There's a moment I see happen again and again when I sit down with CFOs across Malaysia, Singapore, the Gulf, the UK or the EU. It usually comes after the first ESG readiness review, when the spreadsheets have been opened, the data has been traced, and the reality has been laid bare.
The CFO leans back, exhales, and says something along the lines of: "We've been reporting on sustainability for years. How did we end up this exposed?"
It's not said with panic. It's said with recognition — the kind that comes when you suddenly see the whole picture, not the curated version.
ESG reporting didn't fail because people weren't trying. It failed because the rules of the game changed, and most organisations didn't notice until the referee blew the whistle.
For years, sustainability reporting lived in a comfortable space. It was narrative-led, policy-heavy, and largely unchallenged. You could publish a glossy report, talk about your commitments, and feel like you were doing your part.
But IFRS S1 and S2, CSRD and CSDDD have rewritten the script. They've taken ESG out of the realm of storytelling and placed it firmly in the world of audit, evidence and accountability. Suddenly, the question isn't "What are your ambitions?" It's "Show me the data. Show me the controls. Show me the evidence behind every number." And that's where the cracks appear.
Because most organisations discover — often for the first time — that they don't actually have a baseline. They don't have traceability. They don't have documentation. They don't have ownership. They don't have the internal capability to meet the standards they've signed up to. This is not a moral failing. It's a structural one.
Here's the uncomfortable truth: sustainability teams were never designed to deliver audit-ready reporting. They were built for strategy, engagement, and narrative — not for controls, evidence packs, or assurance. Operations teams understand activity, but not reporting boundaries. Procurement understands suppliers, but not due-diligence obligations. IT understands systems, but not data lineage. Risk understands frameworks, but not emissions factors.
Only one function in the organisation understands all of it: the CFO's office. Not because CFOs are ESG experts, but because they understand what "defensible" means. They understand what "material" means. They understand what "audit-ready" means. They understand that numbers without documentation are just opinions. This is why, whether they like it or not, CFOs are becoming the custodians of ESG credibility.
As the CFO begins to draw together the different strands of the organisation — operations, procurement, sustainability, finance, risk — a more honest picture emerges. People start to recognise that ESG reporting is not an isolated compliance task sitting on the periphery of the business. It is a mirror held up to the organisation's operating reality.
Once that understanding takes hold, the tone of internal conversations changes. Teams become more candid about where the data actually resides, what can be produced reliably, and where the structural gaps lie. ESG stops being treated as a parallel narrative and starts being understood as part of the organisation's operating system — a lens through which performance, risk and credibility are now judged. That is the moment the organisation begins to mature.
One of the most important shifts CFOs make is recognising that capability gaps are not a sign of organisational weakness. They are simply the natural consequence of a reporting regime that has evolved faster than internal structures. When finance teams adopted IFRS decades ago, they didn't do it overnight. They trained, partnered with auditors, and built controls. ESG is going through the same evolution — only compressed into a much shorter timeframe.
The CFOs who handle this well take a measured approach. They pair sustainability teams with finance analysts, bring in external specialists to build the baseline, and treat capability building as a multi-year investment rather than a scramble to meet a deadline.
There is a persistent belief that ESG reporting can be solved by buying a platform. It can't. Technology amplifies whatever foundation it sits on. If the data is incomplete, inconsistent or undocumented, automation simply produces unreliable outputs at scale.
CFOs who succeed start with the fundamentals: where does the data originate? Who owns it? How is it validated? What evidence exists behind each figure? Only when those questions have credible answers does technology become an accelerator rather than a risk. This is why baselining is so important. A baseline is not a spreadsheet of emissions. It is the moment the organisation finally sees itself clearly — its data gaps, its operational realities, its supply-chain dependencies, its risks, its controls. Once that picture is visible, everything else becomes easier: automation, assurance, target-setting, investor communication.
As the organisation's understanding deepens, most CFOs reach a pragmatic conclusion: external expertise is not optional. The standards are technical, evolving, and require methodological precision that few internal teams have had reason to develop.
But the CFOs who get this right are deliberate about how they use external support. They bring in specialists to accelerate baselining, validate methodologies, and prepare for assurance — but they retain ownership of the data, the controls and the governance. External partners strengthen internal capability rather than replace it. They become a catalyst for maturity, not a substitute for accountability.
Full compliance isn't about ticking boxes. It's about protecting access to capital, markets and supply chains. Partial compliance isn't a comfortable middle ground — it's a signal that the organisation is exposed. Zero compliance isn't a risk. It's a decision.
CFOs don't need to become sustainability experts. They simply need to do what they have always done: bring discipline, structure and truth to the numbers that define the organisation. ESG reporting is just the next chapter in that story. And the CFOs who embrace it now will be the ones who shape the future of corporate reporting — not because they were forced to, but because they understood earlier than anyone else what the world was really asking for.