CSR Disclosure, Standards and Assurance

Introduction

Corporate social responsibility (CSR) disclosure is the organized communication of an organization’s economic, environmental, social and governance impacts, risks, opportunities, policies, performance and future commitments. It is more than publishing attractive sustainability stories. A credible disclosure system connects strategy, operations, evidence, internal controls, accountability and external reporting obligations.

The contemporary reporting environment is shaped by several developments. Investors increasingly require decision-useful information about climate and other sustainability-related risks. Employees, communities, consumers and civil-society organizations seek evidence of responsible conduct and actual impacts. Regulators are introducing mandatory sustainability-reporting requirements, while assurance providers are being asked to test non-financial information with increasing rigour. Consequently, CSR professionals must understand not only what to report, but also why a particular framework is used, how data are generated, and how reported claims can be verified.

This chapter explains the principal reporting frameworks and standards relevant to CSR practice: the Global Reporting Initiative (GRI) Standards, the International Sustainability Standards Board (ISSB) Standards, the European Sustainability Reporting Standards (ESRS), the United Nations Sustainable Development Goals (SDGs), and ISO 26000. It then examines materiality, data governance, audit trails, assurance and jurisdiction-specific obligations.

Learning Objectives

By the end of this chapter, learners should be able to:

1. Distinguish between major CSR and sustainability-reporting frameworks.
2. Explain financial materiality, impact materiality and double materiality.
3. Select appropriate disclosures for different stakeholder and regulatory purposes.
4. Design a basic sustainability-data control environment and audit trail.
5. Explain limited and reasonable assurance and the role of assurance providers.
6. Identify important governance and ethical risks in CSR reporting.
7. Apply reporting principles to a practical organizational case.

1. The Purpose and Architecture of CSR Disclosure

A disclosure serves several related purposes:

• Accountability: explaining how an organization affects people, society and the environment.
• Decision usefulness: helping investors, lenders, customers and managers assess risks and opportunities.
• Stewardship: demonstrating whether management has used organizational resources responsibly.
• Compliance: meeting statutory, stock-exchange or sector-specific requirements.
• Dialogue: enabling stakeholders to evaluate commitments and engage with the organization.
• Improvement: converting performance information into management learning and action.

A useful way to understand reporting is as a chain:

Activity → Impact or risk → Metric → Evidence → Control → Disclosure → Assurance → Decision

For example, a manufacturing company may use large quantities of electricity. Electricity consumption is an activity or input; associated greenhouse-gas emissions are an environmental impact and potentially a transition risk; emissions are measured through energy records and emission factors; the calculation is reviewed through controls; results are disclosed; an assurance practitioner tests selected evidence; and management uses the information to prioritize efficiency investments.

A report may be published as a standalone sustainability report, an annual-report section, a regulatory filing, a website disclosure, or a combination of these. The medium is less important than the quality and governance of the underlying information.

Important reporting principles

Credible disclosure generally requires:

• Accuracy: information is calculated correctly and supported by evidence.
• Balance: positive and negative performance are presented fairly.
• Comparability: methods and boundaries are sufficiently consistent across periods or clearly explained when changed.
• Completeness: significant topics, entities, impacts and time horizons are not selectively omitted.
• Timeliness: information is available when users need it.
• Verifiability: a competent reviewer can trace claims to evidence.
• Clarity: technical information is understandable to its intended users.
• Context: performance is interpreted against targets, baselines, legal requirements or ecological and social limits.

These principles create tensions. More information does not necessarily improve clarity, and comparability may be reduced when a company changes a flawed measurement method. Professional judgment is therefore unavoidable, but it must be documented and consistently applied.

2. Materiality: The Foundation of Reporting Decisions

Materiality determines which topics deserve disclosure and how much attention they receive. It is not simply a list of popular environmental and social subjects.

Financial materiality

Financial materiality asks whether sustainability-related information could reasonably be expected to influence the decisions of primary users of general-purpose financial reports. Examples include:

• flood exposure affecting property values;
• carbon regulation affecting production costs;
• labour shortages affecting operational continuity;
• a data-privacy failure causing litigation and customer loss.

ISSB reporting is primarily designed around this investor-oriented perspective.

Impact materiality

Impact materiality asks whether the organization has actual or potential, positive or negative, impacts on people or the environment. Relevant considerations include scale, scope, irremediable character and likelihood. A topic may be impact-material even when its immediate financial effect is uncertain. For example, a company’s supply-chain practices may significantly affect migrant workers without creating an obvious short-term accounting liability.

Double materiality

Double materiality combines financial materiality and impact materiality. A topic is relevant if it is material from either perspective or both. ESRS uses this approach. It requires an organization to examine both:

1. how sustainability matters affect the organization; and
2. how the organization affects people and the environment.

A double-materiality assessment should not be a superficial stakeholder survey. It should consider the value chain, affected stakeholders, scientific evidence, legal obligations, sector characteristics, geographic exposure, severity and likelihood. Decisions should be documented, approved and periodically revisited.

Materiality is not a permission to hide

A company should not describe a serious issue as “immaterial” merely because disclosure could harm its reputation. Nor should materiality be determined solely by senior management preference. Governance bodies should challenge the assessment, and the methodology should be sufficiently transparent for users to understand its boundaries.

3. Major Frameworks and Standards

3.1 Global Reporting Initiative Standards

The GRI Standards are designed primarily to report an organization’s impacts on the economy, environment and people. The system consists broadly of:

• Universal Standards, which establish general principles, organizational context, governance and material-topic processes;
• Sector Standards, which identify likely material topics for particular sectors; and
• Topic Standards, which provide disclosures and guidance for subjects such as emissions, waste, occupational health and safety, and tax.

GRI is particularly useful for stakeholder accountability and impact reporting. It encourages organizations to explain their reporting practices, material topics, topic boundaries and management of impacts. A GRI-based report should avoid presenting isolated indicators without describing how the issue is governed and managed.

GRI does not mean that every organization must report every indicator. The organization must apply the Standards’ requirements and explain omissions or non-applicability appropriately. A claim of “in accordance with” has a specific meaning and should not be used casually.

3.2 ISSB Standards

The ISSB has issued IFRS S1, General Requirements for Disclosure of Sustainability-related Financial Information, and IFRS S2, Climate-related Disclosures. Their purpose is to provide decision-useful information to investors, lenders and other creditors about sustainability-related risks and opportunities that could affect cash flows, access to finance or cost of capital over the short, medium or long term.

The standards are organized around four familiar areas:

• Governance: processes, controls and oversight.
• Strategy: effects on business model, value chain, strategy and financial position.
• Risk management: identification, assessment, prioritization and monitoring.
• Metrics and targets: measures used to manage relevant risks and opportunities.

ISSB standards build on concepts associated with the TCFD recommendations and are intended to support a global baseline. IFRS S2 includes climate-related disclosures concerning physical risks, transition risks, opportunities, greenhouse-gas emissions and climate-related targets. Application remains subject to adoption or incorporation by relevant jurisdictions.

ISSB reporting is not a replacement for broader impact reporting. A company can have significant human-rights impacts that are not yet financially material, while those impacts may still warrant disclosure under GRI or ESRS.

3.3 European Sustainability Reporting Standards

ESRS supports sustainability reporting under the European Union’s Corporate Sustainability Reporting Directive (CSRD), subject to the scope, timing, size thresholds and other requirements applicable to the reporting entity. ESRS uses double materiality and includes cross-cutting requirements as well as topical standards covering environmental, social and governance matters.

Important ESRS characteristics include:

• reporting on policies, actions, targets and metrics;
• consideration of the value chain;
• attention to impacts, risks and opportunities;
• detailed disclosure requirements and data points;
• integration with governance and management processes;
• a phased approach to assurance and regulatory implementation.

Organizations should not assume that a non-EU parent is automatically outside the system. Extra-territorial effects may arise through subsidiaries, listing status, EU operations or groups meeting specified conditions. Legal advice is essential because scope and reporting dates depend on the entity’s circumstances and evolving legislation.

3.4 Sustainable Development Goals

The 17 SDGs provide a global policy vocabulary for sustainable development. They are not, by themselves, an accounting or assurance standard. Organizations may use them to connect activities and impacts with public goals, but credible alignment requires more than placing SDG icons in a report.

A sound SDG approach:

1. identifies the organization’s significant positive and negative impacts;
2. maps them to relevant targets and indicators;
3. explains the organization’s contribution and limitations;
4. uses measurable baselines, targets and time frames; and
5. avoids claiming that ordinary business activity alone “achieves” an SDG.

For example, a water-intensive business may contribute to SDG 6, Clean Water and Sanitation, by reducing withdrawals, improving wastewater quality and protecting local watersheds. It should also disclose adverse effects, geographic context and the basis for its claims.

3.5 ISO 26000

ISO 26000 provides guidance on social responsibility. It addresses organizational governance, human rights, labour practices, the environment, fair operating practices, consumer issues, and community involvement and development. It emphasizes principles such as accountability, transparency, ethical behaviour, respect for stakeholder interests, respect for the rule of law, respect for international norms of behaviour and respect for human rights.

ISO 26000 is guidance, not a certifiable management-system standard. An organization should therefore avoid claiming “ISO 26000 certification.” It can use ISO 26000 to structure policies, stakeholder engagement, due diligence and CSR strategy, while using GRI, ISSB or ESRS for formal reporting where appropriate.

Framework selection

These instruments are complementary, not interchangeable. A mature reporting architecture may use more than one, provided definitions, boundaries and metrics are reconciled.

4. Building a Credible Disclosure Process

A practical reporting cycle consists of the following stages.

Stage 1: Establish governance and scope

The board or an appropriate board committee should oversee reporting, while management assigns operational responsibility. The organization should define reporting entities, sites, products, activities, value-chain boundaries, reporting period and consolidation method. It should identify applicable laws, stock-exchange rules, customer requirements and lender covenants.

Stage 2: Conduct materiality and stakeholder assessment

Stakeholder engagement should include affected workers, communities, customers, suppliers, investors, regulators and relevant experts. Engagement methods may include interviews, surveys, grievance analysis, workshops, site visits and impact assessments. Results should be combined with risk data, legal requirements and sector analysis rather than replacing them.

Stage 3: Define indicators and methodologies

Each indicator needs a clear definition. A data dictionary should specify:

• indicator name and purpose;
• unit of measurement;
• organizational and operational boundary;
• source system and responsible owner;
• calculation method;
• emission factor or conversion factor, where applicable;
• estimation method;
• reporting frequency;
• quality checks; and
• required evidence.

For greenhouse-gas reporting, organizations should distinguish Scope 1, Scope 2 and relevant Scope 3 emissions and disclose the methodological basis. Emission factors should be appropriate to the geography, energy source, period and reporting method. If estimates are used, their basis and uncertainty should be explained.

Stage 4: Collect, validate and consolidate data

Data may come from meters, invoices, payroll systems, procurement records, incident registers, human-resources systems, supplier questionnaires and community-impact studies. A responsible owner should review completeness, unusual movements, duplicate entries, unit conversions and period cut-off.

Stage 5: Draft with balanced context

Narrative claims should be linked to metrics and evidence. A target should state its baseline, target year, scope, progress and responsible body. Claims such as “zero impact,” “fully sustainable” or “ethical supply chain” require exceptional evidence and are often misleading because impacts are rarely eliminated entirely.

Stage 6: Management review and approval

Senior management should review judgments, estimates, omissions, restatements, target performance and significant negative events. The board or designated committee should approve the final disclosure where governance arrangements require it.

Stage 7: Assurance and publication

Assurance procedures should be planned early, not after the report is written. Final reports should preserve version control, approval records and links to evidence.

5. Data Controls and Audit Trails

A sustainability-data control environment resembles a financial-reporting control environment, although data sources and measurement uncertainty may differ.

Preventive controls

Preventive controls reduce the likelihood of error before data are recorded. Examples include standardized templates, restricted system access, approved emission factors, mandatory units, segregation of duties and documented definitions.

Detective controls

Detective controls identify errors after recording. Examples include reconciliations to utility invoices, year-on-year variance analysis, duplicate checks, exception reports, supervisor review and comparisons with production volumes.

Corrective controls

Corrective controls address identified errors. They include documented adjustments, root-cause analysis, retraining, system correction and restatement procedures.

The audit trail

An audit trail should allow an independent reviewer to move from a published claim back to its source evidence. A practical chain is:

Published figure → calculation workbook or system output → source record → responsible preparer → reviewer approval → methodology and version history

For example, a reported electricity-consumption figure should be traceable to site-level meter readings or invoices, the period covered, unit conversions, missing-data estimates, consolidation calculations and review sign-offs.

Control matrix

A useful control is not merely a policy statement. It has an owner, frequency, evidence, escalation route and defined response to failure.

6. Assurance of Sustainability Information

Assurance is an independent evaluation designed to increase users’ confidence in information. It is distinct from management review, internal audit and certification, although these functions may interact.

Limited assurance

Limited assurance provides a lower level of assurance than reasonable assurance. Procedures are generally more inquiry- and analysis-oriented, with less extensive testing. The practitioner expresses a conclusion in a negative form, such as stating that nothing has come to their attention indicating that the subject matter is materially misstated.

Reasonable assurance

Reasonable assurance requires more extensive risk assessment, testing of controls and substantive procedures. The practitioner expresses a positive opinion that the information is prepared, in all material respects, in accordance with the applicable criteria. Reasonable assurance is not absolute assurance: sampling, estimates, professional judgment and the possibility of undetected fraud remain.

Assurance criteria and standards

An assurance engagement requires clear subject matter, suitable criteria, sufficient and appropriate evidence, a responsible party and an independent practitioner. ISAE 3000 (Revised) is a widely used standard for assurance engagements other than audits or reviews of historical financial information. Climate and emissions engagements may involve specialized requirements and criteria. The International Auditing and Assurance Standards Board has also developed ISSA 5000, the International Standard on Sustainability Assurance, with applicability and effective-date considerations that organizations should confirm with their assurance provider and jurisdiction.

Typical assurance procedures

Procedures may include:

• interviews and walkthroughs;
• inspection of policies, invoices and registers;
• testing samples from source records;
• recalculation of metrics;
• observation of meters or operational processes;
• analytical review of trends and ratios;
• testing information-system controls;
• confirmation with third parties; and
• evaluation of estimates and disclosures.

Assurance does not make an organization socially responsible. It assesses whether selected information is prepared against stated criteria and is free from material misstatement. A company can receive assurance on a narrow set of indicators while having serious unmanaged impacts outside the engagement scope.

7. Ethical and Governance Issues

CSR disclosure creates distinctive ethical risks.

Greenwashing and social-washing

Greenwashing occurs when communication creates an unjustifiably favourable impression of environmental performance. Social-washing applies similar distortion to human-rights, labour or community performance. Common techniques include selective indicators, vague aspirations, unverified labels, favourable case studies without negative information and confusing charitable activity with responsible core operations.

Boundary manipulation

Organizations may exclude difficult subsidiaries, suppliers or geographies from reporting boundaries. Such exclusions can be legitimate if consistent with the framework, but they must be explained. A boundary should not be chosen solely to improve performance.

Data privacy and human rights

Social data may contain sensitive information about health, wages, ethnicity, grievances or worker identity. Data collection must respect privacy, lawful processing, purpose limitation, access controls and non-retaliation. A company should not publish personally identifiable grievance information merely to demonstrate transparency.

Conflicts of interest

Assurance independence can be threatened by financial dependence, self-review, advocacy, familiarity or management participation. Organizations should consider auditor selection, rotation requirements, non-assurance services and oversight by an audit or sustainability committee.

Whistleblowing and retaliation

Employees and suppliers need safe channels to report inaccurate data, forced labour, bribery or manipulation. A disclosure system is ethically weak if it rewards good news and punishes the people who identify bad news.

8. Jurisdiction-Specific Reporting Obligations

Reporting obligations vary according to legal entity, size, listing status, sector, location, group structure, financial-market participation and supply-chain relationships. A professional compliance map should identify:

1. applicable legislation and regulator;
2. entities and reporting periods in scope;
3. required standards or permitted alternatives;
4. publication location and filing deadline;
5. assurance level and provider eligibility;
6. digital tagging or machine-readable requirements;
7. director or officer responsibility; and
8. penalties, restatement duties and enforcement mechanisms.

Examples of obligations that may arise include climate-risk disclosures for listed companies, EU sustainability reporting under CSRD and ESRS, modern-slavery or supply-chain transparency statements, emissions reporting, product environmental claims rules, and sector-specific prudential requirements. The exact application must be checked against current local law because thresholds, transitional provisions and standards can change.

A multinational should maintain a legal register and a reporting crosswalk. The crosswalk maps one underlying data point to multiple requirements while preserving each framework’s distinct purpose. For example, a single energy dataset may support GRI emissions disclosures, ISSB climate metrics, ESRS environmental reporting and an SDG-related narrative, but the boundaries and explanations may differ.

9. Technology and Artificial Intelligence

Digital tools can improve reporting through automated meter capture, centralized data platforms, workflow approvals, anomaly detection, supplier portals and evidence repositories. Application programming interfaces can reduce manual transcription, while dashboards can show progress against targets.

Artificial intelligence may assist with document classification, extraction of invoice data, identification of missing disclosures and analysis of large supplier datasets. However, AI-generated information must not be treated as evidence merely because it appears plausible. Organizations should control:

• data provenance;
• model version and training basis;
• human review;
• hallucination and classification error;
• cybersecurity and access rights;
• privacy and confidential information; and
• explainability of material judgments.

The principle is simple: automation may support preparation, but accountability for the published disclosure remains with the organization and its governing bodies.

10. Illustrative Case: Northstar Foods Ltd.

Background

Northstar Foods Ltd. is a fictional mid-sized food manufacturer operating plants in two countries and purchasing agricultural commodities from approximately 600 suppliers. It publishes a voluntary sustainability report and is preparing for expanded regulatory expectations from customers, lenders and one European subsidiary.

Problem

Northstar reports a 20% reduction in “carbon footprint” and claims responsible sourcing. A preliminary review identifies three weaknesses: the calculation excludes important purchased goods, supplier data are incomplete, and the report does not explain whether the reduction reflects actual efficiency or a change in emission factors. Community groups also allege excessive water extraction near one plant.

Analysis

The carbon claim is potentially relevant under GRI and ISSB, while the European subsidiary may face ESRS-related obligations depending on the group’s legal circumstances. The water issue is impact-material because it affects a local community and ecosystem, even if the immediate financial effect is limited. The claim of responsible sourcing requires evidence concerning supplier screening, worker conditions, grievance mechanisms and remediation, not merely a supplier code of conduct.

Approach and solution

Northstar establishes a cross-functional disclosure committee chaired by the finance director and sustainability director. It:

1. defines organizational and operational boundaries for emissions and water;
2. prepares a double-materiality assessment for the European reporting perimeter and an impact assessment for the wider group;
3. creates a data dictionary and assigns owners for energy, water, procurement and labour indicators;
4. reconciles electricity data to invoices and production volumes;
5. separates measured, estimated and supplier-reported emissions;
6. restates the prior-year emissions figure where the previous method was inconsistent;
7. investigates the water allegation through hydrological analysis and community engagement;
8. replaces the unqualified “responsible sourcing” claim with specific metrics and limitations; and
9. commissions limited assurance over selected emissions, water and supplier indicators.

Outcome

The revised report shows a smaller, but better-supported, emissions reduction. It discloses the increased Scope 3 estimate, explains the methodology change and reports a time-bound water-reduction plan. Northstar also publishes the number of suppliers assessed, identified cases, remediation status and unresolved limitations. Lenders regard the report as more credible even though some headline results are less favourable.

Learning points

The case illustrates that credible reporting may worsen short-term publicity while improving accountability. Framework selection cannot compensate for weak boundaries or controls. Negative information is not a reporting failure when it is accompanied by accurate explanation, responsibility and corrective action. Assurance is most effective when introduced during system design rather than at the end of the publication process.

Challenges and Limitations

CSR disclosure remains difficult for several reasons. Sustainability impacts are often uncertain, long-term and geographically dispersed. Supply-chain data may be unavailable or inconsistent. Social outcomes are harder to quantify than energy consumption. Frameworks can overlap, creating reporting burden and inconsistent terminology. Assurance costs may be significant for smaller organizations. Regulation is developing unevenly across jurisdictions, and organizations may face conflicting stakeholder expectations.

There is also a danger of metric fixation. A measure can be precise without being meaningful. For example, counting training hours says little about whether workers gained competence or whether unsafe work was reduced. Organizations should combine quantitative indicators with qualitative explanation, stakeholder evidence and outcome analysis.

Best-Practice Checklist

A credible CSR disclosure system should:

• align reporting with strategy and governance;
• identify both impacts and financially relevant risks;
• use a documented materiality process;
• define boundaries and methodologies clearly;
• maintain a controlled data dictionary;
• reconcile sustainability data to operational records;
• preserve source evidence and version history;
• disclose estimates, restatements and limitations;
• avoid exaggerated claims;
• protect stakeholder and worker information;
• obtain independent assurance appropriate to user needs; and
• review legal requirements before publication.

Chapter Summary

CSR disclosure is an accountability and management process, not merely a communications product. GRI emphasizes organizational impacts on the economy, environment and people. ISSB focuses on sustainability-related risks and opportunities that may affect investors and other providers of capital. ESRS applies a detailed double-materiality approach within the EU reporting environment. The SDGs provide a global development framework but are not a standalone reporting or assurance standard. ISO 26000 offers guidance on social responsibility and is not certifiable.

Credibility depends on materiality judgments, clear boundaries, reliable metrics, documented methodologies, internal controls and traceable audit trails. Limited assurance and reasonable assurance differ in depth and conclusion, and neither guarantees that an organization has no adverse impacts. Ethical reporting requires balanced communication, protection of human rights and privacy, resistance to greenwashing, and appropriate governance of conflicts of interest. Technology and AI can improve efficiency, but human accountability, evidence and review remain essential. Finally, organizations must maintain a jurisdiction-specific compliance map because legal scope, timing, assurance and filing requirements vary.

Key Terms

Assurance: Independent evaluation intended to increase confidence in reported information.

Audit trail: Evidence path linking a published disclosure to its source records, calculations and approvals.

Double materiality: Assessment of both how sustainability matters affect an organization and how the organization affects people and the environment.

ESRS: European Sustainability Reporting Standards used within the applicable EU sustainability-reporting regime.

Financial materiality: Relevance of information to decisions by investors, lenders and other providers of capital.

GRI Standards: Standards for reporting an organization’s impacts on the economy, environment and people.

Impact materiality: Significance of an organization’s actual or potential impacts on people or the environment.

ISAE 3000: International assurance standard for engagements other than audits or reviews of historical financial information.

ISSB: International Sustainability Standards Board.

ISSB Standards: Investor-focused sustainability-disclosure standards, including IFRS S1 and IFRS S2.

ISO 26000: Guidance on social responsibility principles and practices.

Limited assurance: Assurance engagement providing less extensive procedures and a lower level of assurance than reasonable assurance.

Materiality: Criterion used to determine whether information is sufficiently important to influence reporting users or demonstrate significant impacts.

Reasonable assurance: Higher-level assurance based on more extensive procedures, expressed in a positive conclusion.

Scope 1 emissions: Direct greenhouse-gas emissions from sources owned or controlled by an organization.

Scope 2 emissions: Indirect emissions from purchased or acquired energy consumed by an organization.

Scope 3 emissions: Other indirect value-chain greenhouse-gas emissions.

SDGs: United Nations Sustainable Development Goals.

Value chain: Activities, resources, relationships and stakeholders connected with an organization’s products or services.

Greenwashing: Misleading communication that creates an unjustifiably favourable impression of environmental performance.

Review Questions

Short Answer Questions

1. What is the principal difference between impact materiality and financial materiality?
2. Why is ISO 26000 not a certification standard?
3. What is the purpose of an audit trail in sustainability reporting?
4. Distinguish limited assurance from reasonable assurance.
5. Why should SDG icons not be used as a substitute for performance evidence?

Long Answer Questions

1. Compare the purposes, users and materiality approaches of GRI, ISSB and ESRS.
2. Explain how an organization can design effective controls over sustainability data.
3. Discuss the ethical risks associated with selective CSR disclosure and greenwashing.
4. Describe the stages involved in preparing a credible sustainability disclosure.
5. Explain why assurance does not prove that an organization is socially or environmentally responsible.

Analytical / Application Questions

1. A company reports a 30% emissions reduction after changing its emission factors and excluding a newly acquired subsidiary. Analyze the disclosure risks and recommend corrective actions.
2. Design a materiality process for a water-intensive manufacturing company operating in a drought-prone region. Identify likely stakeholders, evidence sources and disclosure consequences.
3. Using the Northstar Foods case, prepare a short reporting and assurance plan that integrates GRI, ISSB, ESRS, the SDGs and ISO 26000 without treating them as interchangeable.

Multiple Choice Questions with Answers

Question 1

Which framework is primarily designed to report an organization’s impacts on the economy, environment and people?

A. GRI Standards

B. ISSB Standards

C. ISO 26000 certification rules

D. The SDGs alone

Correct Answer: A. GRI Standards

Question 2

What does double materiality require an organization to consider?

A. Only effects on share price

B. Only impacts on communities

C. Both organizational financial effects and impacts on people and the environment

D. Only matters required by customers

Correct Answer: C. Both organizational financial effects and impacts on people and the environment

Question 3

Which statement about ISO 26000 is correct?

A. It is a mandatory financial-reporting standard

B. It is guidance on social responsibility and is not certifiable

C. It is an emissions-calculation protocol

D. It replaces all assurance standards

Correct Answer: B. It is guidance on social responsibility and is not certifiable

Question 4

Which item is part of the typical ISSB disclosure architecture?

A. Governance

B. Charitable donations only

C. Product advertising

D. Employee entertainment

Correct Answer: A. Governance

Question 5

What is the main purpose of an audit trail?

A. To eliminate the need for management review

B. To link a published figure to source evidence and approvals

C. To guarantee zero environmental impact

D. To replace materiality assessment

Correct Answer: B. To link a published figure to source evidence and approvals

Question 6

Compared with limited assurance, reasonable assurance generally involves:

A. Less evidence and no risk assessment

B. More extensive procedures and a positive conclusion

C. Only stakeholder interviews

D. No professional judgment

Correct Answer: B. More extensive procedures and a positive conclusion

Question 7

Which is an example of a detective control?

A. A mandatory data-entry field

B. A locked approved emission-factor table

C. A reconciliation of reported energy use to invoices

D. A policy assigning data ownership

Correct Answer: C. A reconciliation of reported energy use to invoices

Question 8

Why should an organization disclose estimates in sustainability data?

A. Estimates are always more accurate than measurements

B. Users need to understand methodology and uncertainty

C. Disclosure rules prohibit measured data

D. Estimates remove the need for assurance

Correct Answer: B. Users need to understand methodology and uncertainty

Question 9

A company uses SDG 6 to describe water performance. Which practice is most credible?

A. Displaying the SDG logo without metrics

B. Claiming to have achieved the SDG globally

C. Reporting water impacts, baselines, targets and limitations

D. Reporting only charitable water projects

Correct Answer: C. Reporting water impacts, baselines, targets and limitations

Question 10

Which statement best describes assurance?

A. It proves that an organization has no adverse impacts

B. It independently evaluates information against suitable criteria

C. It replaces the organization’s internal controls

D. It guarantees that every reported number is exact

Correct Answer: B. It independently evaluates information against suitable criteria