ESG in 2026: The Buzzword Phase Is Over. Execution Is What Counts
For a while, ESG was easy to fake.
A company could publish a polished sustainability page, make a few public commitments, and leave the hard work for later. That no longer holds up. The pressure now is less about saying the right things and more about producing information that can survive scrutiny from regulators, investors, customers, auditors, and internal decision-makers. In practice, that means governance, controls, evidence, and usable data.
That does not mean every jurisdiction is moving in one clean direction. It is messier than that. In the EU, the first CSRD reporters began applying the rules for the 2024 financial year, with reports published in 2025. At the same time, the European Commission proposed major simplifications in 2025, including narrowing scope and postponing reporting for some later-wave companies. In the U.S., the SEC adopted climate disclosure rules in March 2024, stayed them during litigation, and then voted in March 2025 to end its defense of the rules in court. Anyone still describing ESG as a simple, linear march toward tougher disclosure is not paying attention.
ESG Is Not One Workstream. It Is a Business Operating Issue
ESG is still shorthand for environmental, social, and governance matters, but that label hides the real work. The real work is identifying which sustainability-related risks and opportunities matter to the business, assigning ownership, collecting reliable information, and disclosing it in a way that is consistent, explainable, and decision-useful. That is exactly how IFRS S1 frames the issue: governance, strategy, risk management, and performance disclosures tied to what could affect cash flows, access to finance, or cost of capital.
That is why ESG has moved out of the “communications” box. A serious program touches finance, legal, procurement, operations, HR, compliance, and supplier management. If it sits only with a sustainability lead or a marketing team, the company usually ends up with polished claims and weak underlying evidence.
The Real Pressure Point Is Value-Chain Data
Most companies do not fail on ESG because they have no intentions. They fail because the data sits outside their direct control.
Under the EU’s sustainability reporting framework, value-chain information is part of the picture, and the Commission’s own FAQs had to clarify when companies may use estimates instead of collecting information directly from suppliers or partners. That is a useful signal. It tells you the implementation problem is real enough that regulators had to address it directly.
The same pattern shows up in due diligence. The EU Corporate Sustainability Due Diligence Directive entered into force on 25 July 2024 and is aimed at requiring in-scope companies to identify and address adverse human rights and environmental impacts in their operations, subsidiaries, and chains of activities. Whether individual companies fall in scope or not, the commercial effect is broader: large organizations will keep pushing requests down their supply chains because they cannot report or manage risk in a vacuum.
This is where many ESG programs become visibly weak. Supplier outreach is late. Requests are inconsistent. Templates are sent without context. Documentation comes back incomplete, outdated, or contradictory. Internal teams then try to turn that into “reportable” information under deadline pressure. That is not a sustainability strategy. It is a recovery exercise.
Where Companies Still Get ESG Wrong
The first mistake is treating disclosure as the finish line. It is not. Reporting is the output. Program maturity is the input. If the underlying controls are weak, the report may look fine while the actual program is fragile.
The second mistake is confusing data collection with audit readiness. Having a spreadsheet full of emissions figures, policy statements, or supplier responses is not the same as having a defensible reporting process. Mature programs can explain where the data came from, who owns it, how it was reviewed, what assumptions were used, and where the gaps still are.
The third mistake is underestimating governance. IFRS S1 explicitly requires disclosure about governance processes, controls, procedures, strategy, risk management, and performance. That should tell companies something important: this is not just about publishing metrics. It is about demonstrating management discipline.
The fourth mistake is assuming ESG is only environmental. That is lazy thinking. Governance failures, labor issues, weak oversight of business partners, and poor internal accountability can be just as damaging as bad environmental data. The EU due diligence regime itself is built around human rights and environmental impacts across operations and chains of activities.
What “Doing ESG Right” Actually Looks Like
A credible ESG program usually has a few characteristics.
It has clear ownership. Someone is accountable for data, someone reviews it, and someone signs off.
It uses a reporting architecture that matches the company’s actual obligations and audience. For impact-oriented reporting, GRI remains a widely used global standard. For investor-focused sustainability-related risks and opportunities, SASB and IFRS Sustainability Disclosure Standards remain relevant reference points.
It treats supplier engagement as a process, not a one-off email campaign. That means mapping what information is needed, setting expectations early, following up consistently, documenting assumptions, and escalating when there are gaps.
It accepts that not everything will be perfect on day one. The serious question is whether the company knows its weak points and has a plan to close them before a regulator, customer, lender, or auditor exposes them first.
The Commercial Reality Behind ESG
The business case for ESG is often overstated in vague language, and that does more harm than good. You do not need to claim that ESG automatically creates superior performance in every case. The more defensible point is simpler.
Better sustainability reporting and governance can reduce friction in capital markets, customer diligence, procurement reviews, and internal risk management because stakeholders get information that is more comparable, more consistent, and easier to rely on. That is the logic built directly into IFRS S1 and the SEC’s climate disclosure rulemaking, even though the U.S. rule is currently stayed and contested.
Poor ESG execution creates the opposite effect. Teams spend months chasing basic data. Customers do not trust supplier responses. Legal and compliance teams get pulled in late. Reporting cycles become manual and fragile. Senior management sees the issue only when a filing, tender, or customer questionnaire is already at risk.
That is the hidden cost. Not just regulatory exposure, but operational drag.
What Companies Should Focus On Now
Start with obligations, not trends. Separate what is legally required, what is contractually requested, and what is strategically useful.
Then look at the reporting chain backwards. Before talking about targets or claims, ask whether the organization can actually gather, review, and defend the underlying information.
After that, pressure-test the supply chain piece. If your reporting depends on supplier data, treat supplier engagement as core infrastructure.
Finally, choose frameworks with intent. GRI, SASB, IFRS Sustainability Disclosure Standards, and CSRD/ESRS do not do the same job. Mixing them without understanding the audience creates more confusion than clarity. GRI is built around reporting impacts on the economy, environment, and people. SASB is designed around sustainability-related risks and opportunities likely to affect financial performance. IFRS S1 and S2 are built for general-purpose financial reporting users. CSRD requires reporting under ESRS for in-scope companies in the EU framework.
The companies that will handle ESG well are not necessarily the ones making the biggest public claims. They are the ones building repeatable processes, tightening ownership, and getting comfortable with evidence.
That is what the market trusts when the easy language runs out.
