LAYER 4: POLICY & GOVERNANCE
Policy & Governance
The rules of the game — regulation, standards, and the principles beneath.
Mandatory disclosure, voluntary frameworks, global goals, and the SME ecosystem. What you must do, what leaders choose to do, and how to navigate the alphabet soup in the right order.
Working from your industry rather than a specific framework? Find your sector lens →
In 30 seconds
Layer 4 is where sustainability becomes codified. Regulations, standards, and frameworks define what organisations must disclose, what they should commit to, and what it means to perform well.
Mandatory (what you must do): CSRD, EU Taxonomy, SFDR, ISSB S1 & S2, UK SRS, TCFD — now embedded in law across the EU and UK for large companies.
Voluntary (what leaders choose to do): CDP, TNFD, SBTi, SBTN, GRI, B Corp — the frameworks that have shaped corporate sustainability practice for the past decade and are becoming the mandatory frameworks of the next.
The pattern: What is voluntary today becomes mandatory tomorrow. TCFD was voluntary in 2017. It is now embedded in CSRD, ISSB S2, and UK regulation. Understanding this trajectory is a strategic advantage — not just a compliance exercise.
Where this fits
Layer 4 sits between the ecological reality below and corporate action above. Every disclosure framework requires data that flows up from Layers 1–3.
The voluntary → mandatory trajectory
Organisations that adopt voluntary frameworks early build capability before competitors are forced to catch up. This is the consistent pattern across a generation of sustainability governance.
Navigating the alphabet soup
Every framework sits on two axes: whether it is legally required, and whether it demands disclosure or action. Beneath all four quadrants sits a data infrastructure layer — the measurement and provenance evidence that every framework depends on, but that most orientation guides leave out entirely.
For smaller organisations: you most likely sit in the voluntary-transformation quadrant today — certifications, targets, and market mechanisms. The mandatory zone is arriving via your supply chain relationships, not direct regulation. Your data foundation (soil surveys, water testing, habitat records) is already more valuable than you think.
Report what you find
Commit to change voluntarily
What the ecosystem is — measuring state and change at site and landscape scale. The evidence base every framework above draws on.
What flows out of the ecosystem — verified origin and provenance as products move through the supply chain and back through circularity.
Coloured chips link to deep-dive pages. The mandatory-transformation quadrant is where enforcement and legal liability sit — CSDDD and EUDR require action, not just disclosure. Data foundation layer added by Pandion; original 2×2 concept: Burkart, One Earth, 2025.
Mandatory disclosure
What large companies must do. If you are not directly caught by these regulations yet, your corporate buyers and investors are — and their data requirements flow down into your supply chain.
Double materiality: impact on the company AND impact on the world. Detailed ESRS standards. Phased rollout from 2024; EU Omnibus I (in force 18 March 2026) raised the threshold to 1,000+ employees and over €450M turnover, removing roughly 80% of prior reporters (~50,000 down to ~5,000 companies).
Mandatory now for largest EU companies. Post-Omnibus scope significantly narrowed.
Read the deep dive →The action counterpart to CSRD. Requires large companies to identify, prevent, and remedy human rights and environmental harms across their operations and supply chains — not just report them. Enforcement via fines of up to 5% of worldwide turnover and civil liability.
Directive in force July 2024. Application from 2028 for largest companies.
Read the deep dive →Products from seven commodities (cattle, wood, cocoa, coffee, oil palm, soya, rubber) placed on the EU market must be deforestation-free after 31 December 2020, legally produced, and traceable to plot level. Due Diligence Statements required before each market placement.
Application December 2026 for large/medium operators. Directly relevant for cattle, timber, and derived products.
Read the deep dive →Classification system defining which economic activities are environmentally sustainable. Increasingly tied to CSRD disclosures and green finance eligibility. Six environmental objectives; activities assessed against Do No Significant Harm criteria.
Embedded in CSRD; becoming a baseline for green bond issuance.
Product-level sustainability disclosure for asset managers and financial institutions. Requires classification of funds as Article 6, 8, or 9. Drives nature and climate risk integration into investment products.
Review underway; Article 9 reclassifications ongoing.
Global baseline for investor-focused sustainability disclosure. S1 covers general sustainability risks and opportunities; S2 covers climate (TCFD-aligned). Jurisdictional adoption ongoing globally; the container that UK SRS builds on.
Global baseline; UK, Australia, Japan, Canada adopting.
ISSB-aligned UK standards, phased from 2025 for large listed companies and FCA-regulated entities. Includes sustainability labelling rules and anti-greenwashing requirements under UK SDR. Will trickle down into supply chain data demands.
Mandatory for FTSE 100 first, then widening. Supply chain pressure arriving now.
The foundational climate risk disclosure framework. Four pillars: governance, strategy, risk management, metrics and targets. Now embedded in CSRD, ISSB S2, UK regulation, and CDP's scoring. The template everything else builds on.
Absorbed into mandatory regimes globally. Knowing TCFD is a prerequisite.
Voluntary frameworks
What leading organisations choose to do. Each has a deep-dive page — the frameworks are not complicated once you understand what they are actually for and who they serve.
The largest voluntary corporate disclosure platform. Six environmental themes: Climate, Water, Forests, Plastics, Biodiversity, and Ocean (new 2026). SME questionnaire available. Aligned with IFRS S2, TCFD, and partially with ESRS and TNFD. Scores companies A–D–. Used by investors managing $110+ trillion in assets.
Pandion view: Useful discipline for supply chain credibility and investor visibility. Not a neutral public good — understand the commercial model before you engage.
Read the full CDP deep dive →Nature-specific counterpart to TCFD. Uses LEAP methodology: Locate, Evaluate, Assess, Prepare. Assesses nature dependencies and impacts across the value chain. 600+ organisations from 50+ countries publicly committed by 2025. Expected to inform mandatory nature disclosure requirements in EU and UK. The ISEP + Aldersgate Group guide ‘Placing Nature on the Board Agenda’ (June 2026, alongside a DEFRA discussion paper) maps the five-phase board journey that connects governance to TNFD disclosure.
Pandion view: CDP has only partial TNFD alignment. Nature-positive clients need TNFD work on top of CDP — a distinct service opportunity.
Read the full TNFD deep dive →Sets net-zero targets aligned with the Paris Agreement (1.5°C pathway). Scope 1, 2, and 3 emissions measurement and a verified decarbonisation roadmap. SME pathway available. Increasingly a de facto requirement for large corporate supply chain participation.
Pandion view: CDP scoring favours companies with SBTi-validated targets. The two frameworks reinforce each other — sequence them deliberately.
Read the full SBTi deep dive →Nature counterpart to SBTi. Covers land, freshwater, ocean, and species targets. Aligned with TNFD and the Kunming-Montreal Global Biodiversity Framework (30x30). Growing rapidly; following SBTi's trajectory 5–7 years behind.
Pandion view: Directly relevant for land-owning organisations and nature-dependent supply chains. TNFD LEAP is the foundation; SBTN builds on it.
Read the full SBTN deep dive →The longest-established sustainability reporting standard. Covers environmental, social, and governance topics. Impact-focused rather than investor-focused. Widely used in annual sustainability reports. GRI and ISSB serve different audiences; many large organisations use both.
Pandion view: GRI is the impact disclosure standard; ISSB is the investor disclosure standard. They are complementary, not competing.
Deep dive coming soonHolistic certification covering environment, workers, community, governance, and customers. Recertification every three years. Strong consumer-facing and community-facing credential. Requires a minimum B Impact Assessment score of 80. Used by Patagonia, Innocent, Ben & Jerry's.
Pandion view: B Corp is the most practical starting point for a reputational credential — especially for direct-to-consumer brands. Lower institutional value than CDP/TNFD but high community trust value.
Read the full B Corp deep dive →The SME ecosystem
For smaller organisations, three things sit around the disclosure step, not one. Before it comes a chance to orient: work out where you stand. Then a self-led pathway of on-ramps you choose to climb. And, arriving in parallel, buyer-driven assessments your customers ask you to complete. You do not need to start at disclosure; most organisations start much earlier.
For the same tools sorted by job and by theme (climate, nature, water, social), see the SME tools landscape →
Readiness diagnostics
Holistic, beyond-carbon, self-led tools that scan your whole position and tell you what to do first. You run them before anyone asks, to orient rather than to prove. They sit upstream of choosing a framework: the front of the journey, where materiality meets strategy.
Independent, holistic, beyond-carbon readiness diagnostic built for SMEs. Self-led: it scans your whole position and prioritises actions before anyone asks.
B Corp's free assessment, used here as a self-check rather than for certification. Covers governance, workers, community, environment, and customers.
Science-based goals and indicators for a genuinely sustainable business. A stretching, systems-level self-assessment.
Self-assessment against the Ten Principles and the SDGs. A globally recognised orientation starting point.
A coherent set of on-ramps you choose to climb, each feeding the next. The SME Climate Hub was built in direct collaboration with CDP; the UK Business Climate Hub is government-endorsed. These are not competing systems, they are sequential.
Free, practical climate guidance for UK SMEs. Framed around cost savings and business resilience rather than compliance. Sector-specific: hospitality, retail, manufacturing. The UK government-endorsed on-ramp for SMEs beginning their climate journey.
Where clients who are pre-disclosure and pre-commitment typically start. Good referral resource for clients who need to build the business case internally first.
Global SME commitment platform. Signatories pledge to halve emissions by 2030 and reach net zero by 2050, joining the UN Race to Zero campaign. 10,000+ businesses signed. Built in collaboration with CDP — the SME questionnaire is designed as the disclosure pathway for Hub signatories.
The commitment layer. Low friction entry. 10,000+ signatories who have made pledges but likely have not moved to formal CDP disclosure represent a large addressable market for disclosure readiness services.
The disclosure and scoring layer. Eight modules, climate-led with integrated water and forests questions. Scoring deadline week of 14 September annually. Designed to satisfy IFRS S2, TCFD, ESRS E1, and TNFD simultaneously — a "write once, read many" system. Second full year in 2026 with expanded scope.
The formal disclosure step. Our first-pass questionnaire service sits here — running the SME questionnaire through our skill and playbook before iterating with client data.
When a customer does the asking
Some assessments are not chosen, they are required by a buyer as a condition of supply. The pressure is a pull from your customers, not a push from you. Find out exactly what the buyer needs before you buy anything.
A buyer-driven ESG scorecard covering environment, labour and human rights, ethics, and sustainable procurement. Increasingly requested by large customers as a condition of supply. Returns a medallion rating, not a disclosure you choose to make.
The buyer-requested route into CDP: a corporate customer asks you to disclose so they can account for their own Scope 3. Same questionnaire as self-led CDP, but the request comes from them.
Global goals
The overarching agreements that give the frameworks their scientific and political reference points. These are the goals; the frameworks above are how organisations measure and report progress towards them.
1.5°C target underpinning all climate frameworks. The scientific and political reference point for SBTi, CDP, CSRD, and ISSB S2 alike.
Global Biodiversity Framework. 30x30 target: protect 30% of land and ocean by 2030. Nature-positive by 2030. The reference point for SBTN, TNFD, and biodiversity credit markets.
17 Sustainable Development Goals. Widely referenced; most meaningful when linked to specific material impacts rather than used as a badge-collecting exercise.
The accounting standard underlying almost all emissions measurement. Scope 1, 2, and 3 definitions. A prerequisite, not a disclosure framework — you need it before you can fill in CDP, SBTi, or ISSB S2.
Underpinning principles
The principles beneath the rules. These predate most frameworks but explain why the frameworks are designed the way they are.
Those who cause environmental harm bear the cost of remediation. The foundation of carbon pricing, liability frameworks, and CSRD double materiality.
Act before certainty when the stakes are high and the harm is potentially irreversible. Underpins species protection law and the Paris Agreement ambition structure.
Assess the full value chain impact of a product or service, not just what happens at one stage. The basis for Scope 3 emissions accounting and LCA-based CSRD disclosures.
Impact on the company (financial materiality) AND impact on the world (impact materiality). CSRD requires both; ISSB focuses on financial materiality only — a significant difference.
Prevent > Reuse > Recycle > Recover > Dispose. The logic underlying circular economy policy and plastics regulation.
The Pandion view
Disclosure without action is just paperwork.
The best organisations use L4 frameworks as scaffolding for genuine change — connecting disclosure requirements to L5 strategy and the ecological realities of Layers 1–3. A CDP score is a starting point, not a destination.
Build the data foundation once. It serves multiple frameworks simultaneously.
A carbon inventory, a water account, a nature baseline, and a basic product traceability system satisfies 70–80% of CDP, TNFD, SBTN, and SBTi at the same time. You do not need a separate project for each framework.
Frameworks are tools, not destinations. Understand who they serve.
Each framework reflects the interests of its designers and funders. CDP was built by and for institutional investors. B Corp was built by and for consumer-facing brands. Knowing who a framework serves helps you prioritise which ones actually matter for your situation.
Who operates at L4
Standard setters
Defining the rules
ISSB, CDP, SBTi, SBTN, TNFD Secretariat, GRI
How does your standard connect to real outcomes?
Regulators
Mandating compliance
EU Commission, FCA, SEC, UK DESNZ, national governments
Does this regulation drive behaviour change?
Assurance providers
Verifying claims
Big 4 auditors, specialist verifiers, rating agencies, CDP scoring partners
What gives stakeholders genuine confidence?
Where to go next
The Sustainability Framework
The full 2x2 diagram, interactive connection map, four tiers, and key relationships. Everything in one place.
CDP
The disclosure platform most clients encounter first — what it is, how it works, and what to know before you engage
Corporate Action (L5)
Where governance requirements become strategy and targets
Sustainable Finance
Strong disclosure unlocks green capital — how the two connect