ESG reporting consultant in Malaysia

What it is

ESG stands for environmental, social and governance, the three areas a company is now expected to measure, manage and report on alongside its financial results. In Malaysia the requirements come from several sources: Bursa Malaysia's Sustainability Reporting requirements for listed companies, the National Sustainability Reporting Framework (NSRF) that adopts the ISSB standards IFRS S1 and IFRS S2 on a phased timeline set by the Securities Commission, MITI's i-ESG framework for the manufacturing sector, and the Simplified ESG Disclosure Guide (SEDG) for SMEs in supply chains. ESG is not a certification. AISO builds the data, the policies and the reporting system; independent assurance, where required, comes from a separate assurance provider.

Who needs it in Malaysia

SME suppliers receiving ESG questionnaires from listed companies and MNCs

Listed companies must report on their supply chain, so procurement teams at Bursa-listed groups, GLCs and multinationals now send ESG questionnaires to their vendors. A supplier that cannot answer with real figures risks losing its panel slot at the next review. SEDG gives an SME a recognised format to answer in.

Manufacturers targeting i-ESG readiness or export buyers

MITI's i-ESG framework sets out what a manufacturing company is expected to put in place in phases, and export buyers in Europe and East Asia increasingly ask for product carbon data. Manufacturers that already run ISO 14001 or ISO 50001 have most of the raw data and need it organised and reported.

Companies preparing for NSRF phased adoption

The NSRF brings IFRS S1 and IFRS S2 into Malaysian reporting on the phased timeline set by the Securities Commission and Bursa Malaysia, starting with the largest Main Market companies and extending to other listed and large non-listed companies. Subsidiaries that feed data into a group report are affected before their own deadline.

Plantation and palm oil supply chain

Mills, estates and downstream processors already hold MSPO certification but buyers now ask for greenhouse gas figures, traceability to plantation, and deforestation-free evidence. An ESG data system turns MSPO records and mill data into disclosures a European or Japanese buyer accepts.

Companies already holding ISO 14001, ISO 45001 or ISO 50001

Environmental monitoring records, energy data, incident statistics and training records collected for ISO audits cover a large share of the common sustainability indicators. The gap is usually a greenhouse gas inventory, a few governance policies and a report structure, which is a much shorter project than starting from nothing.

Our process

1. 01

   Materiality and scope

   We confirm which framework you are reporting against, whether a customer questionnaire, SEDG, the Bursa sustainability statement or IFRS S1 and S2, then run a materiality assessment with your management team and fix the reporting boundary: which entities, sites and periods are in scope.

2. 02

   Data baseline and Scope 1 and 2 greenhouse gas inventory

   We collect fuel, electricity, refrigerant and fleet records, apply the GHG Protocol method with the published grid emission factor for Peninsular Malaysia, Sabah or Sarawak, and set the baseline year. Water, waste, workforce, safety, training and anti-corruption indicators are baselined in the same pass.

3. 03

   Policies and governance

   We draft or update the sustainability policy, code of conduct, anti-bribery policy, human rights and labour policy, and supplier code of conduct, then assign board or management oversight, named data owners for each indicator, and a reporting calendar so the numbers keep coming in after we leave.

4. 04

   Disclosure drafting against the chosen framework

   We write the disclosure in the structure your framework expects: Bursa common indicators for a sustainability statement, the SEDG basic, intermediate or advanced tier for an SME, the governance, strategy, risk management and metrics structure of IFRS S1 and S2, or direct answers to the buyer's questionnaire.

5. 05

   Internal review and readiness for assurance

   We check every reported figure back to its source document, write the methodology note that an assurance provider will ask for, and run a mock assurance review. Where assurance is required, we hand the evidence file to your chosen assurance provider and support you through their queries.

Timeline

A first SME disclosure, whether a SEDG report or a full answer to a customer questionnaire, typically takes three to six months. Most of that time goes into collecting twelve months of utility, fuel and workforce data and settling who owns each number. A listed company preparing its first IFRS S2 aligned climate disclosure usually needs six to twelve months because the reporting boundary is wider, group entities have to be aligned, and the data trail must stand up to assurance. After the first cycle, reporting becomes an annual routine of a few weeks if the data system is kept running.

What affects the cost

• Which framework you report against: a customer questionnaire, SEDG, the Bursa sustainability statement, or IFRS S1 and S2
• Number of entities, sites and countries inside the reporting boundary
• Whether metered data already exists in utility bills and fuel records or has to be reconstructed
• Whether ISO 14001, ISO 45001 or ISO 50001 is already in place and generating records
• Whether Scope 3 emissions, such as purchased goods and upstream transport, are required by your buyer or framework
• Assurance provider fees, quoted separately by the provider you appoint

FAQ