- Pick the standard before you pick the software. Most stalled ESG programs bought a reporting platform before deciding what they were required to report, and then spent a year configuring it against a moving target.
- Materiality is the whole job, and it is a business exercise. If your material issues list could belong to any company in your country, you have written a values statement rather than done an assessment.
- Readiness is thinner than the reporting suggests. EY found 30% of sustainability leaders feel very prepared for CSRD or ISSB requirements, while only 11% already have a reporting system in place and 39% do not know when they will.
- The binding constraint is data quality. Deloitte's 2024 Sustainability Action Report found 57% of executives naming data quality as their single biggest ESG data challenge, and only 15% reporting on Scope 3 emissions.
- A small organization can do this properly. Not by doing less rigorously, but by scoping to fewer issues and instrumenting those few things well enough to survive an auditor.
Almost every ESG implementation that fails does so in the same place, and it is not the ambition. It is the moment somebody asks where a number came from and the answer involves a spreadsheet, a departed employee, and an estimate nobody can reconstruct. The framework and the targets were usually fine. What was missing was the unglamorous plumbing that turns a commitment into a figure somebody else can check.
In our work with senior leadership teams across East Africa over the past decade, we have watched several organizations do this in the wrong order. They start with a public commitment, work backward to a framework, and only then discover that nothing in the business currently produces the data that framework expects. Reversing that sequence costs a year, and the year is usually spent in front of a reporting platform that was purchased too early.
What follows is the sequence that works: what an ESG framework is and is not, how to choose one, seven implementation steps in the order they actually have to happen, and what to do when you do not have a sustainability department to do any of it.
What an ESG Framework Is
An ESG framework is a structure for deciding which environmental, social and governance issues your organization will measure, manage and report on, and by what definitions. Strategies, values statements and ratings are three other things entirely.
The confusion between framework and rating causes real damage. Ratings are third-party opinions, produced from public data by agencies whose methodologies disagree with one another, sometimes dramatically, and revised on a schedule you do not control. A framework is something you operate. You can run an excellent one and still get a mediocre rating, usually because the rater could not find what you published, at which point the temptation is to write next year's disclosure for the agencies rather than for the people who actually bear your risks.
Two things about that taxonomy are worth saying out loud before you build anything on it. The first is that it is a menu. No organization manages all eighteen of those items, and one that claims to is reporting rather than managing. The second is that governance sits on the right of the diagram and underneath everything else in practice. Environmental and social performance that is not governed is a set of intentions.
The long-horizon case for taking the environmental column seriously has strengthened rather than weakened. The World Economic Forum's Global Risks Report 2026 puts extreme weather, biodiversity loss and critical change to Earth systems as the top three risks over a ten-year horizon, with five of the top ten environmental. Over two years the same respondents rank geoeconomic confrontation, misinformation and polarization above all of them. That gap between the two-year and ten-year lists is the exact tension an ESG framework exists to manage.
The World Economic Forum Global Risks Report 2026 ranks extreme weather events, biodiversity loss and ecosystem collapse, and critical change to Earth systems as the three most severe global risks over the coming decade, with five of the top ten environmental. Only extreme weather also makes the two-year top five; the other four drop off that shorter list entirely. Organizations are being asked to build reporting systems for the long list while being funded against the short one.
Choosing the Standard Before the Software
The most expensive mistake in ESG implementation is buying a reporting platform before deciding what the platform is for, because platforms are configured against a standard and a standard chosen afterwards means configuring the whole thing twice. Order matters here more than budget.
The choice itself is usually narrower than vendors suggest. If you are listed, the standard is largely chosen for you: IFRS S1 and S2 apply to reporting periods beginning on or after 1 January 2024, and for Kenyan listed companies the Nairobi Securities Exchange's disclosure expectations have been in force since 2022. If you are private, the driver is whoever is asking: a lender, a development finance institution, a multinational customer running supplier due diligence, or a buyer. Find out what they will accept before you decide what to build.
A practical rule for the middle case: build to the most demanding requirement you can currently name, and no further. Reporting capability built speculatively against a standard nobody has asked you for is the single most common source of abandoned ESG spend.
The Seven Implementation Steps in Order
The order matters more than the content. Every step below depends on the one before it, and the common failure is running steps five and six before steps one and two exist.
1. Run a real materiality assessment
List the ESG issues that could plausibly move your financial results or your license to operate, rank them, and write down why each one made or missed the cut. Then apply one test. A real assessment produces something a competitor could not have written. If a rival in your sector could publish your material issues list unchanged, you have described your industry rather than assessed your company. Talk to lenders, major customers, regulators and operations staff. The team that already owns sustainability reporting is the least likely group to tell you what the assessment is missing.
2. Baseline before you set targets
Measure where you actually are on each material issue for at least one full cycle before committing to a number in public. Targets set without a baseline are guesses, and they are the ones that get quietly restated two years later. A restatement is survivable; a restatement you cannot explain is not.
3. Assign a named owner and a budget
Every material issue needs one accountable person who controls at least one budget or decision that the metric depends on. A metric owned by someone with no authority over its inputs will be reported accurately and never improve. This is the step where most frameworks turn into paperwork.
4. Instrument the data at source
Decide how each number will be generated as part of normal operations rather than assembled at year end. Most of the raw material is already there: meter readings, fuel purchases, payroll systems, procurement records, incident logs. What fails assurance is the data collected specially, once a year, by asking people to remember what happened in March.
5. Set targets you can be held to
Fewer and firmer. Three or four targets carrying dates, owners and a stated methodology will move an organization further than a page of aspirations, and each one should say explicitly what it excludes, because the exclusions are what an assurance provider asks about first.
6. Extend into the supply chain
This is where the social column becomes real work. Map who your suppliers are, pay them on defensible terms, and check the conditions under which they operate. Across much of the region a substantial share of a supply chain sits in the informal sector, which makes tier-two and tier-three visibility genuinely hard rather than merely neglected. Start with the suppliers who represent the most spend or the most risk. The ones easiest to survey are rarely either.
7. Report, then get it assured
Publish against the standard you chose in step one, then have an independent party review at least the disclosures you are most exposed on. Assurance is the step that converts an ESG program from a communications asset into a governance one, and it is also the step that tells you which of the previous six you did badly.
Several of the actions organizations most often want credit for, paying a fair share of tax in the countries where they operate, bringing underrepresented suppliers into the value chain, investing in the communities around a site, disclosing emissions and climate exposure honestly, are not separate initiatives. They are outputs of steps one, three and six done properly.
Building an ESG framework without a department to run it?
Our Business Strategy and Operational Excellence program works with leadership teams on exactly this sequence: materiality, ownership, data discipline, and reporting that holds up when somebody independent checks it. Book a free strategy call.
The Data Quality Problem
Ask a room of executives what is blocking their ESG program and the answer is rarely strategy. Deloitte's 2024 Sustainability Action Report, based on a survey of 300 executives at companies with at least USD 500 million in revenue, found data quality named as the single biggest ESG data challenge by 57% of respondents, and among the top three by 88%. In the same research only 15% were reporting on Scope 3 emissions, the category that covers everything happening in the supply chain.
Deloitte's 2024 Sustainability Action Report found 57% of surveyed executives naming data quality as their top ESG data challenge and 88% placing it in their top three, while only 15% were reporting on Scope 3 emissions. Scope 3 is where most organizations' actual footprint sits. The gap between what is material and what is measurable is the real state of ESG implementation.
The readiness picture in EY's State of Sustainability Report 2025, drawn from 200 senior sustainability leaders surveyed in October and November 2025, points the same way. Thirty percent said they feel very prepared for CSRD or ISSB requirements, up from 24% the year before. Only 11% already had a reporting system in place, and 39% did not know when they would. Confidence is running roughly three times ahead of infrastructure.
EY's State of Sustainability Report 2025 surveyed 200 senior sustainability leaders and found 30% feeling very prepared for CSRD or ISSB requirements while 11% had a reporting system in place and 39% could not say when they would have one. More leaders cannot name a date than feel ready, which is a fair description of where most implementation programs actually sit.
The practical implication is that step four, instrumenting data at source, deserves more of your first-year budget than it usually gets. It is the least visible step and the one that determines whether any of the others can be defended.
Implementing Without a Sustainability Department
Most organizations implementing an ESG framework in this region do not have a sustainability function. They have a finance manager, an operations manager, and a chief executive who has been asked for a disclosure package by a lender or a customer. That constraint is workable, and it changes the approach in three ways.
Scope to three material issues. A small organization that measures energy, water and supplier conditions properly is in a stronger position than a large one measuring forty things badly. Depth survives audit; breadth does not.
Use the systems you already run. Utility bills, fuel receipts, payroll and procurement records are audit-grade data that already exists. The work is defining what counts and recording it consistently, which is a discipline rather than a purchase.
Develop the capability inside existing roles. The people you need are a finance manager who can handle carbon accounting and a procurement lead who can run a supplier audit. Both are development problems rather than recruitment problems, and the market for hiring them ready-made is tight.
There is a real advantage in going second here. Organizations building reporting capability now are doing it against standards that have converged, which the first wave did not have. Much of the duplicated effort of the past decade was spent reporting to four frameworks at once.
Three Common Implementation Mistakes
The platform-first trap
Software is purchased before the standard is chosen, then configured against a requirement that changes. Choose what you must report, prove you can produce the numbers manually for one cycle, and buy the platform to remove the manual effort rather than to define it.
The everything-is-material trap
The materiality assessment returns fourteen issues because nobody wanted to tell a stakeholder their concern was immaterial. The output is unmanageable, and the program dilutes across fourteen priorities instead of concentrating on the two or three that actually move the numbers. Stanford Social Innovation Review's argument for a better business case for ESG turns on this point: the case has to be specific to the firm to be worth anything.
The announcement-first trap
A public commitment is made before a baseline exists, usually because a conference or an annual report needed something to say. Every subsequent step is then constrained by a number chosen before anyone knew what was achievable, and the program spends years managing the gap rather than the issue.
Frequently Asked Questions
What is an ESG framework?
A structure for deciding which environmental, social and governance issues your organization will measure, manage and report on, and by what definitions. It is not a strategy, a values statement or a rating. Ratings are third-party opinions produced from public data by agencies whose methodologies disagree with each other; a framework is something you operate internally. You can run a good framework and get a mediocre rating, usually because the rater could not find what you published.
What are the seven steps to implement an ESG framework?
Run a materiality assessment that genuinely excludes things; baseline each material issue for at least one full cycle before setting a public target; assign each issue a named owner who controls a relevant budget line; instrument the data at source so it is generated by normal operations rather than assembled at year end; set a small number of firm targets with stated exclusions; extend into the supply chain starting with the highest spend or risk; then report against your chosen standard and have the exposed disclosures independently checked.
Which ESG reporting standard should we use?
Usually the choice is narrower than vendors suggest. If you are listed, it is largely made for you: IFRS S1 and S2 apply to reporting periods beginning on or after 1 January 2024, and Kenyan listed companies have had NSE disclosure expectations since 2022. If you are private, the driver is whoever is asking, whether that is a lender, a development finance institution or a multinational customer running supplier due diligence. Build to the most demanding requirement you can actually name, and no further.
Why do so many ESG implementations stall?
Data, not ambition. Deloitte's 2024 Sustainability Action Report found 57% of executives naming data quality as their top ESG data challenge and 88% putting it in their top three, with only 15% reporting on Scope 3 emissions. The other common causes are buying a reporting platform before choosing a standard, running a materiality assessment that excludes nothing, and making a public commitment before a baseline exists.
Can a company implement ESG without a sustainability department?
Yes, by scoping narrowly and instrumenting well. An organization that measures energy, water and supplier conditions properly is in a stronger position than a large one measuring forty things badly, because depth survives assurance and breadth does not. Use the systems you already run: utility bills, fuel receipts, payroll and procurement records are audit-grade data that already exists. The capability you need is a finance manager who can handle carbon accounting and a procurement lead who can run a supplier audit.
What is a materiality assessment and how do you know yours is any good?
It is the exercise of identifying which ESG issues could plausibly move your financial results or your license to operate, ranking them, and recording why each one made or missed the cut. The test is whether the output could belong to a competitor. If a rival in your sector could publish your material issues list unchanged, you have described your industry rather than assessed your company. An assessment that excludes nothing has not been conducted.
Conclusion
The useful way to budget this is to treat the first year as a plumbing project and the second as a reporting one. Organizations that spend early money on instrumentation and late money on presentation end up with disclosures they can stand behind. The ones that reverse the order spend their second year rebuilding the first, usually after an assurance provider asks a question nobody prepared for.
Of the seven steps above, which one did your organization skip, and which of the later ones is currently paying for it?
If you are working out where to start, or restarting a program that stalled, our Business Strategy and Operational Excellence program is built for it. Book a free strategy call and we will work through the sequence with your team.
