satisfy any mandatory disclosure or conduct obligation.
Setting sustainability targets eliminates the associated risks.
Targets set direction but do not remove exposure. Some level of residual risk typically remains after controls and mitigation, and the effectiveness of a strategy depends on both the design of controls and their operating effectiveness over time, which requires ongoing monitoring.

Best practices

Clearly document who owns each element of the sustainability strategy, separating board or committee oversight duties from management's operational accountability for design and delivery.
Conduct and periodically refresh a materiality assessment, stating explicitly whether a financial or double materiality lens is being applied and why.
Integrate sustainability-related risks into the enterprise risk management process rather than treating them separately, distinguishing inherent from residual risk and assessing both likelihood and impact.
Confirm which disclosure and conduct requirements are legally binding in each relevant jurisdiction and sector, and treat voluntary frameworks as supporting guidance rather than a substitute for legal compliance.
Establish metrics with defined data sources and assurance arrangements, and distinguish between control design and evidence of operating effectiveness when reporting progress.
Seek qualified legal, audit, or compliance advice on jurisdiction-specific obligations, since the applicability of many requirements depends on the organization's facts and circumstances.