What the ESG Module Does
The ESG module turns sustainability reporting from a spreadsheet exercise into assured, auditable data — because under CSRD it now has to be.
It covers double materiality, emissions accounting across Scope 1, 2 and 3, datapoint mapping to the major frameworks, and the evidence trail an assurance provider will ask for. It runs on the same GRC platform as your security and financial controls, which is what makes the assurance part tractable.
Double Materiality
CSRD requires a double materiality assessment: how sustainability matters affect the company (financial materiality), and how the company affects people and environment (impact materiality). A topic is material if it meets either test.
Both are risk assessments. ActiveERM runs them on the same methodology as your enterprise risk register — the scales you already agreed, the thresholds already signed off, the review cadence already audited. Teams that invent a parallel scoring system for materiality spend their first two months arguing about scales and then have to defend a bespoke method to an assurance provider.
The assessment is captured as an auditable artefact: stakeholder engagement, matters considered, scoring, thresholds, and the resulting material topics with the disclosures they trigger.
Emissions: Scope 1, 2 and 3
Scope 1 and 2 are tracked from activity data with location-based and market-based figures where required. Scope 3 — the 15 value-chain categories where credibility is won or lost — supports both spend-based and activity-based calculation, so you can start spend-based and migrate material categories to activity data over time.
Every figure records its method, emission factor source and factor version. That is the difference between an estimate an assurance provider accepts and a number they cannot sign off. Restatements appear as restatements rather than silently overwriting history.
Framework Mapping
Datapoints are collected once and mapped to every framework that requires them — ESRS under CSRD, GRI, SASB, TCFD (whose four-pillar structure survives inside IFRS S2), and SFDR for financial market participants. See our ESG frameworks coverage for what each is for.
The alternative — a separate collection exercise per framework — produces the same number three times with three provenances and no guarantee they agree.
Supplier ESG Data
Supplier data is the weakest link in sustainability reporting, because it originates outside your control environment. ActiveERM treats it as what it is: third-party risk management with different data fields.
Supplier submissions are versioned with provenance, scored against your requirements, and gaps tracked as findings with owners. Because the supplier is the same record used for security and procurement assessments, you cannot end up with sustainability rating a vendor compliant while procurement flags them high-risk and nobody reconciling the two.
Controls and Assurance
ESRS disclosures need controls with owners, frequencies and evidence — exactly like ISO 27001. Those controls live in the shared control library, so a control satisfying both a security and a sustainability requirement is tested once.
When the assurance provider arrives, they pull from one evidence store rather than from four teams' folders.
Targets
Targets carry a baseline year, defined scope, mechanism and interim milestones, with progress tracked against actuals. A target without a baseline and interim points cannot be tracked, and increasingly attracts greenwashing scrutiny rather than credit.
Who It Suits
Organisations in or entering CSRD scope, those receiving Scope 3 data requests from larger customers, and any organisation whose sustainability reporting is heading toward assurance.
If you publish a voluntary sustainability page with no assurance requirement and no framework alignment, this is more machinery than you need today — though the data foundations are cheaper to build before the obligation arrives than after.
Related
- GRC and ESG integration — why the "G" in ESG is the GRC you already run
- Getting started with ESG reporting — frameworks and a practical order of work
- ESG frameworks coverage — CSRD, ESRS, GRI, SASB, TCFD, SFDR
Request a demo to see double materiality and Scope 3 tracking with your own material topics loaded.