Skip to content

Advanced Audit and Assurance (International) · Developments in sustainability assurance

ESG Information and Assurance Demand: Why Stakeholders Want Assurance

Updated 11 October 2026 · Fact-checked

ESG assurance is an independent practitioner's conclusion that sustainability information is reliable. Stakeholders demand it because ESG data drives investment, lending and regulation, yet is often unaudited, estimated and open to greenwashing. In AAA, explain the demand, name the risks, and link each to the practitioner's work.

Understand ESG Information and Assurance Demand

ESG information covers environmental, social and governance matters: emissions, energy use, diversity, safety, supply chain conduct, board oversight and similar. Companies report it in sustainability reports, integrated reports or a section of the annual report.

Stakeholders use this information to make decisions. Investors use it to judge long-term risk and value. Lenders link pricing to sustainability targets. Customers, employees and regulators use it to judge conduct. If the data is wrong, those decisions are wrong. That is why they want assurance: an independent party gives a conclusion that increases confidence in the information.

ESG data is harder to trust than financial data. Many measures are non-financial, such as tonnes of carbon. Data often comes from outside the entity, such as suppliers. Methods are estimated and judgemental. Frameworks and criteria vary, and internal controls over the data are often immature. Management may also be under pressure to show good performance, for example when bonuses or loan terms depend on it.

Greenwashing is presenting the entity as more sustainable than it is. It can be outright false claims, selective disclosure of good news, vague wording, or misleading comparisons. For the entity it brings reputational damage, legal and regulatory action and loss of funding. For the practitioner it brings a risk of being associated with misleading information, so reputational and liability exposure.

Assurance can be limited (negative-form conclusion, less work) or reasonable (positive-form conclusion, more work). Demand differs by user, and a practitioner must agree suitable criteria and scope with the client before accepting. Assurance adds credibility but does not remove the entity's responsibility for the report.

Key rules to remember

Reasonable assurance conclusion
Positive form: 'in our opinion, the information is prepared, in all material respects, in accordance with the criteria'
Higher level of assurance, more extensive procedures.
Limited assurance conclusion
Negative form: 'nothing has come to our attention that causes us to believe the information is materially misstated'
Lower level of assurance, fewer procedures, mainly enquiry and analytical work.
Preconditions for an assurance engagement
Appropriate subject matter + suitable criteria + sufficient appropriate evidence available + written report
Unsuitable criteria or no access to evidence means the engagement should not be accepted as an assurance engagement.
Greenwashing risk drivers
Pressure + opportunity + weak controls over data + vague criteria
A memory aid for explaining why misleading ESG claims arise.

How to solve ESG Information and Assurance Demand questions

Use this method for any question asking why ESG assurance is needed, what the risks are, or how to respond.

  1. 1Read the requirement and identify the stakeholder: investor, lender, regulator, customer or board.
  2. 2State what decision that stakeholder makes using the ESG information.
  3. 3Identify the scenario's data risks: estimates, third-party data, new systems, weak controls, unclear criteria.
  4. 4Identify greenwashing signals: bold claims, selective metrics, unexplained targets, management incentives.
  5. 5Link each risk to its effect: misleading users, reputational, legal or funding loss for the entity, and exposure for the practitioner.
  6. 6Recommend the response: agree suitable criteria, choose limited or reasonable assurance, plan evidence procedures, use experts if needed.
  7. 7Close with a clear conclusion or advice, written for the audience in the requirement.

Quickest way: User, risk, response

When to use it: Short requirements worth 4 to 8 marks when time is tight.

  1. Write the user and the decision they make.
  2. List two or three data or greenwashing risks from the scenario.
  3. Match each risk to one assurance response.
  4. Add a line on the level of assurance and why.

Common mistakes in ESG Information and Assurance Demand

  • Writing generic points about 'transparency' with no link to the scenario.

    Students recall a memorised list of benefits.

    Fix: Tie every point to a named stakeholder and a fact in the scenario.

  • Treating greenwashing as only a client reputation issue.

    The practitioner's own exposure is overlooked.

    Fix: Add that association with misleading information harms the practitioner's reputation and may bring liability or regulatory action.

  • Saying assurance guarantees the information is correct.

    Confusing assurance with certainty.

    Fix: State that assurance is reasonable or limited, never absolute, and management remains responsible.

  • Ignoring suitable criteria.

    Focus is placed on procedures, not acceptance.

    Fix: Say that criteria must be suitable, such as relevant, complete and measurable, before accepting the engagement.

  • Mixing up limited and reasonable assurance wording.

    Both sound similar.

    Fix: Limited uses a negative form and mainly enquiry and analytics; reasonable uses a positive form and more detailed evidence.

Worked examples

Example 1

A listed manufacturer publishes a sustainability report claiming a 30% cut in emissions. Emissions data comes largely from suppliers and the CEO's bonus depends on the target. The audit committee asks you why independent assurance is needed. Explain in about six points.

Show the solution
  1. Users: investors and lenders rely on the claim to assess climate risk and pricing, so errors mislead their decisions.
  2. Data risk: supplier data is outside the company's control and is estimated, so errors are more likely.
  3. Incentive: the CEO's bonus creates pressure to overstate progress, a greenwashing risk.
  4. Consequences: misleading claims may lead to regulatory action, loss of funding and reputational damage.
  5. Assurance value: independent challenge of data, methods and claims increases user confidence.
  6. Limits: assurance is not a guarantee, and management remains responsible for the report.

Answer: Assurance is needed because users make decisions on a claim built on estimated third-party data and a management incentive to overstate. Independent review reduces greenwashing risk and increases confidence, though it does not remove management's responsibility.

Example 2

A firm is asked to give assurance on a client's 'net zero' statement. The client has no written definition of net zero and keeps no records of its calculations. Advise whether to accept and what the risks are.

Show the solution
  1. Identify the precondition: suitable criteria must exist. 'Net zero' is undefined, so criteria are not suitable.
  2. Identify the evidence precondition: with no calculation records, sufficient appropriate evidence may not be available.
  3. Risk of association: a conclusion on a vague claim could support greenwashing and expose the firm.
  4. Advice: do not accept until the client defines the claim against a recognised framework and keeps records.
  5. Alternative: offer an advisory engagement to help build criteria and controls, then consider limited assurance later.

Answer: Do not accept now. The criteria are unsuitable and evidence may be unavailable, so accepting risks the firm's reputation. Accept later if the client defines criteria and keeps records, probably starting with limited assurance.

Exam tips

  • Always name the stakeholder and the decision they make; this earns scenario marks.
  • Use scenario facts such as incentives, supplier data and new systems to spot risks.
  • Cover the practitioner's risk as well as the client's.
  • For professional skills, write in the form asked, such as a briefing to the audit committee, with clear headings and a firm recommendation.

Practice questions from Developments in sustainability assurance

ESG Information and Assurance Demand in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

ESG Information and Assurance Demand: frequently asked questions

Why is assurance needed on ESG reporting?

ESG information influences investment, lending and regulation, but it is often non-financial, estimated and not audited. Independent assurance gives users more confidence that the information is reliable and not misleading.

What is greenwashing risk for auditors?

It is the risk of being associated with information that overstates sustainability performance. This can harm the firm's reputation and may lead to liability or regulatory action. Careful acceptance, scepticism and suitable criteria reduce it.

What is the difference between limited and reasonable assurance?

Reasonable assurance gives a higher level of comfort with a positive-form conclusion and more extensive procedures. Limited assurance gives a lower level with a negative-form conclusion and mainly enquiry and analytical procedures.

How do you assure non-financial information?

Confirm suitable criteria, understand how the data is produced and controlled, then test it with inspection, recalculation, analytics and third-party evidence. Use experts where the subject matter needs specialist skills.