Closing the Sustainability Gap: How SAP Finance and GRC Teams Bring Finance-Grade Rigor to ESG Data

Sustainability reporting is becoming finance-grade while many SAP-centric organizations are still working through core finance and GRC integration. According to SAP, IFRS S1 and IFRS S2 are being adopted in more than 40 jurisdictions representing roughly 60% of global GDP, raising expectations for accurate, traceable, and decision-useful sustainability information.

Gunther Rothermel, SAP Sustainability chief product officer, put it plainly in a recent blog: “Sustainability reporting, in short, is becoming finance-grade, and the organizations that treat it that way will be the ones that turn disclosure into an advantage.”

For SAP finance and GRC teams, the practical test is whether ESG reporting inherits the governance, controls, audit trails, and close discipline already applied to financial reporting, or remains a separate annual compliance exercise.

ESG Ranks Low, But Already Affects the Close

In SAPinsider’s Office of the SAP CFO benchmark report, only 8% of CFO respondents list ESG compliance and sustainability as a top strategic priority, compared with 85% for optimizing financial performance and 85% for improving risk and compliance management.

Yet the growing complexity of statutory and ESG reporting affects the financial close approach for 26% of respondents. Thus, ESG may rank low on paper, but it is on the close calendar.

SAPinsider financial close and GRC research also shows an uneven automation baseline:

• Only 13% of financial close and consolidation processes are fully automated
• 47% are partially automated
• 7% remain manual or spreadsheet-driven

As a result, an ESG reporting cycle modeled on the financial close would be modeled on a process many organizations are still modernizing; sustainability data is being asked to meet a standard some financial data has not quite reached.

The Control Problem Is Also an Integration Problem

Finance-grade sustainability reporting depends on the same plumbing that supports finance-grade risk and compliance: integrated data, defined ownership, traceability, and controls. SAPinsider research shows only 13% of organizations have fully integrated financial systems with risk and compliance data; 53% are partially integrated,d and 33% rely on minimal or manual data sharing. SAPinsider links partial or manual integration to higher error risk and regulatory exposure.

Sustainability metrics do not become audit-ready by moving them into a reporting tool. If source data is manually collected, loosely governed, ed or disconnected from control workflows, the final disclosure inherits those weaknesses.

Rothermel’s guidance starts here. “First, build a trusted sustainability data foundation, with governance, traceability, and auditability established from the start,” he wrote.

In practice, that means treating ESG metrics as financial-grade data objects with named owners, defined calculation logic, documented adjustments, cutoffs, reconciliations, and sign-offs. SAP S/4HANA Finance, used by 45% of respondents, and Universal Journal, used by 44%, provide familiar patterns for structured finance data and close governance. The open question is whether sustainability information is brought under comparable discipline.

Extending GRC Discipline to Sustainability Data

The GRC side has momentum. In SAPinsider’s 2025 GRC research, focus areas include process controls (32%), audit management (31%), and user provisioning (31%), while 60% of organizations are automating GRC processes and 53% are centralizing control workflows.

None of it is ESG-specific. No accessible SAPinsider benchmark quantifies how many organizations apply segregation of duties, audit trails, or control workflows to sustainability data, or how much of that data sits in core ERP systems versus spreadsheets or point solutions.

Sustainability processes enter the control universe only when finance and GRC leaders explicitly scope them in: segregation of duties over ESG data collection and adjustments, documented approvals, maintained audit trails, and internal audit involvement before reporting cycles begin. Existing SAP GRC capabilities, including audit management and control workflows, may support parts of such an operating model.

ESG Reporting That Looks Like the Financial Close

The pattern inRothermel’ss guidance is not a parallel ESG process reviewed by finance at the end, but one designed like a close cycle from the start: reporting calendars, data owners, locked periods, reconciled source data, and documented adjustments. Embedding sustainability data into integrated data layers aligns with an investment area already emphasized by 37% of SAP-centric finance respondents.

SAP positions SAP Sustainability Control Tower as a single entry point intended to support audit-ready ESG reporting across IFRS S1/S2, ESRS, and other frameworks. Any such tool depends on governed, traceable source data upstream.

What This Means for SAPinsiders

ESG metrics are entering the close calendar, and the reporting architecture decision cannot wait. With 26% of respondents already reporting that statutory and ESG complexity affects the close, sustainability data is landing in the close cycle whether or not finance leaders design for it. The open question is whether existing close automation, digital audit trail, and Universal Journal investments can absorb sustainability data objects, or whether organizations end up funding a separate ESG reporting stack. Finance leaders should settle that question before the first mandated reporting cycle forces it.

ESG control scope needs to be made explicit before assurance arrives. Current GRC modernization priorities provide relevant control patterns, but the accessible research offers no evidence that ESG scope is being defined at scale. As IFRS S1 and S2 filings approach in adopting jurisdictions, the scope of assurance over sustainability metrics, and which owners and control workflows sit behind them, will become a live topic for GRC and internal audit leaders.SAPinsider’s 2026 Sustainability and ESG Integration research is expected to benchmark how SAP-centric finance organizations govern ESG data alongside SAP S/4HANA Finance and SAP Analytics Cloud, potentially filling the current gap in ESG-specific control maturity data.

Sustainability data is becoming governed enterprise data, not a one-way disclosure extract. For enterprise architects, this shifts evaluation of reporting layers toward lineage, control evidence, and source-system traceability rather than presentation alone. The sustainability gap is as much a finance and GRC execution problem as an ESG problem, and the architecture should be assessed on that basis.