Back to Insights
ESG5 min readFebruary 2025

ESG Compliance Is Not the Same as Organisational Readiness

RC

Raymond Cheung

Chartered Actuary · CRO · Board Adviser · Singapore

Meeting disclosure requirements and being genuinely prepared to manage ESG risks are very different states. Many companies are achieving the first while quietly deferring the second. That gap will close, on someone else's timeline.

Most Singapore organisations approaching their ESG obligations have become skilled at ESG compliance and have barely begun ESG readiness. Compliance, producing the sustainability reports, meeting SGX disclosure requirements, satisfying MAS's Environmental Risk Management guidelines, is achievable because it has clear deliverables and deadlines. Readiness is harder: it requires climate physical risk to be embedded in capital planning, supply chain risks to be visible in procurement decisions, and the board to be in a position to manage ESG risks when they materialise rather than simply disclose them. As a board adviser working with Singapore-listed and MAS-regulated entities, I have seen that gap up close, and it will close on someone else's timeline if boards do not close it themselves.

But there is a different question, a harder one,that compliance does not answer: Is your organisation actually prepared to manage ESG risks as they materialise? Is climate physical risk embedded in your capital planning? Are supply chain labour risks visible in your procurement process? Is your governance framework capable of handling the liability questions that are beginning to move through courts in multiple jurisdictions? That is readiness. And most organisations are significantly further along on the compliance journey than the readiness journey.

Why the gap exists

The gap exists for understandable reasons. Compliance has a clear deliverable, a report, a disclosure, a rating. Readiness is harder to define and harder to measure. Compliance has a deadline,a regulatory requirement, an investor expectation, a reporting period. Readiness does not come with a deadline until the moment a risk materialises and you discover you were not prepared for it.

And compliance, in many organisations, is owned by a dedicated function, sustainability, legal, investor relations,that has the skills and the mandate to produce the required outputs. Readiness requires the risk function, the finance function, the operations function and the board to understand what ESG risks mean for how the organisation operates. That requires broader organisational change.

“Compliance tells stakeholders what you are measuring. Readiness determines whether you will respond effectively when those measurements become decisions.”

What readiness actually requires

I think about ESG readiness across three dimensions, based on what I see in the organisations I advise.

  • Risk integration. ESG risks, climate physical, transition, social and governance risks,need to be visible inside the enterprise risk framework, not alongside it. That means they appear in risk registers, are stress-tested against capital, and have named owners with authority to act.
  • Decision relevance. ESG considerations need to show up in actual decisions, capital allocation, M&A due diligence, supplier selection, product design,not just in reporting. If your sustainability report is not informing your investment committee, the work is not embedded.
  • Board capability. Directors need the literacy to ask meaningful questions about ESG risk, to challenge management on the adequacy of the organisation's response, and to understand where their personal fiduciary obligations are now touching ESG territory. That requires deliberate investment in board education.

The timeline question

The reason I phrase this as a gap that will close on someone else's timeline is because that is precisely what I observe. The regulatory requirements on ESG disclosure and risk management are tightening, MAS guidelines in Singapore, HKMA requirements, ASEAN taxonomy developments, global ISSB standards. The liability questions, who is responsible when an organisation's climate risk disclosure turns out to be materially misleading,are moving through legal systems. The physical risks, rising insurance costs, asset impairments, supply chain disruptions,are arriving ahead of schedule.

None of those timelines are controlled by the organisation. Compliance gives you some protection, it shows you were paying attention. But readiness is what determines whether you respond well when the moment arrives. I would rather help organisations build the second than produce the first alone.

Common Questions

What is the difference between ESG compliance and ESG readiness for Singapore companies?

ESG compliance means meeting the disclosure and reporting requirements that regulators, exchanges and investors mandate, producing a sustainability report, disclosing emissions, satisfying SGX listing requirements. ESG readiness means the organisation is actually prepared to manage ESG risks when they materialise, that climate physical risk is embedded in capital planning, that supply chain risks are visible in procurement, and that the board can make informed decisions when an ESG risk becomes a strategic or liability issue. Most Singapore companies are ahead on compliance and behind on readiness, because compliance has clear deliverables and deadlines while readiness is harder to measure until something goes wrong.

What ESG risks should Singapore insurance boards integrate into their risk frameworks?

Singapore insurance boards should ensure three categories of ESG risk are visible inside the enterprise risk framework: climate physical risk, the financial impact of extreme weather events and long-term climate trends on the insurer's asset portfolio, underwriting exposures and operating environment; transition risk, exposure to regulatory change, carbon pricing and changing customer behaviour as the economy decarbonises; and governance risk, the liability and reputational exposure from inadequate ESG disclosure or failure to meet the expectations set in public commitments. MAS Environmental Risk Management guidelines expect these risks to appear in risk registers, be stress-tested against capital, and have named owners with authority to act.

How do MAS and SGX sustainability requirements affect Singapore board ESG obligations?

MAS and SGX have established a layered set of sustainability obligations for Singapore companies. SGX listing rules require climate-related disclosures aligned with TCFD for all listed companies, with mandatory requirements phased in progressively. MAS Environmental Risk Management guidelines require banks, insurers and asset managers to integrate environmental risk into governance frameworks, risk appetite and risk management processes, with board-level accountability. Together, these frameworks mean Singapore boards face both disclosure obligations under SGX and substantive risk management obligations under MAS, and the two are not the same. A board that satisfies its SGX disclosure requirements without embedding environmental risk into its MAS-governed risk framework is exposed on the supervisory side.

Related insights

About the author

Raymond Cheung is a Chartered Actuary, C-suite executive and board adviser with more than 20 years of experience across Asia in risk management, insurance, ESG and corporate governance. He is the CEO of CER Consultancy and an accredited trainer at SMU Academy and the Singapore College of Insurance.

All insights