ESG reporting: a practical guide

ESG reporting is the practice of disclosing how a business affects the environment, treats people and governs itself, using agreed standards so the information is comparable and credible. It sits alongside the financial accounts and answers a simple question: beyond profit, what is this organisation actually doing, and can it prove it? This guide explains what ESG reporting covers, who has to do it, the main frameworks in plain terms, and how everyday operational data, including environmental incidents, becomes the evidence behind the numbers.

What is ESG reporting?

ESG reporting is the disclosure of an organisation’s performance across three areas: environmental, social and governance. Each one captures a kind of impact and risk that does not show up in a standard profit-and-loss statement, but that genuinely affects the long-term health of the business and the world around it.

• Environmental. How the organisation affects the natural world. This includes greenhouse gas emissions, energy use, water, waste, pollution, biodiversity and environmental incidents such as spills or breaches of an environmental permit.
• Social. How the organisation treats people. This covers health and safety, working conditions, fair pay, training, diversity, human rights in the supply chain, and the effect on local communities.
• Governance. How the organisation runs and polices itself. This covers board structure, ethics, anti-bribery and anti-corruption measures, data protection, risk management and the systems that keep the other two areas honest.

A good ESG report does not just describe intentions. It states what was measured, over what period, using which method, and it can be checked. That is the difference between a sustainability report and a brochure.

Why does ESG reporting matter, and who has to do it?

ESG reporting matters because the people who depend on a business have a fair interest in risks and impacts that the accounts leave out, and because, increasingly, the law and the market require it. Investors and lenders use ESG data to price risk. Customers and large buyers use it to choose suppliers. Regulators use it to enforce environmental and social rules. Employees use it to decide who they want to work for.

Who must report depends on where an organisation operates and how large it is. The picture has two layers:

• Mandatory reporting. A growing number of jurisdictions require larger companies to report against set standards. In the European Union the Corporate Sustainability Reporting Directive brings many companies into audited sustainability disclosure. Other markets are introducing climate-related disclosure rules built on the international baseline from the International Sustainability Standards Board.
• Reporting by request. Even an organisation that is not directly regulated is often asked for ESG data by its customers and lenders. A large company in scope must account for its supply chain, so it asks its suppliers for figures regardless of whether those suppliers are themselves regulated. The request cascades downhill, and smaller firms feel it through tenders and contracts.

The practical takeaway: being out of legal scope is not the same as being off the hook. If you sell to large organisations, you will be asked for ESG data sooner rather than later.

The main ESG frameworks, in plain terms

A framework is an agreed set of standards that tells you what to report and how, so that one company’s numbers mean the same as another’s. Three matter most for an English-speaking, internationally trading business. They overlap, and many organisations end up using more than one.

The simplest way to hold the difference in your head is by audience. GRI leans towards a broad set of stakeholders and the organisation’s impact on the world. The ISSB standards lean towards investors and how sustainability issues affect the financial value of the business. The CSRD asks for both perspectives at once, an approach often called double materiality: what affects the company, and what the company affects. The deeper detail on EU law sits in our companion piece, the CSRD explained.

One honest caveat on EU rules: the scope and timing of the CSRD have been under active simplification. The European Union’s Omnibus process, agreed at political level in December 2025, set out to narrow the number of companies in scope and reduce the volume of required data. The direction of travel is fewer companies and lighter detail, but the destination is still settling. Treat any specific threshold as a moving figure and check the current position before you rely on it.

How environmental incidents feed ESG data

Environmental incidents are not a side issue to ESG reporting; they are a direct source of the environmental disclosures themselves. A chemical spill, an uncontrolled discharge to water, a gas release, a fire, or a breach of an environmental permit is both an event to be managed and a data point to be reported. Under frameworks such as the ESRS, organisations are expected to disclose pollution, incidents and the actions taken in response.

This is where day-to-day operations and the annual report meet. If your teams capture environmental events properly when they happen, with the date, location, substance, quantity, cause and response, then the ESG figure for the year is simply a summary of records you already hold. If they do not, you are left reconstructing the year from memory and email at the worst possible moment. We cover the operational side in detail in environmental incident reporting.

The same logic runs through the social pillar. Health and safety incidents, near misses and working conditions all feed social disclosures, which is one reason a single, consistent way to capture events across the organisation is so useful. Logincident exists to make that capture fast and structured, so the evidence behind both environmental and social reporting is collected as events happen rather than assembled afterwards. You can see how this maps to sustainability in our ESG solution.

Collecting the data and staying audit-ready

Audit-ready means a third party could check your ESG figures and find a clear, dated trail behind every one of them. This is the single most important habit in ESG reporting, because more and more disclosures now require external assurance. A number with no record behind it is a liability, not an asset.

A sound approach has a few plain features:

1. Capture at the source. Record events and readings as they happen, not at year-end. A spill logged on a phone the moment it occurs is worth more than a figure reconstructed nine months later.
2. One method, written down. Decide how each metric is measured and stick to it, so this year’s number can be compared with last year’s.
3. Keep the evidence attached. Photos, meter readings, permits and statements belong with the record they support, not in a separate folder nobody can find.
4. Trace every figure. Each headline number in the report should link back to the underlying records that make it up.
5. Show the trend. A single year tells a regulator little. The value is in the direction of travel, which is far easier to see in a dashboard than a spreadsheet. Our note on data visualisation covers turning records into clear trends.

Structured digital capture makes all five far easier. Moving from paper and ad hoc spreadsheets to digital reporting means the data arrives already dated, categorised and searchable, which is most of the work of being audit-ready done before anyone asks.

Common pitfalls in ESG reporting

Most ESG reporting problems are practical, not philosophical. The recurring ones are worth naming so you can avoid them.

• Year-end archaeology. Assembling a year of data from memory in a panic. It is slow, error-prone and impossible to assure. The fix is capture at the source.
• Greenwashing by accident. Overstating progress, or reporting only the flattering metrics. Even when unintentional, it carries real legal and reputational risk. Report what genuinely matters, including the uncomfortable figures.
• Changing the method quietly. Altering how a metric is calculated from one year to the next, which destroys comparability. If a method has to change, say so and explain it.
• Reporting everything and explaining nothing. A vast report nobody can read is not transparency. Focus on the issues that are material to the business and the people around it, and say them plainly.
• Treating ESG as a separate silo. The best data comes from the systems people already use for safety, quality and operations. ESG built on top of real operational records is cheaper and far more credible than ESG built in a vacuum.

Where to go next

This guide is the overview. The companion articles go deeper on the parts most people ask about:

• What is ESG reporting? A plain-English introduction for the foundations, without the jargon.
• The CSRD explained for who the European Union’s rules affect and what they require.
• Environmental incident reporting for the operational habit that feeds your environmental disclosures.

By Shannon Hamming, Communications and Community