Building a Sustainability Disclosure Program: A Practical Guide

Document type: Guide Practice area: Corporate — Securities and Disclosure Jurisdiction: United States (federal and state) and European Union Last reviewed: 5 September 2026

Phase 0: Map what actually applies

Before deciding what to report, determine what is required, and by whom. This takes a week and it changes everything downstream.

Ask six questions.

1. Do we have public securities of any kind? Equity, debt, or a continuing disclosure undertaking. If yes, everything we publish is subject to the antifraud provisions of 15 U.S.C. § 78j and, for registered offerings, 15 U.S.C. § 77k — regardless of whether a climate rule applies.
2. What is our revenue attributable to California, and what is our total revenue? The California emissions and climate-risk statutes apply based on doing business in the state and on revenue thresholds, not on being public.
3. Do we have EU entities or EU turnover? The Corporate Sustainability Reporting Directive reaches non-EU groups through EU subsidiaries and branches above thresholds, and brings double materiality with it.
4. What do our credit agreements say? Sustainability-linked margin ratchets, KPI definitions, and certification deadlines.
5. What have we promised customers and what do supplier codes require of us? Reporting obligations, audit rights, and reduction commitments flow through contracts.
6. What environmental claims are already live? On packaging, on the website, in sales materials. Every one needs substantiation under the FTC Green Guides, 16 C.F.R. Part 260, and every one is exposed to competitor suit under 15 U.S.C. § 1125 and to state consumer statutes.

Produce a one-page obligation map listing each regime, the trigger, the deliverable, the first due date, and the owner. This document is the program. Everything else implements it.

Phase 1: Governance before data

Set the structure before generating numbers, because the numbers will need an owner and an approver from the first day they exist.

Appoint a single accountable owner for all sustainability disclosure — the report, the website, the marketing claims, the customer templates, the credit agreement certifications, and the regulatory filings. The most common structural defect is that six functions each own a piece and nobody owns consistency.

Charter the board's oversight. Name sustainability disclosure in a committee charter — audit committee or a dedicated committee — with a reporting cadence, and keep minutes that reflect substantive engagement. This is what distinguishes a company with oversight from one with a slide.

Extend the disclosure committee. Add sustainability disclosure to the agenda alongside periodic reports. Same participants, same discipline, same certification questions.

Assign data ownership by category in writing: stationary combustion, mobile combustion, refrigerants, process emissions, purchased electricity, purchased steam, business travel, employee commuting, waste, procurement spend, upstream and downstream transport, and use of sold products. Each category needs a named owner, a named source system, and a documented extraction method.

Establish legal review as a gate. No public sustainability statement — report, website copy, packaging claim, ratings questionnaire, or customer template — publishes without legal review against the substantiation file.

Phase 2: Build the greenhouse gas inventory

Everything else derives from this. Build it once, build it properly, and derive every other report from it.

Step 2.1: Choose the organizational boundary

Three options. Equity share — account for emissions in proportion to ownership interest. Financial control — account for one hundred percent of emissions from operations over which you have financial control. Operational control — account for one hundred percent of emissions from operations over which you have operational control.

How to choose. Operational control is the most common and usually the most defensible for a manufacturer, because it aligns with the facilities you actually run. Financial control aligns with the financial statements, which makes reconciliation easier. Equity share is used where joint ventures dominate.

Whatever you choose: document the reasoning, disclose the choice, apply it consistently, and do not change it without disclosing the change and its effect. A boundary change that improves the number without any change in physical emissions is the most easily criticized thing a company can do in this field.

Step 2.2: Set the operational boundary and the base year

List every facility, vehicle fleet, and emissions source. Set a base year — a recent year with reliable data — and write the recalculation policy now: what threshold of acquisition, divestiture, structural change, or methodology change triggers recalculation, who approves it, and how it is disclosed. Write this before your next acquisition, not after one that would conveniently reset the baseline.

Step 2.3: Scope 1

Direct emissions from owned or controlled sources.

• Stationary combustion. Natural gas, propane, fuel oil, and biomass consumed in boilers, furnaces, and generators. Source: utility invoices and fuel purchase records. Multiply quantity by the applicable emission factor.
• Mobile combustion. Company-owned or leased vehicles. Source: fuel cards, fleet management systems, or mileage with vehicle class.
• Process emissions. Chemical or physical processes releasing greenhouse gases. Source: process data and engineering calculation.
• Fugitive emissions. Refrigerant leakage from HVAC and process cooling, and other fugitive releases. Source: refrigerant purchase and service records — routinely omitted, and material for facilities with large cooling loads.

Step 2.4: Scope 2, both ways

Indirect emissions from purchased electricity, steam, heat, and cooling.

• Location-based. Consumption multiplied by the average grid emission factor for the region.
• Market-based. Consumption adjusted for contractual instruments — renewable energy certificates, power purchase agreements, supplier-specific rates, and residual mix factors where no contract applies.

Report both. The two figures can differ by an order of magnitude, and reporting only the market-based number without the location-based number is an incomplete picture a skeptical reader will notice — and a plaintiff will characterize.

Document every contractual instrument: quantity, vintage, technology, geography, registry, and retirement evidence. Certificates that were purchased but never retired do not count and their absence from the file is a finding waiting to happen.

Step 2.5: Scope 3, honestly

Fifteen categories, most of which depend on data you do not control.

Screen first. Estimate all fifteen categories roughly, identify which are significant, and concentrate effort there. For most manufacturers, purchased goods and services dominates. For most retailers, purchased goods and use of sold products. For most software companies, purchased goods and business travel.

Choose a method per category and document it.

• Spend-based: procurement spend multiplied by an economic emissions factor. Fast, universal, and crude — it changes when prices change and does not change when you switch to a cleaner supplier at the same price.
• Average-data: physical quantity multiplied by an average factor per unit. Better.
• Supplier-specific: actual data from the supplier. Best, and hardest.
• Hybrid: supplier-specific for the largest suppliers, average-data or spend-based for the tail. This is the realistic target state.

Run a supplier data program for the largest categories: a standard request, a template, a deadline, a follow-up cadence, and an escalation to procurement. Expect a low response rate in year one and build from there.

Compute and disclose the uncertainty. A spend-based figure has an uncertainty range that is easy to estimate and uncomfortable to publish. Publish it anyway, and use the word "estimated," because describing an estimate as a measurement is the disclosure error most likely to be characterized as misleading.

Step 2.6: Emissions factors

Document the source, version, publication date, and unit of every factor used. Factors are updated by their publishers; a factor change alters your results without any change in physical activity, and that change must be identified and explained. A factor library with version control is a small investment that prevents a category of unexplainable variances.

Phase 3: Materiality and risk assessment

Step 3.1: Financial materiality

Assess which climate-related matters a reasonable investor would consider important, under the standard of TSC Industries, Inc. v. Northway, Inc., 426 U.S. 438 (1976), applying the probability-magnitude approach of Basic Inc. v. Levinson, 485 U.S. 224 (1988) to contingent matters.

Step 3.2: Impact materiality, if Europe applies

Double materiality asks additionally whether the enterprise's activities have a material impact on people or the environment. This captures information a U.S. filer would never disclose, and it must be assessed with a documented process — stakeholder identification, impact identification across the value chain, severity and likelihood scoring, and a threshold.

Step 3.3: Physical risk

Facility by facility: location, hazards (flood, storm, wildfire, water stress, extreme heat), exposure, business interruption estimate, insurance availability and cost trend, and mitigation. Then check the risk factors. A company whose facilities flooded last year cannot describe flooding as a hypothetical future risk.

Step 3.4: Transition risk

Policy and legal (carbon pricing, product requirements, disclosure obligations), technology (substitution, stranded assets), market (customer requirements, demand shift), and reputation. Most companies under-disclose transition risk relative to physical risk, which is the wrong emphasis for the majority of them.

Step 3.5: Feed the results into the ordinary disclosure

Where material, climate matters belong in risk factors, MD&A, business description, and legal proceedings under Regulation S-K, 17 C.F.R. Part 229 — with or without a climate-specific rule. MD&A discussion is required where climate matters have had or are reasonably likely to have a material effect on results, liquidity, or capital resources.

Phase 4: Targets and the transition plan

Do not announce a target before the analysis exists. Under Omnicare, Inc. v. Laborers District Council Construction Industry Pension Fund, 575 U.S. 175 (2015), an opinion statement can mislead by omitting facts about its basis that a reasonable investor would not expect — and the paradigm omission is an internal analysis concluding the target is unreachable.

Build the target from the bottom up.

1. Establish the base year inventory.
2. Identify levers: efficiency, electrification, fuel switching, renewable procurement, process change, product redesign, supplier engagement.
3. Estimate each lever's contribution and cost, with a timeline.
4. Sum them. This is your achievable reduction.
5. Compare to the proposed target. Record the gap.
6. Decide what the gap depends on — grid decarbonization, technology that does not exist yet, offsets — and be explicit.
7. Confirm the capital plan funds the levers.
8. Take it to the board committee with the analysis, not a summary.

Then disclose the structure, not just the number. The target, the interim milestones, the levers, their expected contributions, the gap, and what closing it depends on. A target disclosed with its gap is more credible than one disclosed without, and it is far more defensible.

Offsets. If used, disclose them separately from gross emissions, with quantity, vintage, project type, registry, verification standard, and retirement evidence. Do not net them into the headline figure. And do not make unqualified "carbon neutral" claims at the product level — the Green Guides address offset claims specifically, and consumer litigation has concentrated exactly there.

Phase 5: Data controls

The controls are the same ones that govern financial reporting, applied to a different data set. Build them before the first assurance engagement, not during it.

The calculation workbook. Version controlled, with locked formulas, documented factors and their versions, an input tab per data category, a change log, and a preparer and reviewer sign-off. Three people editing an unversioned spreadsheet is the root cause of most restatements in this field.

Evidence. Every input traceable to a source document — an invoice, a meter reading, a system export — retained with the workbook.

Reconciliation. Fuel emissions to fuel expense. Electricity to utility invoices and to metered consumption. Travel to the travel booking system. Waste to hauler invoices. Procurement spend to the general ledger. Reconciliation finds errors that reading does not.

Segregation. The preparer and the reviewer are different people, and the reviewer's work is documented.

Change management. A written policy for methodology changes, boundary changes, factor updates, base year recalculation, and restatement — with thresholds, approvals, and disclosure requirements.

Systems. A spreadsheet is workable for a first inventory and becomes unworkable at scale. Evaluate a carbon accounting platform once the inventory stabilizes, and note that migrating to one requires the documented methodology you should already have.

Phase 6: Assurance readiness

Run a readiness assessment a full year before assurance is required. It costs a fraction of the engagement and it finds the problems while there is time.

What the assessment tests. Whether the methodology is documented. Whether inputs are supported. Whether the workbook can be followed by someone who did not build it. Whether the boundary is applied consistently. Whether factor versions are documented. Whether reconciliations exist. Whether there is a review trail.

Then engage for limited assurance, understanding what it produces: a negative conclusion that nothing came to the practitioner's attention indicating material misstatement. It is not an audit opinion and it does not convert an estimate into a measurement. Reasonable assurance — a positive opinion on evidence comparable to a financial audit — is where the regimes are heading and where the cost steps up sharply.

Use the process. Most companies find more errors in their first assurance engagement than in any internal review, because the provider asks for support the team never had to produce. Treat the findings as a work plan.

Phase 7: Review and publication

Assemble the substantiation file before publication, containing: the inventory workbook and evidence; the methodology document; the factor library; the reconciliations; the target analysis with the gap; the offset documentation; the assurance report; and, for every claim in the report and on the website, the specific support.

Run legal review against the file. Every quantitative statement traced to the workbook. Every qualitative claim traced to support. Every superlative and comparative challenged. Every instance of "measured" checked against whether it was measured.

Check the language for the four recurring errors:

• "Measured" where the figure was estimated.
• An unqualified "carbon neutral," "net zero," "sustainable," or "green" claim.
• A market-based Scope 2 figure presented without the location-based figure.
• A target presented without its basis or its gap.

Reconcile across documents. The sustainability report, the periodic filings under 15 U.S.C. § 78m, the European report, the credit agreement certification, the customer templates, and the website should be read side by side by one person, once, looking only for inconsistency.

Then publish, with the disclosure committee's sign-off recorded and the substantiation file archived as of the publication date.

Phase 8: The annual cycle

Two items on that list are the ones programs omit. The website sweep — product pages and commitment pages accumulate unreviewed claims for years — and the contractual deliverable calendar, which captures credit agreement certifications and customer reporting obligations that live outside the sustainability team's awareness entirely.

Worked example: eighteen months at Arden Composites

Arden Composites — eight hundred million in revenue, structural panels, three U.S. plants, a Dutch distribution subsidiary, heavy California sales, a public bond issue, and a sustainability-linked revolver. Rosalind Kwabena, the general counsel, runs the build.

Month 1: the obligation map. One page. California emissions reporting: in scope on revenue and California activity. California climate risk report: in scope. European CSRD: in scope on a phased basis through the Dutch entity and group turnover. Securities antifraud: applicable to everything published, because of the bonds. Credit agreement: emissions intensity KPI, certification due sixty days after fiscal year end. Customer contracts: two of three largest customers require annual Scope 1–3 on their own templates. Live marketing claims: eleven environmental claims across packaging, website, and sales decks.

The map immediately surfaces the worst problem. The credit agreement KPI uses market-based Scope 2 and an operational control boundary. The sustainability report uses financial control and revenue-based intensity. The two have moved in opposite directions for two years. Nobody had compared them because Treasury prepared one and the sustainability team prepared the other.

Month 2: governance. Rosalind is named accountable owner for all sustainability disclosure. The audit committee charter is amended. Sustainability disclosure joins the disclosure committee agenda. Data ownership is assigned across eleven categories with named owners and named source systems. Legal review becomes a publication gate.

Months 3–7: the inventory. Operational control boundary, documented. Base year set at the prior fiscal year, with a written recalculation policy — a five percent threshold, CFO approval, mandatory disclosure. Scope 1 comes together quickly from fuel invoices, except refrigerants, which nobody had ever counted and which turn out to be four percent of Scope 1. Scope 2 is computed both ways; the location-based figure is 2.7 times the market-based figure, a fact the prior report had not mentioned because it reported only the market-based number.

Scope 3 is the hard eleven weeks. Screening across fifteen categories shows purchased goods and services at roughly seventy percent of the total. The prior report's figure — "we measured our value chain emissions at 412,000 tCO2e" — was entirely spend-based. Rosalind's team computes an uncertainty range of roughly plus or minus forty percent, launches a supplier data program covering the top forty suppliers by spend (representing sixty-two percent of procurement), and gets a thirty-one percent response rate in the first cycle. The recomputed hybrid figure is 388,000 tCO2e — within the uncertainty range, which is itself a useful finding.

Month 8: the target problem. Arden had announced forty percent absolute reduction by 2030. Rosalind finds the supporting engineering memorandum: identified levers reach twenty-three percent; the remainder was described internally as "dependent on grid decarbonization and future technology." The public announcement said none of this. Under Omnicare, that omission is the exposure.

The fix is not to abandon the target. It is to disclose its structure: the levers, their contributions, the gap, and the dependencies. The revised disclosure is longer, less confident, and materially more defensible. The board committee approves it on a record that includes the engineering analysis.

Month 9: the product claim. The flagship panel is marketed as "carbon neutral," resting on 2014-vintage forestry credits with no additionality documentation in Arden's files. Under the Green Guides, unsubstantiated; under § 43(a), exposed to a competitor suit; under California and other state consumer statutes, exposed to a class. The claim comes off the website in a week and off packaging at the next print run, replaced by a specific statement of cradle-to-gate footprint with methodology, plus a separate sentence describing offsets retired with vintage, registry, and standard.

Months 9–12: controls. A version-controlled workbook replaces four spreadsheets. A factor library with sources and versions. Reconciliations: fuel emissions to fuel expense, electricity to utility invoices, travel to the booking system, procurement to the general ledger. The electricity reconciliation finds a plant that had been double-counted for two years — an error of eleven percent of Scope 2 that no amount of reading the report would have caught.

Month 13: assurance readiness assessment. Findings: refrigerant records incomplete at one plant; renewable energy certificate retirement evidence missing for one year; no documented review trail before the current year. All three fixed within the quarter.

Month 15: limited assurance engagement. Completed with two immaterial adjustments. Rosalind's memorandum to the audit committee is explicit that limited assurance is a negative conclusion, not an audit opinion, and that it does not make the Scope 3 estimate a measurement.

Month 16: reconciliation across regimes. One inventory; bridge schedules to the credit agreement KPI, the California filings, the European report, and the two customer templates. The credit agreement is amended at the next amendment opportunity to align the KPI definition with the inventory.

Month 17: the website sweep. Eleven live environmental claims found. Four are fine. Five are qualified or rewritten. Two — an unqualified "sustainable sourcing" claim on the careers page and a "100% recyclable" claim on a packaging component that is not accepted in most municipal streams — are removed.

Month 18: publication, with substantiation file archived, disclosure committee sign-off recorded, and board minutes reflecting substantive review.

What it cost. Roughly one and a half full-time equivalents for eighteen months, an assurance engagement, and a readiness assessment. What it bought: the double-counted plant, the metric divergence, the unsupported product claim, and the undisclosed target gap — four findings, each of which was a live liability, discovered internally rather than by a plaintiff.

Special situations

You are a private company with no securities. The securities regime does not apply; California, contracts, and marketing law all may. Do not assume you are out of scope — the California statutes turn on revenue and California business activity, and the contractual obligations are the ones most likely to bite first.

You are a supplier being asked for data by customers. Build the inventory once and answer every template from it. Push back on templates demanding data you do not have, and answer with what you have plus the method — never invent a number to fill a cell, because that number will be incorporated into a customer's own reported figure and it will be traced back to you.

You are acquiring a company. Diligence: existing inventory and its methodology; assurance history and findings; live environmental marketing claims and their substantiation; contractual sustainability commitments including credit agreement KPIs; regulatory filings and their accuracy; and pending or threatened greenwashing claims. Then plan the base year recalculation before closing.

You are being acquired. Expect the above. Assemble the substantiation file in advance; a buyer that finds unsupported claims late will either price them or demand indemnity.

You have a sustainability-linked financing. Read the KPI definition against your inventory methodology before the certification is due. If they diverge, raise it with the agent early — a negotiated amendment is much better than a certification the borrower cannot support.

You operate in Europe and the United States. Two materiality standards, two report scopes, one underlying data set. Build the bridge schedules and read both reports side by side annually. The inconsistency between them is the risk, not the difference in scope.

Common mistakes

Starting with the report. Build the inventory, the controls, and the assessments first. A designed report full of unsupported claims is worse than no report.

Reporting only market-based Scope 2. Report both, always.

Calling an estimate a measurement. The single most correctable disclosure error in the field.

Announcing a target before the analysis exists. And announcing it without the gap.

Unqualified product-level neutrality claims. Report gross; disclose offsets separately with particulars.

Letting marketing own the language. The report is a disclosure document; it goes through the same gate as a periodic filing under 15 U.S.C. § 78m.

Leaving the website out of scope. Old claims on product and commitment pages are live statements.

Missing the credit agreement certification — or delivering one computed on a different basis than the report.

Assuming the private company is out of scope. California and contract obligations do not care.

Skipping the base year recalculation policy until after an acquisition.

Treating assurance as a defense. It is evidence of process, not a warranty of accuracy.

Answering questionnaires ad hoc. Every response is a public statement.

Handling ratings, indices, and questionnaires

Between the mandatory filings and the annual report sits a large volume of semi-public reporting that almost no company controls properly.

What arrives. ESG ratings agency questionnaires; index inclusion submissions; customer sustainability scorecards; supplier platform assessments; investor questionnaires; and industry benchmarking surveys. Each asks for data in its own format, on its own schedule, with its own definitions.

Why they are risky. They are completed under time pressure by people who are not disclosure lawyers, they frequently ask questions the company cannot answer precisely, and the answers become public or semi-public. A questionnaire response inconsistent with the annual report is exactly the inconsistency a plaintiff or a regulator will find, and the company will have no record of who answered it or on what basis.

The fix is procedural and cheap.

1. Route every questionnaire through the same owner. No exceptions, including ones addressed to procurement or investor relations.
2. Answer from the base inventory and the substantiation file only. If the questionnaire asks for a figure the company does not have, say so rather than estimating on the spot.
3. Log every response — who asked, what was asked, what was answered, on what basis, and when.
4. Legal review before submission, proportionate to the audience.
5. Reconcile annually. Read the year's questionnaire responses against the published report.

On ratings themselves. A poor rating is not a legal problem. A rating obtained by giving an answer the company cannot support is. Where a rating methodology rewards a claim the company cannot substantiate, the correct answer is the lower score.

Supplier engagement in practice

Scope 3 category one — purchased goods and services — usually dominates the inventory, and improving it means getting data from suppliers who have no obligation to provide it.

Segment first. Rank suppliers by spend. The top forty to fifty typically represent sixty to eighty percent of procurement value. Effort concentrated there moves the number; effort spread evenly does not.

Ask for the right thing. Not "your emissions" — a supplier's total emissions are useless without an allocation to your purchases. Ask for a product carbon footprint for the items you buy, or the supplier's total emissions plus a defensible allocation basis (revenue share, unit share, mass share).

Make it easy. A short template, a clear definition of each field, a stated methodology preference, a realistic deadline, and a named contact who can answer questions.

Escalate through procurement, not sustainability. A request from the sustainability team is a favor. The same request attached to a supplier scorecard that procurement uses in sourcing decisions is a requirement. Response rates roughly double when procurement owns the ask.

Expect a slow ramp. Thirty percent in year one, fifty in year two, and a long tail that never responds. Build the hybrid method so the tail stays on average-data or spend-based estimation without breaking the total.

Handle the data you receive carefully. A supplier figure you incorporate becomes part of your reported number, and your disclosure should describe the source and the coverage percentage. Disclose what proportion of Scope 3 category one is supplier-specific versus estimated — that percentage, improving over time, is a more meaningful indicator of program maturity than the emissions figure itself.

And reciprocate. Your customers are asking you the same questions. A company that answers well is easier to buy from, which is an underappreciated commercial argument for doing this properly.

Managing the legal risk of the program itself

Building a program generates documents. Some of them are helpful and some of them are exhibits.

Assume everything is discoverable. The engineering memorandum concluding a target is unreachable, the readiness assessment listing control gaps, the internal email questioning an offset's additionality — all of it will be read aloud if there is litigation. The correct response is not to stop creating these documents. A program without internal analysis is a program without a basis, and the absence is worse than the content.

The correct response is to make the disclosure consistent with the analysis. If the internal memorandum says the target has a seventeen-point gap, disclose the gap. If the readiness assessment found control weaknesses, fix them and document the remediation. The document becomes evidence of a diligent process rather than evidence of a known misstatement.

Privilege has limits here. Legal advice about disclosure obligations is privileged. The greenhouse gas inventory is not privileged — it is a business record. An assessment prepared by a consultant at the direction of counsel for the purpose of providing legal advice may be protected; the same assessment commissioned by the sustainability team as a business matter is not. Decide the purpose before the engagement, structure it accordingly, and do not pretend afterward.

Do not over-claim privilege. Routing routine operational work through counsel to cloak it rarely survives a challenge and damages credibility on the assertions that are legitimate.

Document decisions, including the ones not to disclose. A materiality determination that a matter is not material is a decision worth recording with its reasoning. A decision recorded contemporaneously with a rationale is defensible; the same decision reconstructed later is not.

Resourcing and sequencing for a first program

What it actually takes. For a mid-sized company with straightforward operations, roughly one full-time equivalent for the build year plus fractional time from finance, legal, procurement, and facilities, an assurance readiness assessment, and an assurance engagement. For a complex multinational, several times that.

Sequence to the first hard deadline. Work backward from the earliest binding date on the obligation map — usually a credit agreement certification or a California filing — and build only what that deadline requires. A complete program built for a deadline eighteen months out, at the expense of the certification due in ninety days, is the wrong order.

Buy the boring things. A carbon accounting platform, a factor library subscription, and an assurance readiness assessment cost less than the internal time spent building substitutes, and they come with the documentation an assurance provider will ask for.

Do not start with the report. Companies that begin by hiring a communications firm to design a sustainability report end up with a beautiful document containing unsupported claims. Build the inventory, then the controls, then the assessment, then the report.

Do not skip the obligation map. It takes a week, it costs nothing, and it is the only artifact that prevents the program from being aimed at the wrong regime.

What good looks like

A finished program has these artifacts, and their absence is the fastest way to assess a program you did not build.

1. The obligation map, current, with owners and dates.
2. A written boundary and methodology document.
3. A version-controlled calculation workbook with evidence, factor library, and change log.
4. Reconciliations to financial and operational data.
5. A documented review trail with preparer and reviewer separation.
6. A materiality assessment with a documented process and conclusions.
7. Physical and transition risk assessments, feeding the risk factors and MD&A under Regulation S-K.
8. A target analysis including the gap, board-approved on the record.
9. A substantiation file for every public claim.
10. A change management and restatement policy.
11. An assurance readiness assessment and engagement.
12. A contractual deliverable calendar.
13. An annual website claim sweep record.
14. Bridge schedules reconciling every reported figure to the base inventory.
15. Board committee minutes reflecting substantive engagement.

If a program is missing more than three of these, it is producing numbers it cannot defend.

Phase 9: When something goes wrong

An error is found in prior-year data. Assess materiality. Apply the restatement policy. If restatement is required, restate with a clear description of what changed and why, and consider whether prior public statements need correction. A quietly changed prior-year figure with no explanation is worse than the original error.

A target will be missed. Do not wait until the deadline. Disclose the revised expectation when the internal view changes, with the reasons. The securities exposure comes from the gap between what management knew and what it said — not from missing a target.

A marketing claim is challenged. Pull the substantiation file. If the support is inadequate, stop the claim immediately and fix it; the Green Guides framework and the § 43(a) standard both reward prompt correction and punish continued use.

A methodology change would improve the number. Apply the change management policy. Disclose the change, quantify its effect separately from the underlying change in emissions, and be prepared to explain why the change is an improvement rather than a convenience.

An acquisition or divestiture occurs. Apply the base year recalculation policy. Disclose the recalculation and its effect.

Related documents

• Climate and Sustainability Disclosure: What Companies Report and to Whom
• Climate Disclosure Readiness Checklist: A Practical Checklist
• Sustainability Reporting Toolkit: Governance, Data Controls, and Assurance
• Public Company Disclosure: Periodic Reports, Regulation FD, and Insider Trading Liability
• False Advertising Under the Lanham Act: Literal Falsity, Materiality, and Competitor Standing
• Securities Disclosure Toolkit: Policies, Blackout Calendars, and 10b5-1 Plans

This guide is general information, not legal advice, and does not create an attorney-client relationship.