Blog

Corporate Sustainability is evolving in global operating companies from focusing on publishing ESG Reports to the ability to prove business relevance. This evolution is driven by the move to mandatory reporting that requires audit-ready reporting.

Thesis: Mandatory reporting and assurance are raising the bar for ESG disclosures. Directors of Sustainability who want to retain strategic control should treat ESG reporting like an operating system: defined owners, clear methods, an evidence trail, and a repeatable cadence. If sustainability does not build this capability, it will default to finance or legal and drift toward compliance over performance.

Three points support this thesis:

1. Assurance will reward repeatability and documentation, not late-cycle last-minute scramble.
2. The ESG Controller is a function that can be built through multiple operating models, including fractional options that accelerate readiness.
3. A light but disciplined controllership layer protects sustainability leaders' ability to drive decarbonization decisions, not just disclosures.

1) The job is changing from publish to prove

Most sustainability teams know how to publish. The next phase is proving. Assurance does not care how passionate your team is or how hard everyone worked to compile the report. It cares whether your numbers are repeatable, comparable, and supported by evidence that a third party can test.

This is why the old operating model, where carbon accounting is a junior contributor's job or ten percent of someone's time, breaks. Once reporting is mandatory, the work becomes a year-round system that needs governance, owners, and controls.

2) Sustainability leaders should own the operating model, not surrender it to compliance

There is a predictable failure mode in many companies: when mandatory reporting arrives, the work shifts to whoever has the muscle memory for audits. That is often finance, internal audit, or legal. The shift can be helpful for rigor, but risky for strategy.

If sustainability loses ownership of the reporting operating model, the organization often optimizes for minimum compliance. That can mean narrower boundaries, slower innovation, and less investment in the data needed for decision-making.

The leadership move is calling the audit meeting, not being called into it. When Sustainability owns the operating model and evidence trail, finance and legal become force multipliers, not the default owners of the work.

3) The ESG Controller is a function, and there are multiple ways to staff it

The term "ESG Controller" is not yet standard across the market. You will also see ESG Reporting Manager, ESG Controllership, or technical ESG accounting. Different titles, same work: the function that owns definitions, controls, evidence, and sign-off.

Three common operating models appear across companies: In-house ESG Controller, Hybrid hub-and-spoke, Fractional or Outsourced Managed Service ESG Controller.

A quick way to choose the right model:

• If you have a stable long-term mandate and bandwidth to hire, in-house controllership can be the right end state (with interim coverage as needed).
• If you are distributed across sites and products, default to hub-and-spoke with explicit RACI and an escalation path.
• If you are facing near-term disclosure and assurance timelines, a fractional model can build readiness fast while internal owners keep accountability.

The point is not the title. The point is the function: definitions, controls, evidence, cadence, and sign-off.

In-house ESG Controller (FTE).

What it solves: long-term ownership and standardization across business units, with clear accountability for quality and deadlines.

What can go wrong: hiring takes time and the role can drift into compliance-only if sustainability does not retain strategic ownership.

Strong fit for large, complex organizations with a long runway and a need for deep internal ownership. The downside is speed. Hiring a true hybrid profile can take time, and the reporting calendar will not wait.

Hybrid hub-and-spoke.

Non-negotiables: datapoint-level owners and approvers, a monthly or quarterly cadence, and a clear escalation path when coverage is incomplete.

Why it works: sustainability keeps strategic control while finance and internal audit contribute rigor without owning the agenda.

The most common model for distributed companies. A central controllership layer sets standards and runs the cadence, while sites, products, and functions own source data. This keeps sustainability in control while bringing the discipline needed for assurance.

Fractional or outsourced ESG Controller.

What it looks like: an experienced controllership-style lead embedded part-time to stand up definitions, controls, and evidence packs quickly, while internal owners still produce the data.

How to keep it credible: treat it as capability transfer and keep accountability in-house.

A pragmatic option when speed matters. Many companies use fractional controllership in finance. ESG is no different. A fractional model can bring expert knowledge, faster readiness, and lower fixed cost than hiring a full-time role immediately. It can also bring pattern recognition across peers, which helps avoid reinventing the wheel.

The key is integration. Fractional support works when internal owners are still accountable for data, and the goal is capability transfer over time.

A simple readiness checklist for Directors of Sustainability

If you want to retain control while building assurance readiness, start with five questions:

• If an assurer asked for evidence for our top ten ESG metrics today, what would we hand them?
• Do we have documented definitions and boundaries for those metrics, or do we have institutional knowledge?
• Who owns each datapoint end to end, and who signs off?
• What changes trigger re-approval: emission factors, methodologies, supplier data sources, or estimation models?
• Do we have a repeatable reporting cadence, or do we rebuild the process every year?
  

A deeper resource for SR Inc member-clients

SBER is designed to help Directors of Sustainability stay in the driver’s seat as mandatory reporting and assurance raise the bar. SR Inc’s Compliance Collaborative for mastering mandatory reporting translates regulatory volatility into practical, executive-serving management guidance, peer patterns, and templates to define what good looks like.

If you’re an SR Inc Member-Client and want the deeper resource, access the latest SBER Member Advisory overview through SBER.

Closing

Mandatory reporting is not coming. It is here. Assurance is next. The ESG Controller function is how sustainability leaders keep control by building reporting that is repeatable and defendable. The goal is not compliance for its own sake. The goal is confidence, so you can make better decisions across the enterprise.