ESG Ambiente: How the environmental pillar in German companies becomes audit-proof

The term ESG Ambiente refers to the environmental pillar of the ESG trilogy and summarizes the reporting standards ESRS E1 to E5, which have become binding for around 15,000 German companies since the CSRD implementation in Section 289b HGB. Anyone who only sees the column as a marketing area is overlooking the burden of proof. Auditors, investors and BaFin require key figures with methodology, data source and consolidation group.

This article shows how you can anchor the E-pillar operationally without falling into accusations of greenwashing. You will find out which indicators ESRS E1 to E5 require, how you can build up GHG balance sheets according to the GHG Protocol, what role the sustainability officer plays and how CIVAC's compliance platform and Officer-as-a-Service files the evidence in an audit-proof manner. Deadline expires as soon as we become aware of it.

The term ambiente comes from Italian and Spanish and means environment. In the German ESG discourse, ESG Ambiente is synonymous with the E-pillar, i.e. all environmental aspects of a company. From a regulatory perspective, the pillar is anchored in the CSRD, which was transferred to Section 289b of the German Commercial Code (HGB) by the implementation law.

The European Sustainability Reporting Standards specify the obligations in five topic standards: ESRS E1 Climate Change, E2 Environmental Pollution, E3 Water and Marine Resources, E4 Biodiversity and Ecosystems and E5 Circular Economy. Each standard lists data points with mandatory information or materiality options.

In addition, there are sectoral requirements such as the EU Taxonomy Regulation 2020/852, which classifies ecological activities, and the German Supply Chain Due Diligence Act with environmental risks in Section 2 LkSG. The role of ESG sustainability officer bundles these strands.

Two thresholds determine who is required to report: capital market-oriented companies from the 2024 financial year, large corporations according to Section 267 of the German Commercial Code (HGB) from 2025 and capital market-oriented SMEs from 2026. The scope of application is based on estimates by the Federal Ministry of Justice reports around 15,000 German companies.

The double materiality is essential: companies must report both the financial effects of environmental risks on the business and the ecological effects of the business on the environment and people. Both perspectives require methodology and evidence.

The audit will initially be carried out with limited assurance (limited assurance) by auditors, and is expected to be with sufficient assurance from 2028 onwards. This significantly increases the requirements for the document chain.

ESRS E1 requires the disclosure of greenhouse gas emissions according to the scopes of the GHG Protocol. Scope 1 includes direct emissions from our own plants, Scope 2 indirect emissions from purchased energy and Scope 3 upstream and downstream value chain from purchasing to product use.

The methodology is based on the GHG Protocol Corporate Standard and ISO 14064-1. Both require a clearly defined group of consolidated companies, either based on shareholding or operational control. Anyone who changes circles must document this and recalculate comparative values.

Scope 3 is the most difficult item in practice because 70 to 90 percent of many companies' emissions lie outside their own gates. The 15 Categories of Cat. 1 Purchased goods up to Cat. 15 investments require supplier data or estimates with emission factors.

In addition to the balance sheet, E1 requires a transition plan that reflects the 1.5 degree target of the Paris Agreement. This plan requires interim goals up to 2030, measures, investment plans and a link to management remuneration.

Proof is provided via energy consumption data, fuel receipts, travel expense reports, electricity bills and supplier information. Each value requires a source, calculation path and plausibility check, otherwise the auditor reports a finding.

CIVAC stores the GHG balance in the workspace with versioning. Input data, emission factors and consolidation decisions are available for audit purposes; the auditor receives read access instead of PDF extracts.

ESRS E2 Pollution covers emissions to air, water and soil, including REACH substances of concern and microplastics. Quantities, load points and reduction targets are reported, supported by measurement protocols or calculations.

ESRS E3 Water and Marine Resources requires information on water withdrawal, consumption and discharges, differentiated according to water stress areas according to WRI Aqueduct or comparable indices. Locations in stressed regions need increased reporting and action.

ESRS E4 Biodiversity and Ecosystems requires the identification of key sites in or near protected areas, such as Natura 2000. The data points include land use, restoration measures and impacts on endangered species.

ESRS E5 Circular Economy concerns resource inflows, product design, waste volumes and recycling rates. The standard requires information on the secondary raw materials used, the service life of the products and the strategy for avoiding non-recyclable materials.

Across E2 to E5, the materiality analysis decides which data points must be filled out. A documented evaluation process with stakeholder interviews, risk analysis and threshold values ​​is mandatory, not optional.

Anyone who uses multiple topic standards needs a consistent data model. CIVAC organises key figures, sources and measures per location and standard, and the platform connects those responsible via the reporting line.

Unlike the data protection officer, there is no statutory obligation to appoint an ESG officer. However, the CSRD requires that responsibility be anchored in the management as well as operational coordination, which in practice is institutionalized as an ESG or sustainability officer.

The tasks include the control of the materiality analysis, the coordination of data collection in the functional areas of purchasing, energy, human resources and legal as well as the preparation of the management report in accordance with Section 289c HGB. The person is responsible for liaising with auditors and investor questions.

Knowledge of CSRD, ESRS, GHG Protocol, EU taxonomy, LkSG and at least basic knowledge of data protection are required because sustainability data often contains personal references to employees and suppliers. This range is rarely covered internally by one person.

An externally appointed person based on the compliance platform and officer-as-a-service model relieves management. The appointment certificate regulates the mandate, reporting line to the board and escalation route. The appointment certificate, signed, filed, verifiable.

The separation between the ESG representative and the LkSG representative makes sense because the Supply Chain Act contains its own reporting and complaint obligations. Both roles coordinate, but remain functionally separate.

CIVAC provides both roles from 25 representative roles. Licence the workspace for your internal representatives or have our representatives order it.

The ESRS requires a systematic double materiality analysis. This differentiates between impact materiality (effect on people and the environment) and financial materiality (financial impact on the company). Both perspectives are evaluated for each topic.

The process starts with identifying the relevant topics along the ESRS topic list. Workshops with departments, management and external stakeholders then assess the probability of occurrence, severity and scope of the effects.

Threshold values ​​for materiality must be justified. A blanket determination of 5 or 10 percent is not enough. What is required is a qualitative evaluation standard with scales for the dimensions of severity, range and irreversibility, documented in a methodology note.

The actual data collection takes place via data sources such as ERP systems, energy bills, personnel statistics, supplier questionnaires and measurement protocols. Versioning is important because comparative figures cannot be changed retroactively without making a note.

For each data point, we recommend a data sheet with definition, source, person responsible, survey frequency, calculation formula and plausibility check. This creates an audit trail that carries the audit note.

CIVAC's 490 ready-to-use audit templates contain templates for materiality analysis, data sheets and methodology notes. The workspace keeps versions, releases and justifications in an audit-proof manner in the EU data residence.

The EU Taxonomy Regulation 2020/852 supplements the CSRD with a classification of ecologically sustainable activities. Six environmental goals are defined: climate protection, climate adaptation, water, circular economy, pollution prevention and biodiversity.

An activity is considered to be taxonomy-compliant if it contributes substantially to one goal, does not significantly harm any other goal and meets minimum social standards. The technical assessment criteria are contained in delegated legal acts such as Regulation (EU) 2021/2139.

Reporting companies disclose three main metrics: share of sales, capital expenditure (CapEx) and operating expenditure (OpEx) from taxonomy-compliant activities. The values ​​are shown as a percentage of the respective total amount.

The allocation begins with the NACE code of the business activity. Only then does the company check the technical criteria such as emission thresholds or energy standards. Activities without a NACE match are non-taxonomy-eligible (non-eligible).

Anyone who provides consulting services, software development or pure administrative activities often falls into the non-taxonomy-eligible category. This is not an omission, but a consequence of the regulation system, but should be communicated transparently.

CIVAC documents the taxonomy assessment per activity, with reference to delegated legal acts, data source and justification. The external ESG officer accompanies the classification and secures the methodology against questions from auditors.

The ESRS dovetail with the German LkSG, the EU Deforestation Regulation (EUDR) 2023/1115 and the expected EU Supply Chain Directive (CSDDD). All regulations require risk analyses, prevention measures, remedial action and reporting along the supply chain.

Greenhouse gases in Scope 3 Cat. are particularly relevant for environmental aspects. 1, water risks in supplier regions, conflict raw materials according to EU Regulation 2017/821 as well as obligations for deforestation-free production of soy, palm oil, coffee, cocoa, beef, wood and rubber.

The risk analysis is carried out in accordance with Section 5 LkSG abstractly for the entire supply chain and specifically for direct suppliers. Indirect suppliers are also considered on a case-by-case basis, for example when there is substantiated knowledge of risks.

Supplier questionnaires are common, but are only part of the solution. Public sources, audit reports, NGO research and complaint data are also required. An audit trail shows when which source was evaluated.

Complaints must be received via a low-threshold reporting office in accordance with Section 8 LkSG. This obligation overlaps with Section 12 of the HinSchG on the whistleblower protection reporting point, but is interpreted more broadly in terms of content and also applies to non-employment law complaints.

CIVAC integrates the whistleblower and LkSG reporting point with documented processing. The 24-hour confirmation of receipt and the 3-month confirmation according to the HinSchG are stored in the workflow.

Auditors will attest with limited assurance from the 2024 financial year (limited assurance). The audit opinion is formulated negatively: No matters have come to light that contradict the view that the sustainability reporting is not consistent.

Typical findings relate to the double materiality analysis: lack of methodology, unclear threshold values, weak stakeholder involvement. A second class concerns the GHG balance, especially Scope 3 with emission factors without a source or without consistency between financial years.

A third cluster is governance issues: lack of linking ESG goals to management remuneration, unclear reporting lines, lack of training for supervisory bodies. The ESRS 2 General Disclosures explicitly requires this information.

Preparatory measures include a Pre-Audit with the auditor, in which methods and data points are coordinated. In this way, you avoid findings that only become apparent in the main audit and create time pressure.

The workspace bundles all the evidence that the auditor needs to see: materiality analysis, calculation paths, methodology notes, reporting lines and the ESG officer's appointment certificate. The auditor calls and the proof is ready.

If you realize shortly before the deadline that the chain of documents is incomplete, you can use CIVAC to appoint an external ESG representative within 2 working days. The search typically takes 2 to 6 weeks.

ESG ambience is not a marketing issue. The E-pillar requires data with methodology, evidence and versioning, otherwise the audit report will not be valid. Anyone who recognises this will build the right structures early on, before the first report is due.

CIVAC bundles the duties in a compliance platform and officer-as-a-service. 25 representative roles, 490 ready-to-use audit templates, 93 controls according to ISO/IEC 27001:2022 for data security in reporting and EU data residency for GDPR-compliant storage of personal references.

The workspace combines materiality analysis, GHG balance, taxonomy classification, supplier data and reporting point in one system. The reporting line and appointment certificate are available, the auditor receives read access to the document chain.

Licence the workspace for your internal representatives or have our representatives order it. The dual model adapts to internal capacities; in both cases the order remains the responsibility of the management.

The FAQ and the public FAQ page answer typical follow-up questions about order deadlines, reporting lines and audit preparation. Others run compliance like a filing cabinet. We run it like software.

Turn reading into a mandate. Write to info@civac.de or use the contact form on civac.de. We respond within the SLA of 2 working days and accompany you from the order to the certified report.