A Board Agenda for Turning Sustainability Reporting into Organisational Capability

---

For many boards, sustainability appears to bring a growing list of costs: consultants, specialist software, data collection, assurance, training, additional staff and increasingly complex reporting requirements. Directors may therefore see sustainability as another compliance burden.

But there is another way to look at it.

In 1979, Philip Crosby popularised the idea that “quality is free”. He did not mean that quality costs nothing. His argument was that organisations were already paying heavily for poor quality through rework, defects, complaints and lost customers. Prevention was often cheaper than correction.

The same management logic can be applied to sustainability.

Sustainability is not literally free. Some organisations will need technology, specialist expertise, assurance or capital investment. But much of the management infrastructure required should already exist: governance, strategy, risk management, operational controls, procurement, human resources, finance, data systems, internal audit, management review and continual improvement.

Unnecessary cost arises when sustainability is treated as something separate from the business.

For Malaysian boards, this distinction is increasingly important. Malaysia’s National Sustainability Reporting Framework uses IFRS S1 and IFRS S2 as baseline sustainability disclosure standards and is being implemented progressively. The direction is clear: sustainability information is moving closer to mainstream corporate reporting and governance. The board therefore needs to oversee not only what is disclosed, but also the processes, controls, evidence and competence that produce those disclosures.

Board Members Need Sustainability and ESG Literacy

A board cannot effectively govern what it does not sufficiently understand.

Directors do not need to become climate scientists, carbon accountants or sustainability specialists. They do, however, need enough sustainability and ESG literacy to discharge their governance duties, challenge management and make informed decisions.

At a minimum, directors should understand the difference between sustainability management and sustainability reporting; how ESG matters can affect strategy, operations, cash flows, financing and resilience; the basic architecture of governance, strategy, risk management, metrics and targets; and the importance of reliable data, internal controls and clear accountability.

This enables directors to ask useful questions. What matters are material? Who owns them? How are they incorporated into strategy and enterprise risk management? How are data generated and checked? What controls support the numbers? What happens when performance is below target? Are responsibilities embedded within business functions, or assumed to belong to a sustainability department?

Without this understanding, board oversight risks becoming a year-end approval exercise. Effective governance begins much earlier. The board should oversee the system that produces sustainability performance and disclosures, not merely approve the final report.

Reporting Must Be Integrated, Not Reconstructed at Year-End

One of the most expensive ways to manage sustainability is to treat reporting as a stand-alone annual project.

The pattern is familiar. Near year-end, departments are asked for information, spreadsheets are circulated, missing evidence is chased, definitions are reconciled and consultants are engaged. Senior managers spend valuable time resolving inconsistencies, and a sustainability statement is eventually assembled.

A report may be produced, but the organisation has not necessarily managed sustainability.

The more efficient approach is to build reporting requirements into processes that already run the business.

If emissions must be disclosed, responsibilities for source data, calculations, review and evidence should be established throughout the year. Workforce information should come from controlled human-resource processes. Material supply-chain requirements should be embedded in procurement and supplier management. Significant climate-related risks should be considered through enterprise risk management, strategy and investment decisions, not only in a separate ESG register.

The principle is simple: do not build a second organisation to manage sustainability.

Use existing governance and management architecture where suitable. Strengthen it where gaps exist. Create new processes only where genuinely needed. Material sustainability measures should increasingly appear in normal management reporting so that deviations are addressed during the year rather than discovered when the annual report is prepared.

When sustainability is integrated, the annual disclosure becomes an output of processes already operating. It is no longer a construction project carried out once a year.

Competence Is Not the Same as a Qualification

Integration depends on people, and this is where many organisations misunderstand competence.

A person is not automatically competent because he or she has attended an ESG course, obtained a sustainability certificate or holds a relevant academic qualification. These can support learning, but they do not by themselves demonstrate the ability to perform a particular job effectively.

Competence is the ability to apply knowledge and skills to achieve intended results.

The important words are “apply” and “achieve”.

In practice, competence also draws on experience and appropriate behaviours. For sustainability, employees should be able to use their knowledge, skills, experience and behaviours to perform the work required within their own organisation.

Depending on their responsibilities, this may include identifying requirements, evaluating risks and opportunities, designing procedures and controls, defining responsibilities, establishing indicators, collecting and validating data, maintaining evidence, conducting internal audits, taking corrective action, reviewing performance and improving the system.

The board should therefore ask a different question. Not, “How many ESG-certified employees do we have?” but, “What can our people actually do?”

Can they translate reporting requirements into practical processes? Can they design, document and implement those processes? Can they maintain reliable information and evidence? Can they identify weaknesses and improve controls? Can they operate the sustainability system without asking an external consultant to repeat the same work every year?

That is a more meaningful test of competence.

Training Is an Input; Capability Is the Result

Training is important, but training alone is not the solution.

The purpose of training should not be attendance, certificates or accumulated course hours. It should be improved organisational capability.

After training, management should be able to answer a simple question: what can this person now do that he or she could not do before?

If employees attend sustainability courses but consultants still have to identify risks, design processes, prepare procedures, establish controls, collect evidence and assemble disclosures, the organisation may have increased knowledge without yet building sufficient competence.

Effective training should be practical and linked to actual responsibilities. People should learn how to apply sustainability requirements to their own sites, functions, systems and decisions.

This is why sustainability cannot be left entirely to an ESG department. Relevant knowledge already exists across the organisation. Finance understands controls and evidence. Risk personnel understand risk assessment. Engineers understand processes and technical performance. Human resources understands workforce matters. Procurement understands suppliers. Internal audit understands control effectiveness. Operations understands how work is actually performed.

The sustainability function should connect these capabilities, establish the framework, provide technical guidance and monitor performance. It should not replace normal business ownership.

Use Consultants to Build Capability, Not Dependency

External consultants can add value through specialist expertise, independent challenge, benchmarking or initial implementation support.

The issue is what remains inside the organisation after the consultant leaves.

If an adviser helps design a process, internal employees should understand it, own it and be able to maintain it. If specialists perform a technical assessment, management should understand the implications and incorporate them into decisions. If advisers assist with reporting, the underlying data, controls, evidence and accountability should remain the organisation’s responsibility.

A useful board test is: if our external sustainability adviser were unavailable next year, could our people still operate the core system effectively?

Buying specialist expertise to build internal competence is an investment. Repeatedly buying the same work because the organisation has not learned to perform it is an avoidable recurring cost.

Where the Cost Really Lies

The economics of poor sustainability management are often hidden because the costs are spread across different functions.

They include recurring consultancy fees that leave limited knowledge behind; senior management time spent in the annual reporting scramble; rework when information is incomplete or inconsistent; additional effort required to support assurance; duplicated systems; and lost opportunities to use sustainability information to improve operational decisions.

By contrast, good implementation largely involves organising work properly: assigning ownership, training people, documenting processes, establishing controls, using existing systems effectively and reviewing performance throughout the year.

Much sustainability information is also operational information. Energy, fuel, water, waste, materials, employee turnover, workplace incidents and supplier performance are business variables that affect cost, productivity, resilience and risk.

Measuring energy properly can reveal waste. Mapping suppliers can expose concentration and continuity risks. Better workforce information can highlight retention or safety problems. Stronger data controls can support both management decisions and external reporting.

This is where sustainability begins to pay for itself.

What Should the Board Ask?

Boards do not need to manage the system themselves, but they should know whether the organisation is building one. A practical board discussion can begin with eight questions:

1. Do we understand enough about sustainability and ESG reporting to exercise effective oversight?
2. Are sustainability requirements integrated into strategy, enterprise risk management, finance, procurement, operations, human resources and internal audit?
3. Are sustainability activities managed throughout the year, or mainly before the annual report?
4. Who owns each material sustainability matter and important metric?
5. Have we defined the competence required for people performing sustainability-related work?
6. Can employees apply their knowledge and skills to design, document, implement, maintain and improve the relevant processes?
7. Are external advisers transferring knowledge and capability, or are we repeatedly buying the same service?
8. Are sustainability data generated through controlled processes supported by evidence and accountability?

These questions shift the board conversation from “Have we completed the report?” to “Are we managing the business properly?”

When Sustainability Becomes “Free”

Sustainability is not costless. “Free” should not suggest that decarbonisation, environmental improvement, workforce initiatives or assurance require no investment.

The argument is more important than that.

Sustainability becomes economically efficient when it is integrated into how the organisation already works; when directors understand enough to govern it; when responsibilities sit with people who run the business; when employees can apply knowledge and skills rather than merely hold qualifications; when training produces practical capability; and when consultants supplement internal competence rather than substitute for it.

The most expensive sustainability model may therefore be the one that treats ESG as a separate year-end reporting exercise.

The better model is also the more managerial one: understand it, govern it, integrate it, build competence, operate it, measure it, review it and continually improve it.

For Malaysian boards, the question should not simply be, “How much will sustainability cost us?”

A better question is:
“Have we built the competence and management processes to make sustainability part of how we do business?”

When the answer is yes, sustainability stops being an additional reporting burden. It becomes part of good governance and good management — and that is when it comes closest to being “free”.

Further reading — Beyond ESG Reporting: Implementing a Sustainability Management System.
A practical, step-by-step guide to designing, documenting, implementing, monitoring and continually improving a Sustainability Management System, connecting governance, risk, controls, reliable data, internal audit and management review.

The article was written by Amargit Singh.

Photo by Danist Soh on Unsplash.