How to Approach ESG Risk Management and Regulatory Reporting

Regulation Doesn’t Have to Be Intimidating

ESG risk management and regulatory reporting are often seen as complex and burdensome. But as Neil makes clear, this perception misses the point. ESG, especially under frameworks like UK SRS S1 & S2, is about understanding risk and making better business decisions.

The landscape is evolving, and alongside traditional challenges, climate and resource issues are becoming part of everyday decisions. This is increasingly showing up in supply chains and customer expectations, filtering through from larger organisations to their partners.

Rather than being a cause for concern, this shift presents an opportunity, it’s about treating ESG as another transformational programme and helping organisations better understand risk and make more informed decisions over time.

ESG Reporting Is Just An Extension of Good Governance

A common misconception is that ESG reporting sits outside core business activity. In reality, it builds directly on existing governance structures.

The principles are familiar. Governance sets responsibility, strategy identifies risks and opportunities, risk management puts plans in place, and metrics track performance. ESG simply expands these processes to include climate and sustainability-related risks, many of which directly affect financial performance. This information is expected to sit alongside financial reporting.

While ESG is often framed around risk, it also presents clear opportunities. Organisations that take a proactive approach are seeing stronger customer demand, improved employee engagement, increased investor confidence, and operational efficiencies.

It’s not a separate compliance function… it’s about embedding it into the functions you already do

Getting Started Without Overcomplicating It

One of Neil’s key messages is simplicity, ESG does not require a complete transformation from day one. Instead, it starts with understanding and using the data you already have.

Most organisations already hold valuable data across finance, energy, and operations. The key is to build a baseline from this, focus on the areas that matter most, and improve accuracy over time while being transparent about any gaps.

From there, organisations can begin identifying key risks and engaging teams across the business, building progress gradually rather than waiting for perfect data or fully developed systems.

Why the Supply Chain Matters Most

For many organisations, the majority of ESG risk and emissions sit within the supply chain. Rather than seeing this as a barrier, organisations should treat supply chain engagement as an ongoing process, starting conversations early and improving data over time.

Risk in the supply chain can be harder to see, particularly across multiple tiers and international suppliers. However, issues in one part of the chain can have wider impacts across the business.

There is also a cumulative effect. Individual suppliers may seem small, but together they create a material impact, meaning organisations of all sizes are increasingly being asked to provide ESG data. As a result, ESG data requests are increasingly flowing through supply chains, making transparency an important part of doing business.

Key Actionable Takeaways

1. Use the data you already have
Build a baseline and improve over time, progress matters more than precision.

2. Speak with your finance team
Link ESG to measurable performance and business outcomes, numbers drive action.

3. Embed ESG into core business processes
Align ESG with governance, strategy, and risk management rather than treating it as separate.

4. Focus on what matters to leadership
Prioritise impacts on cash flow, operations, and supply chains, recognising ESG transparency is now expected by customers and partners.

5. Turn reporting into action
Ensure disclosures reflect real change and involve employees, without action, it risks becoming greenwashing.

If you’d like to revisit these insights, download the slides to keep for your reference.