Key Takeaways
- ESG compliance splits into two layers: a direct, mandatory layer (ASRS climate reporting) and an indirect layer driven by commercial pressure.
- The indirect layer can reach you before ASRS applies directly, through lender, insurer, tenant or supply chain requests
- There’s no single checklist. Four specific, checkable signals tell you exactly where you stand.
- Once you know your layer, the next steps are specific too, not just another framework to interpret.
- The Climate Readiness Assessment gives you a clear answer for your business in a few minutes.
ESG compliance breaks down into two clear layers for Australian businesses. If you’ve spent an afternoon down a rabbit hole of contradictory explanations, I don’t blame you. Most of what’s out there confuses more than it clarifies. Once you know which layer applies to you, four specific checks and a clear next step follow. That’s what this guide walks through, in plain English.
What does “ESG compliance” mean?
Ask most people what ESG compliance means and you’ll get some version of “complying with ESG standards,” which is exactly what Australian businesses want. The harder truth is there’s no single checklist, since it depends on the nature of your business. With the right approach, though, it does get simple.
For most Australian businesses, it splits into two layers. One is direct and mandatory. The other is indirect, driven by commercial pressure rather than legislation. Working out which layer applies to you, and often it’s both, is the real starting point.
The two layers that make up ESG compliance
The direct layer is ASRS climate reporting, the mandatory disclosure regime set out in AASB S2. If your business meets the Group 1, 2 or 3 revenue and asset thresholds, ASRS applies to you directly, with specific requirements and dates.
The indirect layer has no single piece of legislation behind it. It shows up as Scope 3 data requests from a Group 1 or Group 2 customer, a lender’s climate risk questions during refinancing, or an insurer’s sustainability questionnaire at renewal. None of that requires ASRS to apply to your business first.
| Direct layer (ASRS / AASB S2) | Indirect layer (commercial pressure) | |
|---|---|---|
| Legal basis | The Corporations Act, via the Australian Sustainability Reporting Standards | No single law. Contracts, lending terms and supply agreements |
| Who it applies to | Entities meeting Group 1, 2 or 3 thresholds | Any business whose customers, lenders or insurers ask |
| What triggers it | Crossing a revenue or asset threshold | A specific request from a specific relationship |
| Timing | A phased, deadline-driven rollout from 2024 | Ongoing, and can arrive at any time |
One thing you’re told you must do, the other you end up doing anyway because someone you rely on asked you to.
If ASRS doesn’t apply to my business yet, does ESG compliance still matter?
Often, yes, and this is where the indirect layer catches people out. It usually comes from one of two directions: your financiers, or your customers.
Why your bank or insurer might already be asking
APRA regulates Australia’s banks and insurers, and it tells them to factor climate risk into their lending, insurance and investment decisions. That includes looking at the Scope 3 emissions of the businesses they lend to or insure. It’s the regulatory reason your bank or insurer is suddenly asking questions it never asked before.
Why your customers might already be asking
Supply chain pressure works the same way, just from the other direction. If your major customer is Group 1 or Group 2 mandated, they need your data to complete their own report, regardless of your size.
At this point you might be wondering why you’d bother checking if nothing’s technically forcing you to yet. Businesses that check early get to choose their own timeline. Businesses that wait get told what to provide and when, usually on someone else’s deadline.
Not sure which of these applies to your business? The Climate Readiness Assessment gives you a clear answer in a few minutes, and our ASRS gap analysis picks up from there, whether or not ASRS technically applies to you yet.
What can you check, then?
This is the part that matters most: four concrete checks, each one a straight yes or no, not a guess.
- Whether your revenue or asset base meets the Group 1, 2 or 3 ASRS thresholds
- Whether your major customers are already Group 1 or Group 2 mandated
- Whether a lender or insurer has referenced climate or sustainability data in a recent contract or renewal
- Whether a tenant or supply chain partner has sent you an ESG questionnaire
No single ESG compliance checklist covers all four. But confirming each one tells you exactly which layer you’re dealing with, and that’s the difference between reacting to a request and being ready for it.
What to do once you know where you stand
The specific steps differ depending on which layer you’re in.
If you’re in the direct layer
Four moves make the biggest difference here, and none of them are optional extras.
- Run a baseline assessment against AASB S2’s four disclosure areas: governance, strategy, risk management, and metrics and targets
- Assign a board-level owner for climate risk, since governance oversight is one of those four areas itself
- Get your Scope 1 and 2 emissions data into a proper system rather than a spreadsheet, since that’s what an assurance provider will eventually test
- Build climate scenario analysis into how you plan capital and risk, rather than treating it as a separate exercise
If you’re in the indirect layer
The steps are lighter here, but they still matter.
- Get a basic baseline of your own emissions data ready before a lender or customer asks for it, since these requests tend to arrive with a short deadline
- Read the request carefully: a lender’s climate risk questionnaire is a smaller, different ask than a full ASRS report, and treating it as the same thing wastes effort
- Decide early whether the relationship is significant enough to justify building proper systems now, or whether a one-off response covers this cycle.
How Acumentis helps with each part of this
Working out where you sit is the hard part. Acting on it doesn’t have to be, and that’s exactly where we come in.
- Get clarity on exactly where you stand: ESG Consulting Services is the right starting point if you’re still working it out.
- Meet your ASRS obligations with confidence: Our Climate Disclosure & ASRS Climate Reporting service takes you from gap analysis through to lodgement.
- Give your bank or insurer a real answer: Climate Risk Modelling tests your business against real climate scenarios, backed by data they can trust.
- Move from reporting to genuinely assured: Climate & Nature Assurance gives your data the independent, audit-grade verification ASRS requires.
That’s the real answer to what ESG compliance means for your business: not one definition, but a clear layer, a clear checklist, and a clear next step.
One conversation with our team is usually enough to tell you exactly where you stand and what to do next. Book your free consultation today.
Frequently Asked Questions
Rarely directly, since most ASRS thresholds target larger entities. But a request from a bigger customer or a lender can reach a small business through the indirect layer, well before any threshold applies directly.
ESG compliance is the underlying obligation. ESG reporting is how you publish the data that satisfies it, and we cover that side in detail in our guide, What is ESG Reporting?
Yes. The indirect layer, like lender covenants or customer Scope 3 requests, can create real ESG compliance obligations well before ASRS applies to a business directly.
It depends on the layer. Ignoring a genuine ASRS obligation carries real regulatory consequences, while ignoring a lender or customer’s ESG request usually costs you the relationship instead, often well before a regulator gets involved.

