How to Run an ESG Materiality Assessment That Holds Up to Scrutiny
A practical guide to designing and executing an ESG materiality assessment for regulated financial services firms. Readers will finish with a clear method for scoping, engaging stakeholders, prioritising issues, and producing outputs that survive audit, supervisor, and board challenge.
An ESG materiality assessment identifies which environmental, social, and governance issues matter enough to your business and stakeholders to warrant disclosure, management, and board attention. Done well, it becomes the backbone of your sustainability strategy, your CSRD or ISSB reporting, and your defence when a supervisor or investor asks why you prioritised one issue over another. Done poorly, it becomes a colourful matrix that nobody trusts. This guide walks through how to run one properly.
Key Executive Takeaways
- A defensible ESG materiality assessment requires two distinct lenses: impact materiality (your effect on people and planet) and financial materiality (ESG issues affecting enterprise value), assessed separately before being combined.
- Stakeholder engagement is the part most firms weaken by relying on internal proxies; real evidence from investors, customers, employees, regulators, and affected communities is what makes the output credible.
- The output is not a matrix. It is a prioritised list of issues, each with a documented rationale, thresholds, and owners, ready to feed disclosure, risk registers, and strategy.
Start With the Purpose, Not the Framework
Before choosing between CSRD's double materiality, ISSB's financial focus, or GRI's impact lens, decide what the assessment must do. Is this a regulatory filing input? A strategy refresh? A board education exercise? The answer shapes scope, rigour, and audience. Most firms conflate these and produce something that serves none of them well.
For EU-regulated entities, double materiality under CSRD is not optional. For UK and US firms, ISSB-aligned financial materiality is increasingly the default, but investor and NGO pressure often pulls impact materiality back in. Decide the primary lens, then decide whether you are adding a secondary one.
Scope the Value Chain Honestly
Materiality is not just about your operations. For a bank, the emissions that matter sit in the loan book. For an asset manager, they sit in portfolio companies. For an insurer, in underwriting exposures and investments. Draw the boundary too tightly and you will be challenged by auditors, regulators, and activist investors. Draw it too widely without evidence and you dilute the exercise.
Document the boundary decision explicitly. This is where later challenge tends to land.
Build the Long List From Evidence, Not Opinion
Start with sector-specific sources: SASB standards, ESRS topical standards, TCFD and TNFD categories, peer disclosures, ratings agency methodologies, and supervisor priorities. Add issues surfaced by litigation, media, and NGO campaigns in your sector. You should end with 30 to 50 candidate topics before filtering.
What most firms get wrong: they start with a workshop and generate topics from internal memory. This produces a list that reflects what management is already comfortable discussing.
Engage Stakeholders With Discipline
Run structured engagement across at least five groups: institutional investors, major clients, employees, regulators, and civil society or affected communities. Use interviews for depth and surveys for breadth. Weight the inputs, do not average them. An investor holding 5% of your equity is not equivalent to one respondent on a survey.
Good practice: 20 to 40 substantive interviews, a broader employee and client survey, and documented review of regulator speeches and enforcement themes over the past 24 months.
Assess Impact and Financial Materiality Separately
For each issue, score impact materiality using severity, scope, irremediable character, and likelihood. Score financial materiality using magnitude and probability of effect on cash flows, cost of capital, or access to markets over short, medium, and long horizons. Keep the two scoring exercises separate. Combining them too early hides the logic and makes the result impossible to defend.
Set thresholds before scoring, not after. Retrofitted thresholds are the single most common finding in assurance reviews.
Validate, Prioritise, and Assign Ownership
Take the shortlist to the audit or risk committee for challenge, not just information. Each material issue should leave the process with a named owner, a link to the risk taxonomy, defined metrics, and a disclosure position. If an issue is material but you have no metric, that gap is itself a board matter.
Refresh on a Defined Cadence
Annual light-touch review, full refresh every two to three years, and trigger-based updates after acquisitions, regulatory change, or material incidents. Document the trigger criteria in advance.
The Next Decision
Before commissioning the next assessment, ask whether last year's output actually changed any decision. If it did not, the problem is not the methodology. It is the governance around what happens after the matrix is signed off. Fix that first.
Frequently Asked Questions
How long should a proper ESG materiality assessment take?
For a mid-sized financial services firm, expect ten to sixteen weeks end to end: two to three weeks scoping, four to six weeks stakeholder engagement, three to four weeks analysis and scoring, and two to three weeks validation and board sign-off.
Do we need external consultants?
External support is useful for methodology, stakeholder interviews (where independence improves candour), and benchmarking. The judgement calls on scope, thresholds, and prioritisation should stay inside the firm. Outsourcing those is what produces generic outputs.
How does this connect to our risk taxonomy?
Every material ESG issue should map to at least one entry in the enterprise risk taxonomy, with a clear owner in the first line. If it does not map, either the taxonomy is incomplete or the issue is not truly material. Both are worth knowing.
What do assurance providers look for?
Documented methodology, evidence of stakeholder engagement, thresholds set in advance, traceability from raw inputs to final prioritisation, and consistency between the materiality output and what is actually disclosed. Gaps in any of these are where qualified opinions come from.
How do we handle disagreement between stakeholder groups?
Do not average it away. Document the divergence explicitly, explain how you weighted the inputs, and disclose the tension where relevant. Regulators and sophisticated investors respect transparency about trade-offs more than a tidy consensus.
Frequently asked questions
How long should a proper ESG materiality assessment take?
For a mid-sized financial services firm, expect ten to sixteen weeks end to end: two to three weeks scoping, four to six weeks stakeholder engagement, three to four weeks analysis and scoring, and two to three weeks validation and board sign-off.
Do we need external consultants?
External support is useful for methodology, stakeholder interviews (where independence improves candour), and benchmarking. The judgement calls on scope, thresholds, and prioritisation should stay inside the firm. Outsourcing those is what produces generic outputs.
How does this connect to our risk taxonomy?
Every material ESG issue should map to at least one entry in the enterprise risk taxonomy, with a clear owner in the first line. If it does not map, either the taxonomy is incomplete or the issue is not truly material. Both are worth knowing.
What do assurance providers look for?
Documented methodology, evidence of stakeholder engagement, thresholds set in advance, traceability from raw inputs to final prioritisation, and consistency between the materiality output and what is actually disclosed. Gaps in any of these are where qualified opinions come from.
How do we handle disagreement between stakeholder groups?
Do not average it away. Document the divergence explicitly, explain how you weighted the inputs, and disclose the tension where relevant. Regulators and sophisticated investors respect transparency about trade-offs more than a tidy consensus.
Related guides
How to Prepare a Regulatory Filing With Stakeholder Risk Assessment
A practical guide to embedding stakeholder risk assessment into a regulatory filing so it reads as credible, evidenced, and decision-ready. After reading, you will know how to sequence the work, what supervisors actually look for, and where filings typically fall apart.
How to Handle a Pre-Emptive Regulator Meeting After a Governance Failure
This guide covers how to prepare for and run a self-initiated regulator meeting when you have discovered a material governance failure inside your firm. After reading, you will know how to sequence the disclosure, frame the failure, and position remediation in a way that preserves credibility and controls the supervisory response.
Positioning a Consumer Duty Review for Board and Regulator Audiences
This guide sets out how to structure a Consumer Duty implementation review so it works for both your board and the FCA without compromising either audience. You will finish with a clear approach to framing, evidence, and sequencing that avoids the common trap of producing two conflicting narratives.
How to Structure a Section 166 Response That Preserves Board Credibility
A practical guide to responding to a Skilled Person review in a way that protects the board's standing with the regulator. Covers how to sequence the engagement, where boards typically damage their own credibility, and how to convert findings into a credible remediation posture.
How to Prepare Your Board for an SMCR Accountability Challenge
This guide sets out how to ready your board and Senior Managers for a regulator-led accountability challenge under SMCR, including where the evidentiary weaknesses usually sit. After reading, you will know what to test, what to document, and how to sequence the internal work before the FCA or PRA comes knocking.
Where internal confidence may exceed external evidence
Polar Insight helps leadership teams test critical assumptions against stakeholder, market, regulatory, and operational reality before risk compounds.
Explore Stakeholder Proximity