Effective oversight of a sustainability report comes down to a handful of structural decisions the board must get right before publication: who is accountable, how material topics were chosen, whether the data can be trusted, and how disclosure obligations are met. Governance guidance from IFAC places responsibility for sustainability and ESG oversight "firmly with the board of directors," while practitioner-oriented advice from firms such as BDO Australia and PwC stresses that directors are now expected to challenge management with the same rigour applied to financial reporting. The consolidated checklist in this article turns those expectations into questions a board can work through, committee by committee, ahead of the next reporting cycle.
Establishing Robust Governance for Sustainability Reporting
The first decision is structural: which body of the board owns sustainability reporting, and does that body have the competence to oversee it. IFAC's guidance argues that boards overseeing a sustainability transformation need strong leadership and "members with adequate sustainability literacy," making board composition and skills a live reporting question rather than an HR formality.
Delegation is the second question. Audit committees are well placed to expand their existing mandate over high-quality financial reporting and internal and external audit into oversight of mandatory sustainability disclosures and the systems and internal controls behind them, according to IFAC. Tapestry Networks, reporting on virtual meetings with audit committee chairs of roughly 100 large U.S. public companies held from May 13 to June 25, 2021, found that audit committees frequently oversee ESG reporting quality and associated internal controls in practice. Other committee structures are possible; one example shared at IFAC's PAIB Advisory Group meeting described a company where board members serve on all committees to see a complete picture linking operational performance to strategic delivery. The board should also confirm that executive-level responsibility sits clearly with the CEO, CFO or another named leader, supported by defined reporting lines.
Aligning Sustainability with Corporate Strategy and Materiality
A report that lists initiatives without connecting them to strategy invites the criticism that sustainability is a side conversation. PwC's guidance for boards frames effective oversight as embedding ESG into strategic planning, risk management and performance monitoring — including pushing for full-cost capital allocation, aligning sustainability and financial KPIs, and linking ESG goals to executive compensation. Oversight in this framing means asking hard questions about scenario assumptions, data quality and trade-offs, treating sustainability "with the same rigor and importance as any core business issue."
Materiality is where that challenge is most consequential. BDO Australia's guidance for boards facing mandatory sustainability reporting sets out questions across four pillars — governance, strategy, risk management, and metrics and targets — and is blunt about the shift: "Boards are no longer just receiving updates; they're expected to actively challenge management." For many boards, BDO notes, this exposes a skills gap in climate and ESG that requires targeted learning and, where appropriate, directors with sustainability expertise. The board's job is not to redo the assessment but to satisfy itself that the process for selecting material topics is robust, documented and repeatable, and that the resulting topics genuinely feed capital allocation and risk decisions.
Ensuring Data Integrity and the Role of Assurance
Assurance is what converts reported numbers into credible ones. The A4S guide on navigating the reporting landscape notes that the ISSB anticipates jurisdictional regulators will require some level of assurance over information disclosed under its S1 and S2 standards, and that proposed SEC rules would require assurance on scope 1 and scope 2 emissions. In March 2023, IOSCO published a report on developing a global assurance framework for sustainability-related corporate reporting, reflecting strong stakeholder support for global consistency in assurance.
The board's assurance decision has a standards dimension. ISAE 3000 (Revised), an IAASB standard covering assurance on information other than historical financial information, is the standard currently used for sustainability assurance engagements; ISAE 3410 addresses greenhouse gas statements specifically, as the A4S guide summarises. That landscape is shifting: IAASB documentation states that ISAE 3410 has been withdrawn with effect from December 15, 2026, the effective date of ISSA 5000, described by the IAASB as a stand-alone overarching standard for assurance on sustainability reporting, suitable across all sustainability topics and reporting frameworks and implementable by all assurance practitioners.
A board approving an assurance plan in 2026 should therefore ask which standard the engagement will follow, what level of assurance (limited or reasonable) it provides, and whether the chosen approach will still be the right one as ISSA 5000 takes effect. The same internal-controls question applies regardless: who collects, verifies and reports the underlying data, and how are those controls tested.
Oversight of Reporting and Disclosure Compliance
The final pre-publication decision is scope and compliance. Writing about the EU's Corporate Sustainability Reporting Directive for IESE Insight, Kate Lith notes that the CSRD introduces reporting standards that go beyond traditional financial metrics, requiring companies to disclose detailed information about sustainability strategies, policies, targets and performance — including data on climate change, biodiversity, resource use, human rights and governance practices. Boards, she writes, must ensure robust internal controls are in place to collect, verify and report that information, which under the CSRD is included in the annual management report filed alongside the financial statements.
The board need not endorse a particular framework — the choice between standards belongs to management, informed by applicable regulation — but it should confirm the selected standard matches the company's obligations, that the disclosure checklist has been completed against that standard's requirements, and that publication channels match audience needs. The OECD's sustainability checklist for state-owned enterprise boards, while written for SOEs, makes the same accessibility point in general terms: reports should be made available and easily accessible, published online and free in a user-friendly format. Disclosure governance extends to escalation routes too; CPA Australia's board ESG checklist asks whether the organisation has a whistle-blower policy with material occurrences reported to the board or a board committee.
Board Oversight Checklist for Sustainability Reporting
The table below consolidates the oversight questions from these sources into a single framework. Working through each row — and recording the answer management gives — lets a board identify gaps or unresolved issues before the report is published rather than after. Each question traces to a specific governance theme; where a row cannot be answered confidently, that itself is the finding.
| Oversight area | Board's key question | Guidance and evidence | Qualification |
|---|---|---|---|
| Governance: committee responsibility | Which committee owns sustainability reporting oversight, and does the mandate cover systems and internal controls? | IFAC says audit committees are well placed to expand their reporting mandate; Tapestry Networks' 2021 meetings with audit committee chairs of ~100 large U.S. public companies found audit committees frequently oversee ESG reporting quality. | Other committee structures are valid; one IFAC-cited example has directors serving on all committees. |
| Governance: competence and accountability | Do directors have adequate sustainability literacy, and is executive responsibility clearly assigned? | IFAC links strong board leadership and sustainability literacy to effective oversight; BDO Australia says targeted learning and, where appropriate, sustainability-expert directors address the skills gap. | Assessment should align with general board-composition principles. |
| Strategy and materiality | How were material sustainability topics determined, and how do they connect to capital allocation and KPIs? | PwC urges aligning sustainability and financial KPIs and full-cost capital allocation; BDO Australia's four-pillar question set (governance, strategy, risk management, metrics and targets) frames the challenge. | Boards challenge the process, not just the output. |
| Data integrity and assurance | What assurance level and standard will the disclosures carry? | ISAE 3000 (Revised) is currently used for sustainability assurance; ISAE 3410 covers GHG statements and is withdrawn effective December 15, 2026, when ISSA 5000 takes effect as an overarching standard. | Applies to material disclosures influencing long-term value; regulator requirements vary by jurisdiction. |
| Disclosure and compliance | Does the report meet the selected standard's requirements and applicable regulation, and is it accessible? | The CSRD requires detailed disclosure of strategies, policies, targets and performance, including climate and biodiversity data, in the annual management report, per IESE Insight; the OECD checklist calls for free, user-friendly online publication. | Obligations differ by jurisdiction; the board confirms management's chosen standard fits. |
| Escalation and oversight channels | Are material occurrences reaching the board through defined routes? | CPA Australia's ESG checklist asks whether a whistle-blower policy routes material occurrences to the board or a committee. | Checklist is general guidance, not a mandatory regime for all companies. |
Your Board's Next Steps for Credible Sustainability Reporting
Boards should implement a structured oversight process for sustainability reporting, actively engaging with management on governance, strategy, data integrity, and disclosure compliance. In practice that means the board's agenda includes regular, detailed discussions on sustainability reporting, with specific questions posed to management regarding materiality, data assurance plans, and alignment with corporate strategy — the same standard of engagement audit committees long ago established for financial statements.
Two dated markers make that engagement concrete. Any assurance engagement approved now should be checked against the December 15, 2026 transition from ISAE 3410 to ISSA 5000, so the report's assurance basis does not become outdated mid-cycle. And the next board or committee cycle should end with every checklist row carrying a recorded management answer, turning the table above from a reading exercise into the documented evidence that the board did its job before publication.
Sources
- Board Oversight of Sustainability and ESG — IFAC
- What Boards need to ask about sustainability reporting — BDO
- ESG guide for boards to lead with impact and insight — PwC
- Accountingforsustainability
- International Standard on Assurance Engagements (ISAE) 3000 Revised, Assurance Engagements Other than… — IAASB
- Assurance on a Greenhouse Gas Statement (to be withdrawn Dec. 15, 2026) — IAASB
- Sustainability Assurance - ISSA 5000 — IAASB
- The Corporate Sustainability Reporting Directive: What every board needs to keep on the agenda — IESE Insight
- OECD
- Cpaaustralia
