Sustainability Assurance and the Future of the Profession

Introduction

Sustainability information has moved from the margins of corporate reporting to the centre of investment, lending, regulation and public accountability. Climate change, biodiversity loss, labour conditions, human rights, resource scarcity and organisational resilience can materially affect enterprise value and wider social welfare. Consequently, users increasingly expect information about environmental, social and governance (ESG) matters to be reliable, comparable and connected to financial reporting.

Sustainability assurance is the professional service through which an independent practitioner evaluates sustainability information against suitable criteria and expresses a conclusion intended to increase users’ confidence. It is not simply an extension of the traditional financial statement audit. Sustainability reporting involves broader subject matter, longer time horizons, complex estimates, extensive value-chain data, evolving criteria and, frequently, information that is partly qualitative.

For the Chartered Certified Accountant, the strategic issue is not whether sustainability assurance will become relevant, but how the profession will preserve trust while developing appropriate competence, methodology, independence and technology. This chapter examines the foundations of sustainability assurance, climate and integrated reporting, emerging standards, greenwashing risks, non-financial metrics, regulatory change and the transformation of audit delivery.

Learning objectives

After studying this chapter, the reader should be able to:

1. Explain the purpose, scope and distinctive characteristics of sustainability assurance.
2. Distinguish limited assurance from reasonable assurance and evaluate the effect on engagement design.
3. Apply the logic of suitable criteria, materiality, evidence and reporting to sustainability information.
4. Assess climate-related, integrated and value-chain disclosures, including estimates and scenario analysis.
5. Identify greenwashing risks and evaluate the reliability of non-financial metrics.
6. Explain the strategic implications of emerging sustainability-assurance standards and regulation.
7. Formulate responses involving governance, talent, data architecture, artificial intelligence and professional ethics.

1. The changing information environment

Traditional financial reporting focuses primarily on past transactions and events measured in monetary terms. Sustainability reporting adds information about dependencies, impacts, risks, opportunities and future-oriented strategies. A company may report greenhouse-gas emissions, water consumption, employee turnover, safety incidents, board diversity, supply-chain audits and transition targets. These measures can influence cash flows, access to capital, regulatory exposure, reputation and licence to operate.

Three characteristics make sustainability information particularly challenging:

• Multiplicity of users. Investors, employees, regulators, customers, communities and civil-society organisations may have different information needs.
• Extended reporting boundaries. Significant impacts may arise in suppliers, distributors, financed assets or product use rather than within the reporting entity’s premises.
• Measurement uncertainty. Data may be estimated, modelled or based on incomplete systems. Future targets depend on assumptions about technology, policy, markets and behaviour.

The concept of double materiality addresses two perspectives. Financial materiality asks whether a sustainability matter could reasonably be expected to influence decisions of primary users of general-purpose financial reports. Impact materiality asks whether the undertaking causes, contributes to or is directly linked to significant effects on people or the environment. Some reporting regimes emphasise one perspective, while others require both. An assurance practitioner must therefore identify the applicable reporting framework and avoid importing an inappropriate materiality concept.

Sustainability assurance also has a public-interest dimension. A misleading emissions claim can distort investment decisions, weaken climate policy and delay corrective action. Assurance therefore concerns not merely numerical accuracy but faithful representation, completeness, neutrality, consistency and transparent communication of uncertainty.

2. Fundamental architecture of an assurance engagement

An assurance engagement contains five essential elements:

1. Three-party relationship: the responsible party prepares the subject matter; the practitioner evaluates it; intended users rely on the conclusion.
2. Subject matter: for example, reported Scope 1 and Scope 2 emissions, a transition plan, safety performance or a sustainability report.
3. Suitable criteria: the basis against which the subject matter is evaluated, such as a sustainability reporting standard, regulatory requirement, internally defined methodology or recognised measurement protocol.
4. Sufficient appropriate evidence: evidence must be enough in quantity and relevant and reliable in quality.
5. Written assurance report: the practitioner communicates a conclusion in a form appropriate to the level of assurance.

Criteria are suitable when they are relevant, complete, reliable, neutral and understandable. A company’s internally designed KPI definition may be acceptable only if it is sufficiently precise and transparently disclosed. Vague criteria such as “responsible sourcing” are unlikely to support a consistent assurance conclusion unless operationally defined through measurable requirements.

Limited and reasonable assurance

The two principal levels of assurance differ in the nature, timing and extent of procedures and in the form of conclusion.

The distinction is not equivalent to “low quality” versus “high quality.” Limited assurance still requires professional competence, independence, scepticism, appropriate evidence and a defensible conclusion. However, users must understand that limited assurance does not provide the same degree of confidence as reasonable assurance.

Engagement risk can be expressed conceptually as the risk that the practitioner expresses an inappropriate conclusion when the subject matter is materially misstated. Unlike a mechanical equation, this expression is a planning model rather than a precise probability calculation. The practitioner reduces risk through appropriate acceptance decisions, risk assessment, procedure design and evaluation of evidence.

3. Materiality and risk in sustainability assurance

Materiality is applied to both quantitative and qualitative matters. A small numerical error may be material if it changes compliance with a regulatory threshold, causes a target to appear achieved, conceals a serious human-rights incident or affects executive remuneration. Conversely, a large number may be less significant if clearly corrected and transparently explained.

The practitioner should consider:

• the reporting framework and legal requirements;
• the information needs of intended users;
• aggregation and disaggregation of data;
• the likelihood and magnitude of misstatement;
• the sensitivity of estimates and scenarios;
• fraud, bias and incentives associated with targets;
• omissions, selective presentation and changes in methodology.

A useful analytical model for prioritising work is:

Here, Impact represents the magnitude or severity of a possible misstatement or sustainability effect; Likelihood represents the probability of occurrence; and Decision relevance represents the extent to which the matter could influence users. This is a risk-ranking heuristic, not a substitute for professional judgement or a mandatory assurance formula. The factors must be defined consistently, and qualitative override is necessary where a severe human-rights or environmental matter has low numerical frequency but high consequence.

Sustainability materiality assessments require more than management interviews. A robust process combines stakeholder engagement, value-chain analysis, regulatory scanning, internal data, external scientific evidence and board oversight. The practitioner evaluates whether the process is reasonable and consistently applied, rather than replacing management’s responsibility to determine and disclose material matters.

4. Climate-related and integrated reporting

Climate reporting commonly addresses governance, strategy, risk management, metrics and targets. A credible assurance approach must examine the links among these elements. For example, a net-zero target is not meaningful merely because it is numerically ambitious. The practitioner should assess its boundary, base year, interim milestones, planned actions, capital allocation, use of offsets, treatment of acquisitions and disclosure of dependencies.

Greenhouse-gas emissions

The commonly used emissions categories are:

• Scope 1: direct emissions from sources owned or controlled by the entity;
• Scope 2: indirect emissions from purchased electricity, steam, heating or cooling;
• Scope 3: other indirect value-chain emissions, such as purchased goods, transport, business travel, use of sold products and investments.

A basic activity-data calculation is:

The index i identifies each source or activity. Activity data may be measured in litres of fuel, kilowatt-hours of electricity, kilometres travelled or tonnes of material. An emission factor converts the activity unit into a mass of greenhouse gas, commonly expressed as carbon-dioxide equivalent (CO₂e). The equation assumes that the activity boundary, emission factors, global-warming potentials, time period and unit conversions are defined consistently. It is not valid to combine factors based on incompatible gases, locations or reporting periods without reconciliation.

For example, suppose a facility consumes 100,000 kWh of electricity and the applicable factor is 0.40 kg CO₂e per kWh. Emissions equal 40,000 kg CO₂e, or 40 tonnes CO₂e. Assurance procedures would not end with recalculation. They would also examine meter records, completeness of sites, factor selection, renewable-energy certificates, cut-off and changes from the prior year.

Location-based and market-based Scope 2 calculations may produce different results because they use different information about electricity consumption and contractual instruments. The practitioner should verify that the selected method is permitted, consistently applied and clearly disclosed.

Scenario analysis and forward-looking information

Climate scenarios are not forecasts. They are structured assumptions used to explore possible outcomes under different policy, technological and physical conditions. Assurance over scenario analysis therefore focuses on the suitability and consistent application of assumptions, the integrity of models, governance over judgements and clear communication of uncertainty. A practitioner does not guarantee that a scenario outcome will occur.

Forward-looking information raises special risks:

• management may present aspirations as committed plans;
• assumptions may be inconsistent with approved budgets or capital expenditure;
• transition plans may omit difficult business units or supply-chain effects;
• offsets may be treated as substitutes for emissions reduction without justification;
• sensitivity to carbon prices, demand and regulation may be understated.

Integrated reporting connects strategy, governance, performance and prospects with the organisation’s use of multiple capitals, such as financial, manufactured, intellectual, human, social and natural capital. Assurance should test whether the narrative is internally consistent with financial statements, risk reports, board papers, operational data and public claims. It should also identify selective connectivity—for example, a report that describes climate opportunity but omits stranded-asset risk.

5. Non-financial metrics and evidence

Non-financial metrics vary in definition, scope and data quality. Common indicators include injury frequency, employee engagement, gender representation, supplier-audit coverage, water withdrawal and waste diversion. A metric can be mathematically correct yet conceptually misleading if its denominator, boundary or exclusions are inappropriate.

For a rate, the general structure is:

The numerator and denominator must relate to the same population and period. A lost-time injury rate, for instance, may use injuries per 200,000 hours worked. Comparability requires consistent treatment of contractors, acquisitions, remote workers, severity classifications and restatements. A falling rate may reflect outsourcing of hazardous work rather than improved safety.

Evidence sources may include:

• invoices, utility records and meter data;
• payroll and human-resources systems;
• incident registers and medical or safety records;
• supplier confirmations and audit reports;
• satellite, sensor or geospatial data;
• engineering models and laboratory analyses;
• board minutes, policies and governance documentation;
• management representations, used as evidence but rarely sufficient alone.

The reliability hierarchy is context-dependent. A directly observed calibrated meter may be stronger than an unsupported estimate, but an external dataset can be incomplete or based on assumptions. The practitioner evaluates relevance, accuracy, completeness, timeliness, provenance and susceptibility to manipulation.

6. Greenwashing and assurance responses

Greenwashing is the creation of a misleading impression about an entity’s environmental or broader sustainability performance. It may be intentional fraud, optimistic communication, weak controls or an unintended consequence of ambiguous terminology. Examples include:

• highlighting a small sustainable product line while concealing major adverse impacts;
• claiming “net zero” without a credible reduction pathway;
• presenting intensity improvements while absolute emissions rise materially;
• using offsets without explaining quality, permanence and additionality;
• describing a product as recyclable where collection infrastructure is unavailable;
• reporting supplier-audit percentages without disclosing unresolved findings.

Greenwashing risk should be assessed at assertion level. Assertions include existence, occurrence, completeness, accuracy, classification, cut-off, consistency, presentation and neutrality. The practitioner should challenge selective evidence and compare published claims with operational reality, regulatory filings, customer complaints, litigation, whistleblowing reports and environmental incidents.

Management incentives are important. Sustainability-linked remuneration, financing covenants and market positioning may create pressure to meet targets. The engagement team should consider management bias, override of controls, data exclusions and retrospective changes to methodology. Specialists may be required in climate science, engineering, ecology, human rights, data analytics or supply-chain auditing.

7. Standards, regulation and professional judgement

The sustainability-assurance environment is developing through international assurance standards, jurisdictional reporting rules, securities regulation and sector-specific requirements. Standards increasingly address general principles for assurance, ethical requirements, quality management and sustainability-specific engagement issues. The precise applicable requirements depend on jurisdiction, reporting period, subject matter and engagement terms; professionals must consult current authoritative pronouncements rather than rely on superseded summaries.

A sound implementation sequence is:

1. Identify the reporting regime and applicable assurance standard.
2. Confirm the responsible party, intended users, reporting boundary and subject matter.
3. Evaluate whether the criteria are suitable and available to users.
4. Determine independence, competence, specialists and quality-control requirements.
5. Perform acceptance and continuance procedures.
6. Understand the entity, value chain, systems, controls and sustainability risks.
7. Set materiality and design procedures for the selected assurance level.
8. Test data, estimates, narrative claims, controls and connectivity.
9. Evaluate misstatements, omissions, inconsistencies and scope limitations.
10. Obtain written representations, complete quality review and issue a clear report.

Regulatory convergence may improve comparability, but it can also create overlapping requirements. A multinational group may prepare information under a global standard, a regional directive and a stock-exchange rule. Mapping requirements is essential. The practitioner should document which criteria govern each disclosure and explain differences rather than silently combining incompatible definitions.

8. Technology-enabled assurance

Sustainability assurance is highly suitable for technology-enabled procedures because information is often large, distributed and continuously generated. Data analytics can identify unusual emission intensities, duplicate supplier records, abrupt changes in energy use, missing locations and inconsistencies between operational and narrative data.

A technology-enabled workflow may include:

Figure: Technology-enabled sustainability assurance workflow.

Artificial intelligence can classify documents, extract data from invoices, compare policies with reported practices and detect anomalies. However, AI output is not automatically evidence. Risks include hallucination, biased training data, opaque models, privacy breaches, cyberattack and automation bias. The practitioner remains responsible for understanding the tool, validating its output, preserving audit trails and applying professional judgement. Human review is especially important for ambiguous qualitative claims and high-impact decisions.

Data governance should address ownership, lineage, access rights, version control, retention, reconciliation and change management. A dashboard can improve visibility but cannot repair deficient definitions or incomplete source systems. Technology amplifies both reliable and unreliable processes.

9. Skills, ethics and the future professional

The future sustainability-assurance professional is neither solely an accountant nor solely a climate scientist. Engagement teams will be multidisciplinary, combining accounting, assurance, environmental science, engineering, data science, human rights, law and sector expertise. The accountant’s distinctive contribution remains structured evidence evaluation, control assessment, materiality, reporting judgement, independence and professional ethics.

Competence must be maintained through continuing professional development. Firms should establish competency matrices identifying when specialists are mandatory, how their work is directed and reviewed, and how disagreements are resolved. Ethical threats include self-review, advocacy, familiarity, intimidation and conflicts arising from consulting services. A firm that designs a client’s sustainability metrics and then assures them may face a self-review threat even where financial independence rules appear satisfied.

Professional scepticism requires an alert mind rather than permanent distrust. It involves asking whether evidence is complete, whether incentives exist to bias the metric, whether the boundary is reasonable and whether the story is consistent with observable facts. Professional judgement must be documented, especially where evidence is uncertain or criteria are evolving.

10. Illustrative case: Meridian Foods plc

Background

Meridian Foods plc, a fictional multinational food manufacturer, publishes a sustainability report claiming a 30% reduction in emissions from its 2020 base year and “responsibly sourced” agricultural inputs. The report is subject to limited assurance. Meridian’s executive bonus depends partly on achievement of the emissions target.

Problem

The assurance team identifies four issues:

1. The emissions reduction excludes a recently acquired factory.
2. Electricity consumption is supported by invoices for only 85% of sites; the remainder is estimated using prior-year data.
3. Scope 3 agricultural emissions are calculated using supplier-average factors, but major suppliers changed production methods.
4. The sourcing statement counts suppliers that completed a questionnaire, although several had unresolved forced-labour allegations.

Analysis

The acquisition exclusion may be inconsistent with the reporting boundary and creates a favourable presentation. The estimates may be reasonable if supported by reliable assumptions, but the missing 15% requires completeness testing and transparent disclosure. Supplier-average factors may be acceptable as an interim method, yet the methodology must reflect material changes and uncertainty. The sourcing claim is potentially misleading because questionnaire completion is not equivalent to responsible performance.

The bonus arrangement increases the risk of management bias. The team should expand inquiry and substantive procedures, inspect acquisition documents, reconcile site lists to the fixed-asset register, test electricity estimates, compare supplier data with procurement records and investigate allegations through independent evidence. A human-rights specialist and emissions specialist may be required.

Approach and outcome

Meridian agrees to include the acquired factory, disclose the estimation method and uncertainty, revise the agricultural calculation for significant suppliers and replace “responsibly sourced” with a qualified description of coverage and unresolved findings. Because the original information was materially misleading, the practitioner evaluates whether the report can be corrected before issuing the assurance conclusion. If management refuses correction or evidence remains unavailable, the report may require a modified conclusion or a scope-related qualification, depending on the applicable standard.

Learning points

The case illustrates that sustainability assurance is not a box-ticking exercise. Boundary decisions, incentive structures, qualitative claims, value-chain evidence and narrative neutrality are as important as recalculation. Limited assurance still requires scepticism and escalation when risk indicators appear.

11. Strategic responses for firms and organisations

Firms should respond to regulatory and market change through a deliberate strategy:

• develop a sustainability-assurance methodology aligned with current authoritative standards;
• invest in training and multidisciplinary talent;
• create robust acceptance, independence and quality-management procedures;
• build data-analytics capabilities without abandoning human judgement;
• develop sector-specific libraries for emissions, workforce and supply-chain metrics;
• establish partnerships with environmental and social specialists;
• monitor regulatory developments and map overlapping reporting obligations;
• communicate clearly about assurance scope, level and limitations;
• use post-engagement reviews and root-cause analysis to improve quality.

Reporting entities should strengthen governance by assigning board responsibility, linking sustainability data to internal control, documenting estimates, maintaining a controlled data dictionary and reconciling sustainability information with financial and operational systems. Audit committees should challenge management’s materiality process, target assumptions, scenario selection and use of external assurance.

Investors and other users should read the assurance report carefully. They should distinguish assurance over selected indicators from assurance over the whole report, understand whether the engagement is limited or reasonable, and consider qualifications, emphasis, exclusions and inherent uncertainty. Assurance increases confidence; it does not eliminate business risk or guarantee future performance.

Challenges and limitations

Several limitations remain. Reporting criteria may be incomplete or change rapidly. Scope 3 information can depend on supplier estimates and industry averages. Social outcomes may be difficult to quantify without oversimplification. Assurance cannot make an inherently uncertain forecast certain. Cost and specialist scarcity may limit reasonable-assurance coverage, especially for smaller entities. Multiple standards may produce compliance complexity without genuine comparability.

There is also a risk of assurance commoditisation. If users focus only on whether a report carries an assurance label, they may ignore scope, criteria and limitations. Conversely, excessive caution may produce reports so qualified that they become uninformative. The profession must balance clarity, credibility and proportionality.

Chapter Summary

Sustainability assurance increases confidence in information about environmental, social and governance matters, but it requires methods adapted to broad boundaries, uncertain estimates, qualitative claims and future-oriented strategies. The engagement rests on a responsible party, practitioner, intended users, subject matter, suitable criteria, evidence and a written conclusion.

Limited assurance and reasonable assurance differ in evidence, procedures and conclusion, although both require independence, competence and professional scepticism. Materiality includes quantitative and qualitative considerations, and double materiality may require attention to both financial effects and organisational impacts. Climate assurance involves emissions boundaries, activity data, emission factors, targets, scenarios and transition plans. Non-financial metrics require consistent definitions, reliable denominators, complete populations and transparent assumptions.

Greenwashing is addressed through assertion-level risk assessment, challenge of selective claims, value-chain testing and comparison with external evidence. Emerging regulation requires careful mapping of criteria and current standards. Technology can improve coverage and anomaly detection, but AI output must be validated and governed. The future profession will be multidisciplinary, data-enabled and ethically demanding. Strategic success depends on talent, quality management, independence, sound data architecture and clear communication of assurance limitations.

Key Terms

Sustainability assurance: Independent evaluation of sustainability information against suitable criteria.

Limited assurance: An assurance level providing less confidence than reasonable assurance through less extensive procedures.

Reasonable assurance: An assurance level involving extensive procedures designed to reduce engagement risk to a sufficiently low level.

Suitable criteria: Relevant, complete, reliable, neutral and understandable benchmarks for evaluating subject matter.

Double materiality: Assessment of both financial materiality and the organisation’s significant impacts on people and the environment.

Greenwashing: Misleading presentation of environmental or sustainability performance.

Scope 1 emissions: Direct greenhouse-gas emissions from owned or controlled sources.

Scope 2 emissions: Indirect emissions from purchased energy.

Scope 3 emissions: Other indirect value-chain emissions.

Carbon dioxide equivalent: A common unit expressing the global-warming effect of different greenhouse gases.

Activity data: Quantified information about an activity generating emissions or another sustainability outcome.

Emission factor: A factor converting activity data into estimated emissions.

Integrated reporting: Reporting that connects strategy, governance, performance and prospects across relevant capitals.

Scenario analysis: Exploration of possible outcomes under structured assumptions, not a prediction.

Value chain: Activities, relationships and entities connected with an organisation’s inputs, operations, outputs and impacts.

Non-financial metric: A measure not expressed primarily in monetary terms, such as injury rates or water use.

Professional scepticism: An alert and questioning mindset concerning evidence and possible bias.

Data lineage: The traceable history of data from source through processing to reported output.

Reasonable conclusion: A positive-form assurance conclusion supported by extensive evidence.

Review Questions

Short Answer Questions

1. What are the five essential elements of an assurance engagement?
2. Distinguish limited assurance from reasonable assurance.
3. Define double materiality.
4. What is the difference between Scope 1 and Scope 3 emissions?
5. Why is a suitable-criteria assessment necessary?

Long Answer Questions

1. Explain how materiality and professional scepticism should be applied to sustainability assurance.
2. Discuss the assurance implications of climate targets and scenario analysis.
3. Evaluate the principal causes and indicators of greenwashing.
4. Explain how technology and artificial intelligence may improve and threaten sustainability assurance.
5. Assess the skills, ethical safeguards and quality-management systems required for the future profession.

Analytical / Application Questions

1. A company reports a 20% reduction in emissions after outsourcing a high-emission process. Analyse the assurance risks and procedures required.
2. Design an assurance approach for a supplier-responsible-sourcing KPI based on questionnaires, audits and unresolved allegations.
3. An entity’s sustainability report is consistent with its narrative strategy but conflicts with energy invoices and financial capital expenditure plans. Evaluate the implications for evidence, management bias and the assurance conclusion.

Multiple Choice Questions with Answers

Question 1

Which element provides the benchmark against which sustainability subject matter is evaluated?

A. Intended users

B. Suitable criteria

C. Management representation

D. Engagement risk

Correct Answer: B. Suitable criteria

Question 2

Which conclusion is normally associated with limited assurance?

A. “The statements are guaranteed to be correct”

B. “In our opinion, the information is fairly stated”

C. “Nothing has come to our attention that causes us to believe…”

D. “The information is immaterial”

Correct Answer: C. “Nothing has come to our attention that causes us to believe…”

Question 3

Which category includes emissions from purchased electricity?

A. Scope 1

B. Scope 2

C. Scope 3

D. Avoided emissions

Correct Answer: B. Scope 2

Question 4

Using 100,000 kWh and an emission factor of 0.40 kg CO₂e per kWh produces emissions of:

A. 4 tonnes CO₂e

B. 40 tonnes CO₂e

C. 400 tonnes CO₂e

D. 4,000 tonnes CO₂e

Correct Answer: B. 40 tonnes CO₂e

Question 5

Which statement best describes double materiality?

A. It considers only investor needs

B. It considers only environmental impacts

C. It considers financial effects and significant impacts on people and the environment

D. It requires two independent auditors

Correct Answer: C. It considers financial effects and significant impacts on people and the environment

Question 6

Which is a likely greenwashing indicator?

A. Transparent disclosure of estimation uncertainty

B. Reconciliation of sustainability data with operational records

C. Claiming responsible sourcing solely because suppliers completed questionnaires

D. Reporting both absolute and intensity emissions

Correct Answer: C. Claiming responsible sourcing solely because suppliers completed questionnaires

Question 7

Why are scenario analyses not treated as forecasts?

A. They contain no assumptions

B. They explore possible outcomes under structured assumptions

C. They are always based on historical transactions

D. They cannot involve climate information

Correct Answer: B. They explore possible outcomes under structured assumptions

Question 8

What is a key risk when using artificial intelligence in assurance?

A. It eliminates the need for evidence

B. It guarantees unbiased conclusions

C. It may produce opaque or erroneous outputs requiring human validation

D. It prevents data analysis

Correct Answer: C. It may produce opaque or erroneous outputs requiring human validation

Question 9

Which factor is essential when calculating a non-financial rate?

A. Using unrelated numerator and denominator populations

B. Consistent definitions and comparable numerator and denominator

C. Ignoring the reporting period

D. Replacing the metric with a narrative claim

Correct Answer: B. Consistent definitions and comparable numerator and denominator

Question 10

Which situation most directly creates a self-review threat?

A. The practitioner reads a public sustainability report

B. The practitioner independently verifies a utility invoice

C. The firm designs the client’s sustainability metrics and then assures them

D. The audit committee reviews the assurance plan

Correct Answer: C. The firm designs the client’s sustainability metrics and then assures them