ESG compliance, investigations and sustainability risk management have developed into a domain in which reputation, legal norm-setting, board responsibility and evidentiary discipline are increasingly intertwined. Whereas ESG was long approached primarily as part of corporate social responsibility, investor relations or strategic positioning, it is now clear that sustainability claims, human rights obligations, climate reporting, supply chain responsibility and social governance issues have acquired a much harder legal and supervisory significance. The central question is no longer merely whether an undertaking can present a compelling ESG narrative, but whether it can support that narrative with reliable data, demonstrable governance, verifiable processes and factual conduct that corresponds with its external positioning. ESG is thereby shifting from ambition to accountability, from communication to control, and from policy statement to testable governance reality. In that shift, a new risk domain is emerging in which misleading sustainability claims, poor data quality, insufficient visibility over suppliers, unaddressed human rights risks, weak internal escalation and inadequate control over sustainability information can develop into enforcement matters, civil liability risks, reputational damage and internal governance crises.
That development has direct significance for Strategic Integrity Management and Integrated Financial Crime Risk Management. ESG risks do not stand apart from classic integrity risks, but touch the same questions that are central to Financial Crime Risks: which information is reliable, which conduct is factually demonstrable, which risks are known or should have been known, which decisions were taken on the basis of which data, and how has board-level oversight been organised around signals, exceptions and escalations? An undertaking that communicates ambitious climate targets without sufficient visibility over actual emissions data in its value chain does not merely run reputational risk, but also disclosure and misrepresentation risk. An undertaking that publishes human rights policies without effective control over high-risk suppliers creates a vulnerability that affects governance, legal due care, contractual control and possible involvement in serious supply chain failures. An undertaking that uses ESG data in financing, reporting, procurement processes or investor communications without sufficient verification introduces an evidentiary and reliability issue comparable to the risks known from fraud, market information, assurance statements and supervisory reporting. ESG should therefore not sit at the margins of compliance, but at the centre of an integrated model for governance, investigations, risk management and board accountability.
ESG as an integrity, reputation and enforcement domain
ESG has become an integrity domain because sustainability positioning is increasingly assessed by reference to the gap between promise and reality. That gap may arise from overly ambitious claims, incomplete data, selective communication, weak governance or insufficient control over factual execution within the organisation and the supply chain. In an environment in which undertakings publicly report on climate ambitions, diversity, human rights, responsible procurement, circular production, social safety and ethical business conduct, the reliability of those statements becomes an essential component of corporate accountability. ESG thereby touches the question whether an undertaking gives a fair and accurate picture of its societal impact, operational choices and risk profile. Where external statements do not align with internal facts, an integrity issue arises that extends beyond reputation management. The issue then concerns the credibility of management, reporting, internal control and decision-making. An insufficiently substantiated ESG claim is not merely an unfortunate formulation, but may be viewed as a symptom of inadequate risk management, deficient verification or board-level overestimation of the organisation’s control position.
The reputational dimension of ESG is particularly powerful because sustainability claims directly affect trust. Stakeholders expect not only that an undertaking complies with formal norms, but also that it acts carefully, transparently and consistently in areas of acute societal sensitivity. Greenwashing, social washing, weak supply chain transparency or selective sustainability communication can therefore rapidly result in loss of credibility with customers, financiers, regulators, employees, civil society organisations and business partners. In ESG matters, reputational damage often arises not only from the underlying fact, but from the perception that the undertaking claimed more than it could substantiate, ignored signals, downplayed internal warnings or delayed correction until external pressure emerged. Reputational risk is therefore intensified by governance conduct. An organisation that transparently acknowledges where limitations exist, where data are uncertain and which improvement measures are being taken occupies a different position from an organisation that presents a complete and optimistic sustainability picture while the internal reality is fragmented, uncertain or insufficiently controlled.
The enforcement dimension makes ESG a domain that must be structurally connected with legal strategy, compliance management, internal audit, risk management and investigations. Supervisory authorities, investors, claimant organisations and other stakeholders are increasingly focused on whether sustainability information is reliable, whether claims can be factually substantiated and whether undertakings have taken sufficient measures to identify, mitigate and report known risks. ESG is thereby shifting from voluntary positioning to testable responsibility. That shift calls for a different governance reflex. ESG can no longer be treated as a separate communications stream, detached from legal, finance, compliance, tax, procurement, operations, human resources and audit. The legal vulnerability often lies precisely in that fragmentation: marketing holds the claims, sustainability holds the ambitions, procurement holds supplier information, finance holds reporting data, legal holds normative interpretation, compliance holds escalation channels and audit holds testing findings. Without integrated direction, the risk arises that no one carries the full picture. From the perspective of Strategic Integrity Management, ESG is therefore an enforcement domain requiring coherence between factual control, legal interpretation, board decision-making and demonstrable remediation.
Sustainability risk management as a broadening of classic compliance
Sustainability risk management broadens classic compliance because the concept of risk extends far beyond adherence to defined rules. Traditional compliance is often focused on legal obligations, policy standards, procedures, training, monitoring and escalation. ESG adds a more dynamic and material concept of risk, requiring undertakings to demonstrate that they understand the factual effects of their activities, the vulnerabilities in their value chain and the reliability of their external positioning. That makes sustainability risk management fundamentally different from an additional chapter in the compliance manual. It requires a risk approach in which climate impact, social conditions, governance quality, data reliability, human rights, supplier risks, product claims, financing terms, procurement requirements and reporting obligations are assessed in connection with one another. The central question is not only whether a procedure exists, but whether that procedure is actually capable of identifying, prioritising, escalating and controlling material sustainability risks.
That broadening has important consequences for the design of compliance functions and governance processes. ESG risks often manifest outside the traditional legal department or compliance function. They arise in procurement decisions, product development, marketing communications, data collection, HR policy, supply chain management, financing documentation, reporting processes and strategic investment decisions. No single function can therefore carry the full ESG risk picture on its own. Sustainability risk management requires information from different parts of the undertaking to be brought together and translated into board-relevant insights. A supplier with elevated human rights risk is not merely a procurement issue. An uncertain emissions factor is not merely a data issue. A sustainability claim in a campaign is not merely a marketing decision. An ESG target in a financing agreement is not merely a treasury matter. Each of these examples may have a compliance, governance, reputation, disclosure and enforcement dimension. The strength of sustainability risk management lies in its ability to connect such signals at an early stage before they develop into incidents.
Within Strategic Integrity Management, sustainability risk management should function as a structural extension of the control and accountability model. This means that ESG risks must be translated into clear risk categories, control objectives, ownership, decision-making criteria, escalation thresholds, documentation requirements and testing mechanisms. An undertaking that takes ESG seriously must be able to show which claims it makes, which data underpin them, which uncertainties exist, which assumptions are used, who is responsible for verification, which exceptions have been identified and which corrective actions have been taken. Sustainability risk management thereby becomes an evidentiary discipline. It concerns the ability to explain, after the event, why certain sustainability information was considered reliable, why certain suppliers or projects were regarded as acceptable, why certain targets were realistic and how the organisation dealt with signals of deviation. That evidentiary position is essential in the context of Integrated Financial Crime Risk Management, because ESG risks too may ultimately give rise to questions concerning misrepresentation, fraud, weak governance, insufficient oversight and deficient control over integrity-sensitive processes.
ESG compliance as a matter of data, governance and material reliability
ESG compliance stands or falls by data quality. Sustainability information is increasingly used in annual reports, financing documentation, procurement processes, investment decisions, product information, supply chain reporting and public positioning. This gives ESG data a legal and governance significance comparable to core financial and operational information. Unreliable, incomplete or insufficiently traceable ESG data can lead to flawed decision-making, misleading reporting and vulnerability towards regulators, financiers and claimants. The difficulty is that ESG data often derive from diverse systems, external suppliers, estimates, assumptions, sector benchmarks and manual reporting processes. This increases the risk of inconsistencies, gaps and differences of interpretation. An emissions figure, diversity percentage, safety indicator, supplier classification or human rights assessment can only provide a solid compliance basis if it is clear how the information was collected, validated, documented and controlled. Without that traceability, ESG compliance remains vulnerable to challenge.
Governance is the link between data and responsibility. The existence of sustainability information is insufficient where it is unclear who owns the information, who assesses it, who may use it, who must escalate deviations and who ultimately bears board-level responsibility for external publication or strategic use. Many ESG risks arise because different functions work with different definitions, systems and objectives. Sustainability may apply different materiality concepts from finance; procurement may weigh supplier risks differently from legal; communications may formulate claims on the basis of ambitions while risk management focuses primarily on uncertainties; compliance may receive signals that are not incorporated into public reporting. Governance must break through that fragmentation by creating clear decision-making lines. This does not mean that every ESG decision must be centralised, but it does mean that material information, uncertainties and signals must be sufficiently visible at the level at which they truly matter.
Material reliability forms the normative core of ESG compliance. It is not only a matter of technical accuracy, but of whether the information presented gives a fair, verifiable and non-misleading picture of the relevant reality. A claim may be grammatically correct and still be materially misleading where important limitations, exceptions or dependencies are omitted. A target may have been approved internally and still become vulnerable where the underlying assumptions are insufficiently realistic. A supply chain statement may formally refer to policies and audits, while being factually weak if the undertaking has insufficient visibility over subcontractors, geographic risk factors or known incidents. Material reliability therefore requires a critical assessment of context, proportionality, completeness and evidentiary support. Within Integrated Financial Crime Risk Management, this aligns with the same logic that applies to Financial Crime Management: documentation must not merely exist, but must show that risks have been understood, weighed, monitored and, where necessary, corrected.
Investigations into greenwashing, supply chain failures and sustainability claims
Investigations become indispensable when ESG signals can no longer be dismissed as reputational issues or operational imperfections. In cases involving suspected greenwashing, supply chain failures or misleading sustainability claims, the undertaking must be capable of carefully establishing the facts, reconstructing the origin of information, analysing decision-making lines and assessing whether the issue concerns an isolated error, a structural deficiency or deliberate exaggeration. An investigation into greenwashing, for example, requires not only review of external statements, but also analysis of internal drafts, approval processes, data used, legal reviews, marketing decisions, sustainability input, management reporting and any warnings that may have been issued. The question is who knew what, at what time, on the basis of which information, and with what degree of uncertainty. That factual reconstruction is essential to determine the legal position, remediation measures and communications strategy.
Supply chain failures require an investigative methodology that goes beyond requesting contracts and supplier declarations. Supply chain risks may arise in subcontracting, production conditions, raw material origin, labour conditions, sanctions-sensitive regions, corruption risks, environmental harm or deficient due diligence. An effective investigation must therefore be both legally and factually rigorous. Relevant questions include which due diligence was performed in advance, which risk signals were available, which contractual obligations were imposed, how monitoring took place, which audits were carried out, which exceptions were known, what internal escalation occurred and whether commercial pressure led to risks being ignored or relativised. Supply chain failures therefore affect governance, procurement, legal, compliance, sustainability, finance and reputation. The investigative approach must not treat these functions as separate sources, but as parts of one factual complex in which conduct, information and decision-making converge.
In the case of sustainability claims, the investigative focus lies on the relationship between external statement and internal evidentiary position. An undertaking may speak publicly about climate neutrality, sustainable products, ethical supply chains, responsible raw materials, inclusive culture or societal leadership. Each of these claims may become vulnerable where the underlying facts are insufficiently robust. Investigations must therefore establish not only whether a claim was literally true or false, but also whether the claim was understandable, balanced, complete and sufficiently substantiated for the intended audience. Relevant considerations include whether disclaimers were sufficiently visible, whether uncertainties were known internally, whether comparisons were used correctly, whether aspirations were presented as achieved performance and whether internal review processes functioned adequately. ESG investigations thereby serve as a corrective mechanism within Strategic Integrity Management. They not only uncover errors, but reveal where governance, data control, legal review and board responsibility must be strengthened.
The relationship between ESG and broader Financial Crime and fraud risks
ESG risks increasingly intersect with broader fraud risks and Financial Crime Risks. That connection arises because sustainability information has value. ESG scores influence financing conditions, investment decisions, procurement opportunities, customer trust, insurability, market access and reputation. Wherever information has economic value, there is also a risk of manipulation, selective presentation, misrepresentation or strategic use of incomplete data. An undertaking may feel pressure to meet sustainability targets because financing advantages, bonuses, market expectations or public commitments are attached to them. That pressure may lead to data manipulation, incorrect classifications, overly optimistic assumptions, deliberately limited scoping, concealment of negative incidents or insufficiently critical assessment of supplier information. ESG thereby becomes an area in which fraud risks are not theoretical, but flow from concrete incentives and board-level pressure.
The relationship with Financial Crime Management becomes even stronger where ESG risks converge with corruption, sanctions, tax avoidance, fraud, human rights violations, market abuse or cyber incidents. A supply chain in which human rights risks are present may also be vulnerable to corruption, false invoicing, sanctions evasion or opaque intermediaries. A sustainable investment project may be used for misleading fundraising, fraudulent subsidies, green bonds without adequate use-of-proceeds discipline or reporting that materially deviates from reality. A cyber incident may compromise ESG data or lead to loss of information needed for sustainability reporting. An undertaking that uses public sustainability information in capital markets communications may also create market integrity risks where the data are misleading. ESG therefore does not stand apart from Integrated Financial Crime Risk Management, but forms an additional lens on the same fundamental vulnerabilities: information reliability, control over third parties, transparency of financial flows, integrity of decision-making and evidentiary support for compliance.
From the perspective of Strategic Integrity Management, it is necessary not to separate ESG risks artificially from fraud risks and Financial Crime Risks. An integrated approach requires sustainability claims, supply chain risks, ESG financing, subsidies, supplier relationships, reporting processes and internal incentives to be assessed for possible misuse scenarios. This includes attention to where pressure arises to improve figures, where commercial interests conflict with risk management, where external dependencies weaken information reliability, where third parties have access to critical data and where governance provides insufficient challenge. ESG can only be controlled credibly where it is incorporated into the same discipline of risk analysis, control testing, investigations, escalation, auditability and board accountability that applies to Financial Crime Management. This prevents sustainability from being treated as a separate reputational domain while the underlying vulnerabilities have, in substance, the same severity as classic integrity and fraud risks.
Climate, human rights and supply chain responsibility as supervisory themes
Climate, human rights and supply chain responsibility have become supervisory themes because they are no longer assessed solely as societal ambitions, but as concrete governance responsibilities requiring demonstrable control. The shift is fundamental. An undertaking can no longer confine itself to formulating climate targets, endorsing international human rights standards or publishing a supplier code of conduct. The relevant question is whether those principles have actually been translated into risk assessments, decision-making processes, contractual conditions, monitoring, escalation, remediation measures and board-level reporting. Supervision increasingly focuses on the extent to which undertakings can demonstrate that they understand their impact, their dependencies and their most material vulnerabilities. Climate policy without reliable emissions data, human rights policy without visibility over high-risk suppliers and supply chain responsibility without effective verification therefore give rise not only to reputational questions, but also to integrity, disclosure and enforcement risks.
Climate risks illustrate this shift with particular clarity. Climate targets, transition plans, emissions reduction pathways, offset claims, green product labels and sustainability-linked financing terms require undertakings to have information that is sufficiently reliable, consistent and traceable. That is complex because climate data often depend on assumptions, external sources, estimates, scope definitions and methodological choices. That complexity does not reduce responsibility; it increases it. The more far-reaching the climate claims made by an undertaking, the greater the need to document assumptions, limitations and uncertainties explicitly. A transition plan that informs investors, financiers, customers or supervisory authorities cannot be treated as a non-binding aspiration where it is used to generate confidence or influence economic decisions. The undertaking must be able to explain which data were used, which choices were made, which dependencies exist, which internal review took place and how deviations are followed up. Without that substantiation, a vulnerable gap arises between climate positioning and actual governance control.
Human rights and supply chain responsibility add a further layer of complexity because the risks often arise beyond the direct organisational boundaries of the undertaking. Working conditions, forced labour, child labour, discrimination, safety risks, land rights, environmental harm, corruption, trade involving sanctions-sensitive regions and exploitation may arise at suppliers, subcontractors, agents, distributors or other supply chain parties. That does not mean that the undertaking has complete visibility over every factual circumstance in every link of the chain, but it does mean that it must be able to demonstrate a risk-based approach proportionate to the nature, severity and likelihood of the risks. Supply chain responsibility therefore requires more than contractual declarations. It requires a coherent system of due diligence, risk segmentation, third-party screening, documentation, contractual enforcement, incident follow-up, audit, remediation and board-level escalation. Within Integrated Financial Crime Risk Management, this supply chain dimension directly touches Financial Crime Risks, because opaque chains are also vulnerable to fraud, bribery, sanctions evasion, false documentation, illicit financial flows and abuse of intermediaries.
Sustainability information as a source of disclosure and integrity risks
Sustainability information is a source of disclosure risk because it is increasingly included in reports, prospectuses, annual accounts, investor presentations, procurement documents, credit facilities, product information, commercial claims and public statements. That gives this information a function that goes beyond internal management. It is used by third parties to make decisions about investment, financing, cooperation, purchasing, reputational assessment and supervision. Once sustainability information acquires that external decision-making value, its reliability becomes legally and governance-relevant. Incomplete, inconsistently used or insufficiently verified ESG data may lead to an inaccurate picture of risks, performance or prospects. That risk is particularly significant where qualitative ambitions, quantitative indicators, forward-looking targets and complex value chain information are brought together in one narrative. The undertaking must then ensure not only that individual data elements are correct, but also that the overall picture is not misleading.
The integrity risk arises when sustainability information is used as an instrument of trust without the underlying control position keeping pace. An undertaking may, for example, communicate that it manages its supply chain responsibly while the factual verification is limited to supplier self-assessments. It may claim climate neutrality on the basis of offsets whose quality, additionality or durability has not been sufficiently assessed. It may present social impact without adequate visibility over subcontracting, local labour practices or grievance mechanisms. It may link ESG performance to remuneration structures, financing conditions or commercial targets without robust controls over data manipulation or selective scoping. In all these situations, the risk is not only that information is inaccurate, but that the undertaking creates a normative trust that it cannot factually support. Integrity risks therefore arise at the intersection of ambition, evidence and external influence.
Integrated control over sustainability information requires ESG data to be treated with the same discipline as other information that is material to governance, supervision and external accountability. This means that definitions must be established, data flows must be traceable, source information must be retained, assumptions must be documented, controls must be performed and exceptions must be visible to those responsible for publication or decision-making. It also requires a critical legal review of wording, comparisons, qualifications, disclaimers and forward-looking statements. Not every ESG statement requires the same degree of verification, but the greater its external significance, the stronger the need for controllability. Within Strategic Integrity Management, sustainability information is therefore not a communications appendix, but a risk carrier. The recurring question is whether the undertaking can demonstrate that its information was sufficiently reliable for the purpose for which it was used.
Board responsibility for credible ESG positioning
Board responsibility for ESG begins with the recognition that sustainability positioning is not merely an operational or communications choice. When an undertaking publicly presents itself as sustainable, climate-conscious, human-rights-sensitive, inclusive or socially responsible, it creates a normative profile that generates expectations among stakeholders and becomes testable against the factual design of the organisation. The board is responsible for whether that profile is credible, whether the undertaking has sufficient information to support its claims and whether risks that may undermine the credibility of ESG positioning are identified in time. This responsibility cannot be delegated solely to sustainability, marketing or compliance. Execution may be delegated, but board responsibility for direction, prioritisation, oversight and correction remains.
Credible ESG positioning requires the board to organise sufficient challenge. ESG is a domain in which undertakings are strongly exposed to external pressure: investors demand progress, customers expect responsible products, employees want meaningful values, supervisory authorities raise reporting expectations and competitors present ambitious sustainability narratives. In that environment, there may be a tendency to sharpen claims, accelerate targets or soften uncertainties in communications. Board responsibility means recognising that pressure and ensuring that decision-making is not driven solely by reputation, market expectations or positioning. There must be room for critical questions: is the claim sufficiently substantiated, are the data reliable, are exceptions visible, have supply chain risks been realistically assessed, has the legal qualification been reviewed, and is it clear what happens if performance falls behind? Without that challenge, ESG positioning becomes vulnerable to overselling, selective reporting and defensive responses when signals emerge.
Within Integrated Financial Crime Risk Management, board responsibility for ESG acquires a broader integrity dimension. The board must oversee not only sustainability ambitions, but also the risks that ESG processes may be misused, manipulated or insufficiently controlled. This applies, for example, to subsidies, green financing instruments, carbon credits, supplier declarations, certifications, sustainability-linked remuneration and external ratings. Each of these instruments may create value and thereby introduce incentives for inaccurate information, commercial pressure or fraudulent structures. Strategic Integrity Management therefore requires ESG to be embedded in the broader governance of risk, legal, finance, compliance, procurement, audit and the business. Credible ESG positioning does not consist of a compelling narrative alone, but of the demonstrable coherence between ambition, conduct, control, decision-making and the capacity to remediate.
ESG investigations as a corrective mechanism in a rapidly norm-setting domain
ESG investigations serve as a corrective mechanism because they make visible where ambitions, procedures, data and factual execution have diverged. In a rapidly norm-setting domain, that is essential. ESG norms do not develop solely through legislation, but also through supervisory practice, stakeholder expectations, investor pressure, case law, soft law, sector standards, contractual requirements and public norm formation. As a result, an undertaking that formally considers itself to be operating within existing frameworks may still face the question whether its conduct was socially, legally and governance-wise defensible. An ESG investigation helps answer that question factually. It reveals not only what happened, but also how information circulated, which signals were available, which decisions were taken, which functions were involved and where governance or control failed.
The corrective nature of ESG investigations also lies in their ability to move beyond symptom management. A greenwashing incident may be caused by careless wording, but beneath it there may be a structural problem in data quality, claim governance, legal review or commercial pressure. A human rights incident in the supply chain may originate with a specific supplier, but behind it there may be a weak due diligence process, insufficient contractual enforcement or deficient escalation. An incorrect sustainability report may result from a calculation error, but also from insufficient ownership, fragmented systems or the absence of independent testing. ESG investigations should therefore not be designed too narrowly. The investigation must interpret the incident in relation to the broader control environment: which controls existed, how did they function, who was responsible, which warnings were missed and which structural improvements are necessary?
A strong ESG investigation is forward-looking without relativising the facts. It must be sufficiently independent, methodical and documentable to restore trust, while also being practical enough to result in remediation measures that are executable and controllable. That requires a careful balance between legal privilege, fact-finding, stakeholder communication, internal responsibility, external reporting and remediation. Where ESG signals touch possible misrepresentation, fraud, bribery, sanctions evasion, labour-related misconduct, environmental harm or data manipulation, the investigative approach must be connected with broader Financial Crime Management. Integrated Financial Crime Risk Management provides the framework for this, because the investigation is not aimed at reputational repair alone, but at restoring control, strengthening the evidentiary position and preventing recurrence. ESG investigations are therefore not a defensive exercise at the back end, but an essential instrument of Strategic Integrity Management in a domain where norms harden faster than many organisations can internally absorb.
Sustainability risk management as an integral part of future-proof integrity management
Sustainability risk management should be an integral part of future-proof integrity management because sustainability risks have become structurally connected with strategy, financing, governance, supervision, market access and societal legitimacy. An undertaking that treats ESG risks separately misses the way in which these risks affect commercial choices, investment decisions, contractual relationships, product development, data governance, personnel policy and external accountability. Future-proof integrity management requires sustainability risk management not to be placed alongside existing risk functions, but to be connected with legal, compliance, finance, procurement, operations, internal audit, human resources, tax and the board. Only then does an overall picture emerge in which sustainability risks are not reduced to reputation, but are understood as material risks that may lead to enforcement, claims, financing problems, contractual liability, market loss and internal governance crises.
The integration of sustainability risk management requires a clear translation of ESG themes into controllable and testable risks. Climate ambitions must be translated into data, scenarios, investment choices, dependencies and reporting obligations. Human rights obligations must be translated into due diligence, supplier segmentation, grievance mechanisms, contractual remedies and remediation processes. Governance claims must be translated into decision-making lines, ownership, conduct, remuneration, culture and escalation. Social themes must be connected with factual working conditions, internal reports, employee data and corrective measures. This translation prevents ESG from remaining at the level of general values or policy statements. It makes clear which risks actually exist, which controls are relevant, who is responsible, which information is needed and how effectiveness is assessed. Without that translation, false comfort arises: the undertaking has policy, but insufficient grip on execution.
Within Integrated Financial Crime Risk Management, sustainability risk management acquires its full meaning as part of an integrated system for risk identification, prevention, detection, investigation, escalation and accountability. ESG risks must be included in risk assessments, third-party due diligence, control testing, incident response, internal investigations, audit planning, management information and board reporting. Attention must also be given to the overlap with Financial Crime Risks, such as fraud, bribery, sanctions evasion, market abuse, cybercrime, data breaches and tax-related integrity risks. An undertaking that wishes to manage sustainability in a future-proof manner must be able to demonstrate not only that it formulates ambitions, but also that it has a system capable of recognising deviations, investigating signals, correcting errors and structurally embedding lessons learned. In this context, Strategic Integrity Management means that ESG is not treated as an external expectation, but as an internal governance discipline: demonstrable, integrated, critical and focused on credible control over risks that may affect the undertaking legally, socially and economically.
