Green Intent,Red Flags Assurance over Sustainability and the Risks that Matters
This article highlights the growing importance of sustainability assurance in strengthening the credibility of corporate sustainability disclosures amid increasing stakeholder expectations and evolving regulatory requirements. It explains the significance of ESG reporting, the value of independent assurance in mitigating greenwashing risks, and the role of reliable sustainability information in enhancing trust, compliance, governance, and informed decision-making. It further outlines the key risk areas that Assurance Practitioners should evaluate — industry-specific sustainability risks, governance culture, reporting boundaries, data integrity, indicator selection, technical expertise, and external factors — and underscores the need for professional skepticism, transparent reporting, and alignment with emerging global frameworks such as ISSA 5000. Serving as a practical guide, it equips practitioners with a structured approach to identifying, assessing, and responding to sustainability assurance risks.
Looking beyond the green claims
As companies commit to Net Zero, carbon neutrality, and make ambitious sustainability claims, stakeholders increasingly demand independent validation and a clear view on the green claims.
To meet this expectation, Assurance Practitioners look beyond the disclosures, beyond the claims, beyond the bold statements. This article provides a brief guide to analyse the risk behind the green intents.
What is sustainability?
Things which can be sustained over a period without impacting on the people, environment and so on. As per the United Nations, it is defined as “meeting the needs of the present without compromising the ability of future generations to meet their own needs.” In practice, it means balancing three dimensions — the three pillars of sustainability recognised by the UN:
Environmental
Use resources responsibly and judiciously, cut pollution and greenhouse gases, and protect ecosystems and biodiversity.
Social
Treat people fairly and safely, support communities, and uphold human rights, inclusion, and equity.
Economic
Run activities and businesses in ways that are resilient, ethical, and create long-term value.
Sustainability and ESG
Sustainability is the broad goal and set of practices. The UN developed the Sustainable Development Goals (SDGs) — 17 goals interlinked to the pillars above. Sustainability is a broad term, and the need for reporting on it arose for companies. The Organization for Economic Co-operation and Development (OECD) suggested companies report and communicate their practices under the ESG criteria — the three keys shaping the sustainability reporting landscape.
It is a way a company reports its performance, against which investors, regulators, and stakeholders assess it.
Why sustainability / ESG reporting matters
The essence of ESG reporting is to disclose how companies are being responsible under the categories of E, S and G, how they are managing the risk, and how it is being reflected upon. It is a way of building trust in society, ensuring regulatory norms are met, and providing a sense of comfort and confidence to stakeholders about preserving the future and having a system we all can rely on.
The essence of ESG reporting is to disclose how companies are being responsible under these categories of E, S and G, how they are managing the risk and how it’s being reflected upon.
Why it matters to get assurance over sustainability
Stakeholders increasingly require third-party validation of the claims companies make. When sustainability data sets — KPIs, metrics, disclosures — are assured, customers, investors, employees, value-chain partners, regulators, and stakeholders gain greater confidence.
Trust
- Customers get comfort that the products they invest in or buy are not harming the environment.
- Assurance on sustainable data sets reduces the risk of greenwashing / whitewashing / social washing, giving investors and stakeholders confidence that the offerings are genuine.
- It strengthens the brand reputation of the company and supports investors’ outlook towards it.
- It improves the credibility and clarity of public communications.
Compliance
Many jurisdictions now expect assurance over sustainability reporting against defined frameworks, enhancing comparability between peers, sectors, and industry standards and helping readers — including regulators — understand a company’s standards and governance.
- In India, listed companies report through the Business Responsibility and Sustainability Report (BRSR), with mandatory assurance introduced.
- In the EU, the CSRD mandates limited assurance over ESRS disclosures, including GHG.
- In Australia, the Australian Sustainability Reporting Standards (ASRS) require phased auditing of climate reports.
- In Singapore, listed companies must obtain external limited assurance on Scope 1 and Scope 2 GHG emissions two years after they begin reporting — and other geographies are marching in similar ways.
Accessibility
Sustainability data sets are becoming a critical factor in financial decision-making. Lenders, insurers, investors, and customers use them to evaluate the overall risk and potential performance of a company or asset.
- Banks use verified ESG data to assess a borrower’s long-term viability and default potential; strong ESG practices can lead to better loan terms or access to green financing.
- Insurers use ESG metrics to determine coverage and premiums — poor ESG performance signals higher operational and liability risk, and higher insurance costs.
- Investors use verified data to identify sustainable, resilient investments, avoid greenwashing and social washing, and allocate capital in line with financial goals and sustainability values.
- Customers require audited supplier ESG data to meet their own targets and due-diligence obligations.
Better risk management, governance and integration with financials
- Getting data audited surfaces design gaps and control gaps for management, enabling stronger footing over data collection, methodology, and oversight.
- It helps the company put discipline in place, driving stronger policies, internal controls, and oversight — like financial reporting.
- It helps identify risks, opportunities, and the financial impact or provisioning that may be required. For example, if an asset emits high emissions and an alternate asset is assessed, that decision affects the asset’s useful life or impairment — no longer seen in isolation, but mapped onto financial impacts.
In essence, verifiable sustainability data is transforming into a standard financial metric — moving beyond a niche ethical consideration to an essential component of mainstream risk assessment, and helping stakeholders assess decisions on investment and partnership.
Risks and measures for the Assurance Practitioner
The risks below guide the Assurance Practitioner in determining the red flags and the areas to be more mindful about. They help in determining the nature, timing, and extent of procedures across the entire engagement lifecycle — planning, execution, and completion. Foundational parameters must be clarified first: the rationale for the assurance, the required level (limited or reasonable), the purpose of the engagement, the intended users of the report, and the planned distribution. Compliance with the applicable framework is a must, and it is necessary to keep professional antennas up to smell the reds and apply professional skepticism throughout.
R1
Industry / Sector in which the Client belongs
The client’s industry and sector define the material topics of that specific business — sustainability impacts differ sharply by sector. There could be water and land-use concerns in agriculture; child labour, modern slavery, and human-rights concerns in manufacturing; human health, plastic pollution, waste, and water scarcity in beverages; land-clearance concerns when siting a plant far from a city; or cotton supply-chain risk in clothing.
Geography also defines risk — climate risks such as flood, heat, and water stress depend on where the site is located, affecting the company’s strategy and KPIs. Industry knowledge is foundational to assessing sustainability risk at the start.
This helps the practitioner evaluate whether the client is including the right information, whether the statement addresses the key risks, and whether material information is likely being omitted — enabling appropriate challenge of management and better-designed procedures.
R2
Knowledge about the Client and its governance
Assess how governance is structured and the tone set by senior leadership. When top management is genuinely committed to the sustainability roadmap, that mindset cascades through the organisation and aligns everyone toward shared targets — and drives the internal controls management wants for reporting.
Conversely, if sustainability is treated mainly as a tick-in-the-box exercise, management may pursue targets differently, with reluctance to implement sufficient internal control or to address weaknesses and deficiencies.
Assess how inclined clients are to achieve objectives — whether targets are over-ambitious, whether incentives are linked to compensation, and how much pressure exists. Where such pressures exist, the risk to management objectivity and fraud risk increases and should be assessed accordingly. To summarise, the tone at the top is pivotal.
R3
Reporting boundaries
Where clients have multiple branches, factories, units, or offices, understand the scope of the reporting boundaries used — and management’s rationale for scoping certain boundaries in and others out. Assess whether the boundaries not assured give rise to greenwashing or social-washing risk, and whether the residual risk would mislead the reader if the report covers only the scoped-in boundaries.
Companies may try to limit scope to a narrow set that reflects positive impacts while ignoring material negative impacts.
- Is management clearly defining the reporting boundary in the Statement?
- What does the applicable regulation say — does it let management pick and choose boundaries?
- How will readers perceive the report — will the conclusion be read as substance over form even for sites outside scope?
- What is the risk of not assuring those sites — are they high-emission assets or subject to labour issues management would rather not report?
- Does cherry-picking fewer units misrepresent the sustainability reporting?
There is significant risk that management may use assurance symbolically to boost reputation while engaging in greenwashing or social washing. Practitioners must apply professional skepticism to mitigate this.
R4
Synchronization of financial and sustainability data sets
Completeness and data accuracy are key. Unlike financial systems, record-keeping for sustainable transactions is less mature — so sustainability metrics and KPIs should speak to financial data to ensure completeness and accuracy. It is important that the finance department is involved in sustainability reporting to eliminate omissions that could lead to a misleading or incomplete opinion.
For example, the property, plant and equipment schedule in the balance sheet details leased assets, manufacturing sites, freehold property, guest houses and so on. Tying sustainability data back to these financial parameters ensures completeness of the data captured.
Management’s decisions also need integration across the sustainability report and financial statements. For a high-emission asset with a planned replacement addressed in the MD&A, the finance team may need to make provision or capex, and analyse remaining useful life or impairment. Without synchronisation, the risk of omission and inaccuracy is challenged.
R5
Indicators called for assurance and their selection process
Understand the indicators presented, the indicators on which assurance is called for, and the rationale for those selected — and those not scoped in. Scoped-in indicators may be linked to measuring material topics, to public statements about achieving a desired level, or represent significant impacts, risks, and opportunities across the value chain.
Assess that indicators called for assurance meet the following:
- Measurable and reliable: quantitative or semi-quantitative, accurate, robust, and consistent over time, allowing objective verification.
- Complete sets: a comprehensive picture across environmental, social, and economic dimensions, avoiding “cherry-picking” of only positive information.
- Comparable: clear, easy to understand, and comparable across time and, ideally, across similar entities or benchmarks.
- Subjectivity and estimates: many metrics involve significant judgment, forward-looking statements, and complex estimation (e.g. scenario analysis for climate risk).
- Scope limitations: management may scope only a narrow set of positive indicators — assess the total presented versus those assured, and the residual risk of the remainder.
R6
Technical nature of the metric
The assurance team may lack the specific expertise (e.g. in environmental science or social-impact assessment) required to adequately evaluate certain claims. Some environmental or social issues may need specialised experts, creating a need for multidisciplinary expertise.
The Assurance Practitioner may assess the need for assembling a multi-disciplinary team with the expertise necessary to address the various risks envisaged.
R7
External factors
It is important to check for external factors throughout the process:
- Any adverse media news.
- Any allegations against the company by stakeholders.
- The client’s ESG rating versus peers — whether it has been upgraded or downgraded, and the rating agency’s rationale.
- Market controversies in that sector.
While it is important to understand the sector and the governance within the organisation, it is equally important to evaluate and assess the factors present outside it.
As this domain matures, the future of assurance reports on sustainability reporting will see the inclusion of robust internal-controls reporting, other information paragraphs, and, potentially, the evolution of a concept similar to Key Audit Matters (KAMs) adapted for sustainability.
ISSA 5000 and a single global baseline
Sustainability Assurance 5000 (ISSA 5000) is coming to provide a single, global baseline for assuring sustainability reports — driven by strong demand from investors and regulators for consistent, high-quality, comparable ESG data across sectors, industries, and locations. It aims to offer a unified, framework-neutral standard applicable to all topics and practitioners, moving beyond fragmented guidance to support decision-making with reliable information. Framework-agnostic, profession-agnostic, and scalable to both reasonable and limited assurance, it is designed for combatting the reds — a single stringent framework to build trust, improve comparability, and prevent greenwashing, social washing, and faulty decision-making based on unreliable data.
All these standards aim to provide the highest level of trust to stakeholders. However, the responsibility of the Assurance Practitioner remains the same: to apply the highest level of professional skepticism to smell the reds, analyse inherent and potential risk, and apply appropriate measures and safeguards.