ESG Governance: A Safe Bet Amid the Fog

No one can say today what the geopolitical balance of power will look like as it shapes the strategic and regulatory imperatives facing companies and investors in the short to medium term. Scope thresholds shift, deadlines slip, political majorities change their minds about how ambitious these rules should be, and trade tensions keep reshuffling global supply chains almost every quarter. Faced with that much noise, the instinct is often to wait — to hold off on serious ESG governance investment until the fog clears, on the assumption that clarity is just around the corner and that acting too early risks wasted effort. That instinct is exactly backwards. In an environment this volatile, building solid ESG governance capability now is one of the safest uses of company resources available, regardless of which scenario eventually plays out.

1. Regulatory fog does not change the underlying demand

The legal foundation already exists, and it will not disappear even if its exact scope keeps moving. The European Commission has already adopted the ESRS as delegated acts, built on the technical work of EFRAG, which continues to publish implementation guidance and FAQs regardless of how the Omnibus negotiations conclude. Whether the simplification package ultimately raises thresholds further or not, this regulatory architecture is already published, transposed and operational — it is not going to be unwound wholesale, only recalibrated at the margins.

What will not move, either, is commercial pressure. A company that falls outside the CSRD’s direct scope tomorrow will still face ESG data requests from its banks, its large corporate customers and its investors, all of whom remain bound by their own obligations regardless of where the scope line eventually settles. Ksapa’s overview of the CSRD and EU ESRS standards notes that the Commission deliberately aligned the ESRS architecture with the IFRS Sustainability Disclosure Standards to improve interoperability — a design choice that will keep paying off however the scope debate resolves, because it reduces the risk of building reporting systems that only work under one specific regulatory configuration. As Ksapa details, the ESRS governance standards (G1 to G4) cover anti-corruption controls, whistleblowing mechanisms and internal control systems that no seriously managed company can afford to skip, independent of which exact legal text happens to require them at a given moment — these controls reduce operational, reputational and financial risk on their own merits, well beyond the narrow question of regulatory compliance.

The twelve sector-agnostic ESRS that Ksapa summarises may well be simplified further in the coming months, but the underlying direction — markets expecting more, better-traced sustainability information — has not reversed. That direction is reinforced by the International Sustainability Standards Board, whose global baseline is already backed by the G7, G20 and IOSCO and referenced by regulators well beyond the EU: whichever way the CSRD scope debate ultimately resolves, a company that has already learned to map its data against this broader baseline will not need to rebuild its reporting architecture from scratch. The same logic applies internationally: Ksapa’s comparison of SEC, CSRD and IFRS rules shows that even jurisdictions with lighter mandatory disclosure regimes are converging, slowly, toward comparable expectations on climate risk information, while Ksapa’s analysis of China’s CSDS confirms that a major non-Western economy is independently building its own climate governance disclosure framework, aligned with ISSB logic. Put together, these signals point the same way even as individual texts wobble: a company that builds its governance around this underlying direction, rather than around the exact wording of one article that may well be renegotiated within eighteen months, is making a substantially safer bet than one waiting for final legal certainty before acting.

2. Capabilities built today survive every scenario

This is the central argument: well-built ESG governance is not a bet on one specific piece of legislation — it is an investment in transferable capability. The double materiality method that companies build under CSRD remains useful whether the final reporting regime is strict, simplified, or even voluntary. This isn’t a disposable skill tied to some regulatory clause; it’s a way of prioritizing risk that holds value in any circumstance, including for decisions that have nothing to do with regulation — where to set up operations, which suppliers to select, how to weigh investment trade-offs. And it’s a lens that can translate directly into financial terms, as we show in the Shein example.

The same logic applies to due diligence. Ksapa’s guide for investors on human rights due diligence is built on the OECD Guidelines for Multinational Enterprises on Responsible Business Conduct and the UN Guiding Principles — frameworks that existed before the CSDDD and will outlast whatever final shape the directive takes. Whether or not a given company ends up directly in scope once thresholds are finalised, Ksapa argues that a structured due diligence process protects against very real risks — supplier incidents, litigation, loss of a key customer’s trust — that have nothing to do with which legal text happens to be in force. Companies that had already started building due diligence systems before the CSDDD amendments pushed implementation back to July 2028 did not need to start over when the timeline moved; they simply adjusted the scope of an existing system. Companies that waited for legal certainty before starting are now catching up with customers and lenders who did not wait.

Ksapa’s breakdown of the original CS3D agreement is a useful reminder of just how much has already shifted since the directive was first negotiated — thresholds, civil liability provisions and enforcement mechanisms have all moved, sometimes more than once within a single year. Yet the underlying pressure on complex supply chains keeps coming from multiple, uncoordinated sources at once: national due diligence laws, sector-specific customer requirements, investor screening criteria. Building a general-purpose due diligence capability that satisfies several of these sources simultaneously is a better use of resources than compliance narrowly tailored to a single text — in the same way that diversifying a financial portfolio reduces exposure to any one outcome, diversifying the regulatory foundations of a due diligence programme reduces exposure to any single legislative reversal, delay or expansion.

The scope reduction agreed by the Council of the European Union in February 2026 raises the CSRD’s direct-application thresholds, but it removes neither the certification requirement for companies that remain in scope nor the ESG data requests coming from financial partners further up the value chain. Certification providers will keep tracing every disclosed claim back to its source data, review notes and approval record — a discipline that remains demanding for every company still subject to it, whatever the final calibration of the thresholds, and one that will penalise most heavily those who chose to wait rather than prepare.

3. Investing well now: what holds up whatever happens

The right investment strategy in such an unstable environment is to prioritise reusable capability over one-off responses tuned to the current version of a text. This is particularly true of board governance. Ksapa’s analysis of board-level ESG accountability shows that training directors on climate, biodiversity and due diligence topics creates value well beyond the specific regulatory obligation that triggered the training in the first place: a board capable of genuinely challenging a double materiality assessment remains an asset whether the underlying rule is tightened, simplified or replaced entirely. That collective competence, once built, does not evaporate with the next round of EU trilogue negotiations — it keeps producing value in the company’s ordinary strategic decisions, from market entry choices to major supplier contracts, long after the specific regulatory trigger that funded the training has been forgotten.

On methodology, Ksapa’s review of the recalibrated CSDDD argues that companies which treat due diligence as embedded risk management, rather than an isolated compliance exercise, get the most value from it — a lesson that holds regardless of how far the directive’s scope is eventually narrowed or expanded. The same applies to stakeholder engagement: Ksapa’s discussion of dialogue in due diligence notes that functioning grievance mechanisms and genuine engagement with workers build what amounts to a social licence to operate — an asset that reduces conflict and accelerates project timelines independently of which specific due diligence law currently applies to a given operation.

This resilience is reinforced by where market sentiment actually sits. Ksapa’s review of recent investor and CEO surveys cites Morgan Stanley’s 2025 institutional investor survey and the UN Global Compact–Accenture CEO study, both showing continued or expanding sustainability commitments despite political headwinds — a signal that credible governance remains commercially rewarded even as some jurisdictions scale back mandatory requirements. That commercial reward is grounded in a rights framework that predates and outlasts any single EU directive: the UN Guiding Principles on Business and Human Rights, unanimously endorsed by the Human Rights Council in 2011, remain the reference point boards are increasingly expected to demonstrate familiarity with, independent of which specific due diligence law happens to apply to a given operation at a given time. On the supervisory side, ESMA continues to publish annual common enforcement priorities focused on materiality analysis and value chain information, a pattern of scrutiny unlikely to disappear regardless of how the scope debate resolves. Finally, Ksapa’s complete overview of the ESRS standards remains a useful reference for building a reporting architecture flexible enough to survive further simplification, because it maps a governance discipline rather than compliance with one fixed article — the kind of investment that pays for itself on every subsequent reporting cycle, whatever the wording of the rule turns out to be.

Bringing it together

In a landscape this unsettled — regulatory texts under active renegotiation, geopolitical tensions reshaping supply chains overnight, political majorities shifting their appetite for climate ambition — it is tempting to treat ESG governance as discretionary spending to postpone until the rules settle down. That is a poor calculation, for a simple reason: unlike a conventional financial bet, this investment does not depend on guessing which way the political debate will go. The capabilities that actually matter — data traceability, a working double materiality method, structured due diligence, a trained and engaged board — do not depend on a precise threshold or an entry-into-force date. They create value today, by reducing commercial risk, reassuring financial partners, and avoiding a costly scramble once the applicable rule finally stabilises. And when the rule does eventually settle, whichever direction it settles in, the company that already has the underlying capability adapts in weeks, not quarters — while the company that waited is still building from zero.

Investing in these foundations now, rather than waiting for a regulatory clarity that may never fully arrive, remains one of the safest uses of resources a company can make this year. The regulatory, geopolitical and political fog is unlikely to lift completely any time soon; the value of well-built ESG governance does not depend on any of that uncertainty to exist.