Advanced Audit and Assurance (International) · The assurance of sustainability
Sustainability and Integrated Reporting Frameworks for ACCA AAA
Updated 11 October 2026 · Fact-checked
Sustainability reporting frameworks set out what an entity discloses about its environmental, social and governance impacts. The IIRC framework shapes integrated reporting around value creation and six capitals. GRI covers impacts on the world. ISSB IFRS S1 and S2 cover sustainability risks and opportunities that affect enterprise value. In AAA, you judge which suits the scenario and what it means for assurance.
Understand Sustainability and Integrated Reporting Frameworks
Sustainability means meeting the needs of the present without harming the ability of future generations to meet theirs. For a business, it means managing its effects on the environment, people and society, as well as making profit. Stakeholders now ask for reliable information on these effects, and that creates demand for assurance.
The triple bottom line measures performance on three fronts: people (social), planet (environmental) and profit (economic). It is often summarised as the three Ps. It stops the entity judging success on financial results alone. The weakness is that the three elements are measured in different units, so they cannot easily be added into one figure.
Integrated reporting is built on the framework of the IIRC (now part of the IFRS Foundation). It produces an integrated report, a concise communication about how strategy, governance, performance and prospects lead to value creation over the short, medium and long term. It uses six capitals: financial, manufactured, intellectual, human, social and relationship, and natural. Its guiding principles include strategic focus, connectivity of information, stakeholder relationships, materiality, conciseness, reliability and completeness, and consistency and comparability. It is principles-based, so it has no fixed list of indicators. Its main audience is providers of financial capital.
GRI Standards are used for standalone sustainability reports. They are built on impact materiality: the entity reports its significant impacts on the economy, environment and people, and so serve a wide range of stakeholders. They have universal standards plus topic standards for areas such as emissions, labour practices and anti-corruption. Entities state which standards they have used.
ISSB standards are issued by the International Sustainability Standards Board. IFRS S1 requires disclosure of sustainability-related risks and opportunities that could reasonably be expected to affect the entity's prospects, organised around governance, strategy, risk management, and metrics and targets. IFRS S2 applies the same structure to climate-related risks and opportunities, including physical and transition risks, and requires disclosure of greenhouse gas emissions. The focus is financial materiality (enterprise value), aimed at investors and lenders. The reports are issued alongside the financial statements. Whether they are mandatory depends on each jurisdiction's adoption.
Key rules to remember
- Triple bottom line
- People (social) + Planet (environmental) + Profit (economic)
- Three dimensions of performance. They are not summed into one number.
- Six capitals (IIRC)
- Financial, manufactured, intellectual, human, social and relationship, natural
- Integrated reporting shows how the entity uses and changes these capitals to create value.
- IFRS S1 / S2 structure
- Governance, strategy, risk management, metrics and targets
- The four content areas for both standards. S2 applies them to climate.
- Materiality lens
- GRI = impact materiality; ISSB = financial (enterprise value) materiality
- The key distinction between the two sets of standards.
- Integrated reporting vs sustainability reporting
- Integrated report = value creation story for capital providers; sustainability report = wider ESG impacts
- An integrated report is one concise report linking financial and non-financial information.
How to solve Sustainability and Integrated Reporting Frameworks questions
Use this method for any question on sustainability or integrated reporting frameworks.
- 1Read the requirement and note the verb: explain, compare, evaluate or advise.
- 2Identify the audience in the scenario: investors, wider stakeholders, regulators or the board.
- 3Pick the framework that fits that audience and name its materiality lens.
- 4Apply it to the facts: link the entity's activities to the capitals, TBL elements or S1/S2 content areas.
- 5Point out gaps, risks or weaknesses, such as no fixed metrics, subjective data or greenwashing.
- 6Link to assurance: state what the auditor must check, such as suitable criteria, evidence and the type of assurance.
- 7Close with a clear recommendation and use professional skills such as scepticism and commercial awareness.
Quickest way: Audience, lens, content, assurance
When to use it: Use this when time is short and the question asks you to compare frameworks or advise on which to use.
- Audience: who will use the report?
- Lens: impact (GRI) or financial materiality (ISSB), or value creation (IIRC).
- Content: list the key elements from the framework in two or three points.
- Assurance: state one risk to the information and one procedure to address it.
Common mistakes in Sustainability and Integrated Reporting Frameworks
Saying integrated reporting and sustainability reporting are the same thing.
Both use non-financial information, so they seem alike.
Fix: State that an integrated report is one concise value-creation report, while sustainability reporting covers wider ESG impacts in more detail.
Mixing up GRI and ISSB materiality.
Both use the word materiality.
Fix: Write GRI as impact on the world and ISSB as effect on enterprise value, then use that in your comparison.
Treating the triple bottom line as a calculation that gives one profit figure.
The word bottom line suggests a number.
Fix: Say it is three separate dimensions, each measured in its own way.
Listing the six capitals without applying them to the scenario.
It is easy marks to recall, so students stop there.
Fix: Link each capital named to a specific fact, such as staff training as human capital.
Saying IFRS S2 covers all sustainability topics.
Students blur S1 and S2.
Fix: S1 is the general requirements for sustainability risks and opportunities. S2 is specific to climate.
Ignoring assurance implications.
The topic feels like reporting only, and AAA is an audit paper.
Fix: Always add what the auditor needs: suitable criteria, evidence over data systems, and the level of assurance.
Worked examples
Example 1
A listed manufacturer plans to publish an integrated report. The board asks you, as the assurance partner, to explain how it differs from a standalone sustainability report and what the main assurance challenges are.
Show the solution
- Purpose: an integrated report is one concise communication showing how strategy, governance, performance and prospects create value over time. A sustainability report details the entity's environmental and social impacts.
- Audience: the integrated report mainly serves providers of financial capital. A sustainability report often serves a wider group of stakeholders.
- Structure: the integrated report uses the six capitals and guiding principles such as connectivity and materiality. It is principles-based, with no fixed indicators.
- Challenge one: criteria. Because the framework is principles-based, the auditor must judge whether the criteria are suitable, and management judgement makes the information more subjective.
- Challenge two: data. Non-financial data may come from systems without strong controls, so the auditor must test the underlying systems and sources.
- Challenge three: forward-looking statements and links to financial data. The auditor must check consistency with the financial statements and challenge claims with scepticism.
Answer: An integrated report is a concise value-creation report for capital providers, built on six capitals and principles. A sustainability report covers wider impacts for broader stakeholders. Assurance challenges are unsuitable or subjective criteria, weak non-financial data controls, and forward-looking and linked information.
Example 2
A group wants to report on climate risks to investors and also on its wider environmental and social impacts. Advise which standards it should use and why.
Show the solution
- Identify the two needs: investor information on climate risk, and information on wider impacts.
- For investors, ISSB standards fit. IFRS S2 covers climate-related risks and opportunities, and IFRS S1 sets the general framework. Both use financial materiality, meaning effects on enterprise value.
- For wider impacts, GRI Standards fit. They use impact materiality and serve a wide range of stakeholders.
- Content: under S1 and S2 the group must disclose governance, strategy, risk management, and metrics and targets, including greenhouse gas emissions for S2.
- Conclude that the standards complement each other. The group can use ISSB for investors and GRI for stakeholders, and say clearly which has been applied.
- Assurance: the auditor needs to confirm the criteria used are stated and suitable for each report.
Answer: Use IFRS S1 and S2 for investor-focused climate and sustainability risk information, and GRI Standards for wider impacts. They differ in materiality lens and audience, so they can be used together with clear disclosure of which applies where.
Exam tips
- Always name the audience and materiality lens when comparing frameworks. These are the easy marks examiners look for.
- Apply the framework to the scenario. A list of capitals or S1 content areas on its own earns little.
- Link every framework answer to assurance: suitable criteria, data controls and the level of assurance.
- Write short, well-organised points with headings. This helps the professional skills marks for communication.
- Do not state a legal requirement to apply ISSB standards. Say it depends on each jurisdiction's adoption.
Practice questions from The assurance of sustainability
- Harlow Mining reports sustainability data using the Global Reporting Initiative (GRI) Standards and engages an assurer for limited assurance…
- Audit firm Brandt & Co is engaged to provide limited assurance on the sustainability disclosures of Kiln Energy, which are prepared under IF…
- Orla Group publishes an integrated report prepared using the IFRS Foundation's Integrated Reporting Framework. The auditor is engaged to giv…
- When planning the limited assurance engagement on Zephyr plc's sustainability report, Marlow & Co considers materiality. Which statement bes…
- Cobalt Ltd's auditor is asked to perform a sustainability assurance engagement. The firm has not yet designed engagement-level quality respo…
Sustainability and Integrated Reporting Frameworks in other exams
The same ground in other exams, if you are preparing for more than one or want another angle on it.
Sustainability and Integrated Reporting Frameworks: frequently asked questions
What is the difference between integrated reporting and sustainability reporting?
Integrated reporting gives one concise report on how the entity creates value using six capitals, mainly for providers of financial capital. Sustainability reporting gives more detail on environmental and social impacts for a wider audience. They can complement each other.
How do GRI standards differ from ISSB standards?
GRI uses impact materiality, meaning the entity's effects on the economy, environment and people, for many stakeholders. ISSB uses financial materiality, meaning sustainability matters that affect enterprise value, for investors and lenders.
What do IFRS S1 and S2 cover?
IFRS S1 sets general requirements for disclosing sustainability-related risks and opportunities. IFRS S2 covers climate-related risks and opportunities. Both are organised around governance, strategy, risk management, and metrics and targets.
What is the triple bottom line in AAA?
It measures performance by people, planet and profit instead of profit alone. In AAA, use it to explain why entities report beyond financial results and what assurance may be requested on those areas.