EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Limited, each of which is a separate legal entity. Ernst & Young Limited is a Swiss company with registered seats in Switzerland providing services to clients in Switzerland.
How EY can help
Jurisdictions around the world are developing guidance on ESG disclosures. There are currently over 600 ESG reporting provisions globally, and they don’t all agree on ESG issues. Companies with international operations may also find themselves facing questions about voluntary disclosures, and ad hoc requests from investors, consumers and employees. Internal audit can play a key role in equipping a company to deal with these demands.
Internal audit – A valuable asset to support your ESG transformation
Organization need to consider how they leverage the changing role of the internal audit function as an important enabler of quality and consistency, and as a strategic partner for their organization’s ESG program. An effective internal audit function is already integrated across the entire organization so it makes sense to embed ESG into the audit plan. Engaging internal audit in ESG is also an effective use of internal resources, with many transferable skills already available from the area of financial reporting. Overall, proactive insights and assurance increase the level of confidence in managing ESG risks, measuring and reporting progress and achieving goals and targets. To get started, internal audit should focus on three key areas:
- Monitoring ESG controls: internal audit teams have a duty to regularly monitor control processes and activities throughout the organization and improve or comment upon their accuracy, efficiency and effectiveness. Internal audit can evaluate ESG reporting processes, increase the reliability of metric calculations and improve assertions on ESG metrics included in current or future sustainability reporting.
- Enhancing transparency and reliability of ESG performance data and disclosures: internal audit can support transparency and reliability of ESG data and information, enhancing the credibility of disclosures and identifying gaps for improvement. This in turn supports the governance structure as well as the data collection, collation and calculation processes needed for robust sustainability disclosures.
- Linking ESG to enterprise risk management: by linking the management and reporting of ESG to the company’s enterprise risk management system and processes, internal audit can ensure that ESG risks are not limiting the company’s achievement of strategic objectives. Understanding material ESG risks and associated controls is essential to enable monitoring and accurate reporting over time.
For more information please see our article Why ESG can help internal audit become more relevant
Next steps and recommendations
Given the importance of communicating ESG performance transparently and consistently, we close this article with our five recommendations for a more robust reporting setup:
- Understand which of the evolving ESG reporting requirements could be relevant for your jurisdiction and identify potential risk factors, specific ESG-related risks and ESG governance practices relevant to your industry, size, geographic footprint, etc.
- Identify relevant stakeholders such as investors, suppliers, customers or community groups and their ESG-related priorities, interests and information needs
- Decide how to address the ESG reporting and other related obligations, taking into account voluntary frameworks such as the Sustainability Accounting Standards Board (SASB), Climate Disclosure Standards Board (CDSB) and Task Force on Climate-related Financial Disclosures (TCFD)
- Design and deploy internal controls over sustainability reporting and develop a roadmap to embed ESG requirements as part of the business processes, including IT systems and data architecture
- Consider and integrate third parties in the ESG strategy through aspects such as attestation on international standard ISAE3000
- Engage and leverage the organizations internal audit function early in the ESG journey