ESG standards are non-financial performance criteria that investors, regulators, and rating agencies use to measure how a company manages its environmental impact, how it treats people inside and around its operations, and how it governs itself. The three pillars — environmental, social, and governance — surface risks that financial statements alone can miss, and they now influence trillions of dollars in global capital allocation. The frameworks used to disclose ESG performance have consolidated in recent years, but the rules requiring companies to use them are moving in opposite directions depending on the jurisdiction.
What the Environmental Pillar Measures
Environmental criteria quantify a company’s relationship with the physical world through specific outputs. The most prominent metric is the carbon footprint, split into three scopes of greenhouse gas emissions. Scope 1 covers direct emissions from sources a company owns or controls, such as on-site fuel combustion and fleet vehicles. Scope 2 captures indirect emissions from purchased electricity, heat, or steam. Scope 3 is the broadest, encompassing all other indirect emissions across a company’s value chain, from employee commuting to contracted waste disposal and transportation losses.1US EPA. Greenhouse Gases at EPA
Scope 3 typically represents the largest share of a company’s footprint and is the hardest to calculate. For financial institutions, it includes “financed emissions” — the proportional Scope 1 and Scope 2 emissions of every project they finance.2GHG Protocol. Technical Guidance for Calculating Scope 3 Emissions – Category 15: Investments The data collection burden is heavy, which is why many regulators have delayed Scope 3 requirements or exempted smaller companies.
Beyond carbon, environmental metrics include energy intensity (kilowatt-hours per unit of production), waste diversion rates, and water stewardship disclosures covering total withdrawal and consumption in water-stressed regions.3CEO Water Mandate. Corporate Water Disclosure Guidelines (2014) Biodiversity metrics track impacts on protected habitats and species classified as threatened under the IUCN Red List.4International Union for Conservation of Nature. The IUCN Red List of Threatened Species Natural resource depletion standards compare extraction rates against replenishment rates for inputs like timber.
What the Social Pillar Measures
Social criteria evaluate how a company affects the people inside and around its operations. Labor practices sit at the center: fair wages, prevention of forced labor in the supply chain, and workplace safety metrics like the Total Recordable Incident Rate, which measures injuries and illnesses per 200,000 hours worked.
Diversity reporting has grown more standardized. Private employers with 100 or more employees in the United States file mandatory EEO-1 reports disclosing workforce demographics by job category, sex, and race or ethnicity.5U.S. Equal Employment Opportunity Commission. EEO-1 (Employer Information Report) Statistics Supply chain oversight requires companies to verify that third-party vendors follow international human rights and ethical sourcing standards. Community engagement is measured through direct investment in local infrastructure or philanthropic contributions.
Data privacy and consumer protection round out the pillar. Companies disclose security protocols, breach history, and product safety mechanisms. Telecommunications carriers, for instance, must report breaches affecting 500 or more customers individually and file annual summaries of smaller incidents.6Federal Register. Data Breach Reporting Requirements Employee engagement surveys and turnover rates also appear in social disclosures, giving analysts a window into talent retention risk.
What the Governance Pillar Measures
Governance standards focus on how a company is run and whether its leadership structure promotes accountability. Board composition is a starting point. Analysts look at the ratio of independent directors to executives, the diversity of the board, and whether a single person holds both the CEO and board chair roles.
Executive compensation receives heavy scrutiny. Public companies in the United States must hold non-binding “say-on-pay” advisory votes at least once every three years.7U.S. Securities and Exchange Commission. SEC Adopts Rules for Say-on-Pay and Golden Parachute Compensation They also disclose the ratio of CEO compensation to the median employee’s pay under the Dodd-Frank Act’s pay ratio rule.8U.S. Securities and Exchange Commission. Pay Ratio Disclosure – Final Rule
Internal controls are another core element. Section 404 of the Sarbanes-Oxley Act requires management to assess and report annually on the effectiveness of internal controls over financial reporting.9Office of the Law Revision Counsel. 15 USC 7262 – Management Assessment of Internal Controls Anti-corruption compliance programs are expected under frameworks like the Foreign Corrupt Practices Act. Whistleblower protections come primarily from the Dodd-Frank Act. Transparency around lobbying expenditures is also tracked; the Lobbying Disclosure Act requires registered lobbyists to file semiannual reports.10Office of the Clerk, United States House of Representatives. Lobbying Disclosure Act of 1995 – Lobbying Disclosures
A newer dimension is oversight of artificial intelligence. The National Institute of Standards and Technology’s AI Risk Management Framework calls for board-level or committee-level oversight of AI deployment, covering data provenance, synthetic content detection, and the risk of discriminatory outputs from generative systems. For companies that rely on algorithmic decision-making, missing this oversight is starting to register as a governance red flag.
Financial Materiality Versus Double Materiality
One concept sharply divides the frameworks. Financial materiality asks whether a sustainability issue affects the company’s bottom line. If a drought threatens a beverage maker’s water supply, that is financially material. Double materiality asks both directions: how sustainability issues affect the company, and how the company affects society and the environment. Under that lens, a company depleting a local aquifer matters even if profits are not yet affected.
The EU’s Corporate Sustainability Reporting Directive adopted double materiality as its foundation. The ISSB standards focus on financial materiality, though they incorporate concepts from GRI that push in the double-materiality direction. This split explains why companies reporting under different frameworks can look very different on paper while describing the same operations.
Major Reporting Frameworks
Several global organizations provide the technical structures companies use to disclose ESG performance. Which framework applies depends on where a company operates, where it is listed, and who is asking for the data.
GRI Standards
The Global Reporting Initiative offers the most widely used voluntary framework. Its modular standards let organizations report on their impacts on the economy, environment, and people, either comprehensively or by selecting topics relevant to their industry.11Global Reporting Initiative. Standards The double-materiality orientation makes GRI a natural fit for companies that want to disclose outward impact, not just risks to their own finances.12Global Reporting Initiative. A Short Introduction to the GRI Standards
SASB and the ISSB
The Sustainability Accounting Standards Board built industry-specific standards for 77 industries focused on financially material sustainability information.13IFRS Foundation. Understanding SASB Standards SASB has since been consolidated under the International Sustainability Standards Board, housed within the IFRS Foundation. The ISSB’s two flagship standards, IFRS S1 (general sustainability disclosures) and IFRS S2 (climate-specific disclosures), are designed as a global baseline that jurisdictions can adopt. Brazil, Chile, Qatar, and Mexico made ISSB-based reporting mandatory starting January 1, 2026.
The Former TCFD
The Task Force on Climate-related Financial Disclosures organized around four pillars: governance, strategy, risk management, and metrics and targets.14Task Force on Climate-Related Financial Disclosures. Task Force on Climate-Related Financial Disclosures – Our Work It disbanded in October 2023, with the Financial Stability Board declaring the ISSB standards the culmination of its work. The IFRS Foundation now monitors companies’ climate-related disclosures in its place.15IFRS Foundation. ISSB and TCFD Companies previously aligned with TCFD can transition to IFRS S2, which builds on the same structure.
How ESG Ratings Work
Rating agencies translate raw disclosures into scores investors use to compare companies. MSCI, one of the largest providers, combines weighted Key Issue scores for environmental and social factors with a separate governance pillar score. The governance pillar carries a floor weight of 33%, reflecting how heavily mismanagement can damage a company regardless of sector.16MSCI. ESG Ratings Methodology Scores are normalized against industry peers, so a mining company is compared to other mining companies rather than software firms.
Sustainalytics, ISS, and Bloomberg also publish widely used ESG scores, each with its own methodology. Divergence between agencies is common and well-documented, meaning a single company can receive substantially different grades depending on who is grading.
Where the Rules Stand Now
The regulatory environment for ESG reporting is in flux. What looked like a global march toward mandatory disclosure has fractured along political and economic lines.
European Union
The Corporate Sustainability Reporting Directive was the most ambitious mandatory ESG regime in the world when adopted in 2022. The first wave of large public-interest entities began reporting under the European Sustainability Reporting Standards for their 2024 financial year. Scope has since narrowed sharply. In April 2025, the EU adopted a “stop-the-clock” directive postponing obligations for wave-two and wave-three companies.17European Commission. Corporate Sustainability Reporting An omnibus simplification package reached provisional agreement in December 2025, raising thresholds to companies with both €450 million or more in net annual turnover and at least 1,000 employees, with reporting deferred to financial year 2027. Wave-one companies falling below the new thresholds may be exempted for 2025 and 2026 at member states’ discretion.
United States
In March 2024, the SEC adopted rules requiring public companies to disclose material climate-related risks and, for larger filers, Scope 1 and Scope 2 greenhouse gas emissions.18U.S. Securities and Exchange Commission. SEC Adopts Rules to Enhance and Standardize Climate-Related Disclosures for Investors The rules were challenged and stayed. In March 2025, the SEC voted to end its defense of them, withdrawing its arguments before the Eighth Circuit.19SEC.gov. SEC Votes to End Defense of Climate Disclosure Rules As of mid-2026, no federal mandatory climate disclosure regime is in effect.
California has partially filled the gap. The Climate Corporate Data Accountability Act (SB-253) requires U.S. entities with more than $1 billion in annual revenue that do business in California to report Scope 1 and Scope 2 emissions beginning in August 2026, with Scope 3 reporting following in 2027. The California Air Resources Board has indicated it will exercise enforcement discretion for good-faith first-year submissions. Because the revenue threshold captures companies headquartered anywhere in the country, SB-253 functions as a de facto national mandate for the largest corporations.
Anti-ESG State Laws
A counter-movement is restricting ESG use in public investment. In 2025, ten U.S. state legislatures passed a total of eleven anti-ESG bills limiting financial institutions’ ability to consider climate risk and other ESG factors when managing state pension funds or public investments. Some bar state contracts with firms that “boycott” fossil fuel companies. A corporation may simultaneously face climate disclosure obligations under California law and prohibitions against ESG-based investment screening in states like Texas or Florida. Asset managers are caught in the middle, needing to satisfy ESG disclosure demands from institutional clients in some markets while avoiding ESG-labeled strategies in others.
Global ISSB Adoption
Outside the EU and the United States, IFRS S1 and S2 are emerging as the global default. Brazil, Chile, Qatar, and Mexico all made ISSB-based reporting mandatory from January 1, 2026, applying the standards to listed companies, banks, and insurers. Other jurisdictions are moving toward adoption on staggered timelines. The financial-materiality focus and alignment with existing IFRS accounting standards make ISSB the path of least resistance for countries that want to mandate reporting without building a framework from scratch.
Greenwashing Exposure
Companies that make environmental claims without adequate substantiation face real legal exposure. The Federal Trade Commission’s Green Guides require that any environmental marketing claim be backed by competent and reliable scientific evidence.20Federal Trade Commission. Environmental Marketing Vague terms like “eco-friendly” or “sustainable” without verifiable data can trigger enforcement actions for deceptive advertising. The SEC has also brought enforcement actions against investment advisers for misrepresenting their ESG screening processes.
The risk extends beyond marketing. Companies that publish sustainability reports with inflated metrics or cherry-picked data expose themselves to securities fraud claims when investors rely on those disclosures. As ESG data increasingly feeds into lending, insurance underwriting, and supply chain qualification, the audience for a misleading sustainability report extends well beyond shareholders. Treating ESG disclosures with the same rigor as financial statements — verified data, documented methodology, and independent review before publication — is the safer path.