Skip to main content

GOV-5 - Risk management and internal controls over sustainability reporting

Updated over 5 months ago

ESRS Standard

The company shall disclose the main features of its risk management and internal control system in relation to the sustainability reporting process.

This disclosure requirement aims to provide an understanding of the company's risk management and internal control procedures in relation to sustainability reporting.

The company discloses the following information:

  • (a) Scope and key characteristics: The scope, key features and components of the risk management and internal control procedures and systems in relation to sustainability reporting.

  • b) Risk assessment approach: The risk assessment approach used, including the method used to prioritize Risks.

  • c) Material risks and mitigation strategies: The key Risks identified and the corresponding mitigation strategies, including associated controls.

  • d) Integration into internal processes: A description of how the company integrates the results of its risk assessment and internal controls related to the sustainability reporting process into relevant internal functions and processes.

  • e) Reporting: A description of the regular reporting of the results referred to in point (d) to the Administrative, management and supervisory bodies.

Strategy

This chapter sets out disclosure requirements to provide an understanding of the following:

  • (a) The elements of the company's strategy that relate to or influence sustainability aspects, its business model and its Value chain.

  • b) How the interests and views of the company's stakeholders are reflected in the company's strategy and business model.

  • c) The results of the company's assessment of the material impacts, risks and opportunities, including how they are incorporated into its strategy and business model.


Application Requirements (AR)

AR 11 This disclosure requirement focuses exclusively on the internal control processes for the sustainability reporting process. The company may consider Risks, for example in relation to the completeness and integrity of the data, the accuracy of the estimation results, the availability of data on the upstream and/or downstream Value chain and the timing of the availability of the information


Examples from previous practice

Examples serve only as an indication of how a disclosure requirement has been stated by other companies to date. Audited ESRS reports are not yet available. There is no guarantee of accuracy and completeness.

GOV-5 - Risk management and internal controls over sustainability reporting

The internal control system for financial reporting has already been established and is described in detail in the risk management section of the Group management report. As the company will publish its first non-financial report in 2026, the risk management and internal control processes relating to sustainability reporting are not yet fully established and the necessary internal controls for sustainability reporting have yet to be defined.

The ESG controls are to be defined next year as part of the internal control system (ICS) and then implemented. One possible control measure involves setting up an organizational structure and defining responsibilities for ESG reporting. This is supplemented by procedures for checking, reviewing and approving the quality of the data used, particularly with regard to Greenhouse Gases (GHG) reporting. These controls aim to ensure accuracy and accountability in relation to ESG data and risk management.

General information on the company's enterprise risk management (ERM) can be found in the Annual Financial Report 2023. Specific information on the risk assessment approach applied can be found in chapter IRO-1 - Description of the processes for identifying and assessing material impacts, risks and opportunities.

This article has been machine translated. In case of errors, please contact [email protected].

Did this answer your question?