ESG reporting in 2026 is no longer a marketing exercise — it is a regulated corporate disclosure sitting inside the annual report, assured by the statutory auditor, and enforced with the same penalties as financial misstatement. This guide gives UK finance leaders a clean map of the regimes (CSRD, UK SRS, SECR, ISSB), the double-materiality workflow, and what a defensible close looks like.
~1,100
ESRS datapoints a full CSRD filer may need to consider
£50k–£250k
First-year limited assurance fee on top of the statutory audit
FY2028
Reasonable assurance under CSRD, matching financial audit rigour
30+
Jurisdictions adopting or committing to ISSB S1/S2 by April 2026
Section 01
What ESG reporting is — and how it differs from carbon accounting
ESG reporting is the structured disclosure of an organisation's environmental, social and governance performance, risks and opportunities to investors, regulators and other stakeholders. Carbon accounting sits inside it: the "E" of ESG contains climate (Scope 1, 2, 3, transition plan, physical risk), but also pollution, water, biodiversity, circular economy and resource use. The "S" covers own workforce, value-chain workers, affected communities, consumers. The "G" covers business conduct, governance of sustainability, and political engagement.
In regulatory terms, ESG reporting is the full disclosure document; carbon accounting is a subset of the datapoints that populate it. A CSRD sustainability statement has ~1,100 possible datapoints across 10 topical ESRS; climate (ESRS E1) is only one. Finance teams who scope ESG as "just carbon" discover this expensively in year two.
Section 02
The UK / EU regulatory landscape in 2026
Four regimes now matter in the UK. CSRD / ESRS applies to EU-operating groups and large non-EU groups with EU turnover above €450m — double-materiality sustainability statement, 12 ESRS, ~1,100 datapoints. UK SRS (S1/S2) applies to UK listed and large private companies — ISSB-based investor-focused climate and sustainability, endorsement expected late 2026. SECR is already mandatory for UK-incorporated large companies and quoted companies — Scope 1, 2, partial Scope 3, intensity ratio, energy efficiency. ISSB S1/S2 is voluntary globally and mandatory via local adoption; adopted in 30+ jurisdictions as of April 2026.
The UK government has confirmed UK SRS will not include a CSRD-style double-materiality requirement for private companies and will stay aligned to ISSB. Large UK groups with EU operations therefore run a dual track: ISSB for the UK filing, ESRS for the CSRD filing.
Section 03
Double materiality — the concept that trips up finance teams
CSRD requires double materiality: a topic is material if it is financially material (affects enterprise value) or impact-material (the company's operations materially affect people and planet) — not both. ISSB and UK SRS use financial materiality only. This single difference drives most of the workload gap between CSRD and ISSB.
A double-materiality assessment (DMA) is a structured process: identify impacts, risks and opportunities (IROs) across the value chain, score each for severity/scale/scope/likelihood (impact) and magnitude/likelihood (financial), set thresholds, validate with stakeholders, and document the methodology. Audit of the DMA is mandatory under CSRD; auditors are actively challenging thresholds and evidence. Budget 3–6 months for a first-year DMA and expect to refresh annually.
Section 04
Which framework applies to whom
A practical decision tree for UK finance leaders: UK-listed premium/standard and AIM-50 — TCFD-aligned disclosures already mandatory; UK SRS (ISSB) from FY2027. UK large private company (>£36m turnover, >£18m balance sheet, >250 employees) — SECR today; UK SRS likely from FY2027 once endorsed. Part of an EU group or with >€450m EU turnover — CSRD from FY2024–FY2028 depending on wave. Raising debt or equity in public markets — ISSB S1/S2 is the investor default. Supplying a CSRD-in-scope customer — voluntary CSRD "limited" reporting increasingly required via contract.
Most mid-market UK groups end up with a primary framework (UK SRS or CSRD) and produce the others as extracts from the same underlying data model. A single source of truth is the only scalable approach.
Section 05
Assurance — the step that changes everything
Assurance is what moves ESG reporting from a communications exercise to a finance-team process. CSRD requires limited assurance from FY2024, rising to reasonable assurance by FY2028. UK SRS will require assurance once endorsed, expected limited first. Assurance is delivered under ISAE 3000 (Revised) and ISAE 3410 (GHG-specific), and can be provided by the statutory auditor or an independent third party.
Practically, every number needs a source document, a calculation memo, a control test, and a sign-off. Auditors test emission-factor libraries, organisational boundary, restatements, and the DMA. First-year limited assurance fees for a mid-market UK group typically run £50k–£250k on top of the financial audit.
Section 06
The practical ESG reporting workflow
A defensible workflow mirrors the financial-close cycle. Q1: refresh DMA, lock reporting boundary, update policy manual. Q1–Q3: pull data monthly from source systems (ERP, HRIS, EHS, AP ledger), not annually via surveys. Q3: apply emission factors, social KPIs, governance metrics; run completeness and variance checks. Q4 minus 3 months: produce the sustainability statement in XBRL-tagged ESRS or ISSB format.
Q4 minus 2 months: auditor walks through controls, tests samples, reviews methodology. Year-end + 90 days: published inside the annual report. Running this as a quarterly cadence (soft-close) rather than an annual panic cuts cost by ~40% and is a near-universal recommendation from early CSRD adopters.
Section 07
Common failure modes and how to avoid them
Three first-year failures show up repeatedly. Teams treating ESRS as a checklist — answering all ~1,100 datapoints mechanically and missing the narrative linkages ESRS 2 requires. Start with the DMA; drive datapoints from materiality. Under-investing in data infrastructure — spreadsheet-based collection collapses under assurance. A single ESG data model integrated with the ERP is the lowest total-cost option.
And keeping sustainability and finance separate — the annual report is one document; two teams produce two conflicting numbers. Embed ESG into the finance close with a controller-level owner.
FAQ
Frequently asked questions
If we already do SECR, how much extra work is UK SRS?
Material. SECR covers Scope 1, 2 and selected Scope 3 with an intensity ratio. UK SRS (ISSB S2) adds climate-related risks and opportunities across horizons, scenario analysis, transition-plan disclosures, and financial effects — with assurance. Expect 3–5x the effort in year one, stabilising at 1.5–2x thereafter.
Are we in scope of CSRD as a UK-only group?
Only if you have an EU subsidiary that meets the size thresholds, or you generate >€150m EU turnover via a branch, or >€450m consolidated EU turnover as a non-EU parent (phased to FY2028). A UK-only group with no EU presence is outside CSRD but in scope of UK SRS once endorsed.
Can the same team run financial and ESG reporting?
Yes — and increasingly they do. The emerging model is a sustainability controller sitting inside the finance function, reporting to the Group Financial Controller, with dotted-line accountability to the Chief Sustainability Officer.
What happens if we get the disclosure wrong?
Under CSRD, directors are liable for the sustainability statement as part of the management report, with penalties mirroring financial misstatement — civil, and in some Member States criminal. The FRC has indicated UK SRS will follow the same liability regime.
Do we need separate software, or can our ERP do it?
ERPs hold the raw data but do not apply emission factors, map to ESRS datapoints, tag XBRL, or generate assurance evidence. The efficient pattern is a specialist layer on top of the ERP — a carbon/ESG sub-ledger — that reads from finance systems and writes audit-ready disclosures.
How do we report when we don't have all the data?
ESRS and ISSB both permit phased data collection with disclosed plans to improve quality. State the data gap, disclose the methodology used (e.g. spend-based proxy), quantify the uncertainty, and set a roadmap. Auditors accept imperfect data; they do not accept undisclosed imperfection.
Keywords
ESG reporting guide · CSRD UK · UK SRS · ISSB S1 S2 · ESRS double materiality · SECR reporting · sustainability reporting software · ESG assurance · finance-led ESG · sustainability statement annual report