The programme behind the report. · Subang Jaya, Selangor

Regulation · Guide

The ESG framework in Malaysia

Who sets the rules, what each one asks you to produce, and the point at which a sustainability statement stops being a narrative document and starts being an assured one.

What ESG means here

ESG is a way of describing how an organisation performs against three sets of non-financial factors, and how it governs that performance.

  • Environmental. Carbon emissions, energy use, waste, water and the resource footprint of the operation.
  • Social. Labour practices, health and safety, diversity, training and the relationship with the surrounding community.
  • Governance. Board oversight, transparency, anti-bribery and anti-corruption controls, and how decisions get documented.

In Malaysia, ESG performance is no longer only a reputational matter. It now affects access to capital, eligibility for financing, tenant and customer procurement decisions, and, for listed issuers, direct regulatory obligation.

The practical question is not whether ESG applies to you. It is whether the numbers you would have to disclose can be traced to a record from your own asset.

The regulatory landscape

Several bodies set requirements that overlap. The table below is the short version; each is expanded underneath.

BodyInstrumentWho it binds
Securities CommissionNational Sustainability Reporting Framework (NSRF)Listed issuers and large non-listed companies, phased
Bursa MalaysiaListing requirements & sustainability reporting guideMain Market and ACE Market issuers
Bank Negara MalaysiaClimate Change and Principle-based Taxonomy (CCPT)Financial institutions, from 2021
MITINational industry ESG framework (i-ESG)Manufacturing sector, voluntary phase first
Ministry of FinanceTax incentives and deductions for ESG expenditureCompanies incurring qualifying expenditure

Securities Commission Malaysia

The National Sustainability Reporting Framework sets the national baseline for sustainability disclosure and adopts the international standards as its reference point. It applies on a phased basis, beginning with the largest listed issuers and extending over subsequent years to the remainder of the listed market and to large non-listed companies. The phasing matters operationally: an organisation that falls into a later phase still needs a baseline year of data before its first reporting period, which usually means starting measurement well ahead of the deadline.

Disclosure is only one layer. The operational waste rules, including mandatory source separation and the raised penalties under the 2024 amendment, apply regardless of whether you are a listed issuer. We keep those in a single Regulation reference.

Bursa Malaysia

Sustainability reporting is mandatory for listed issuers through the listing requirements. For financial years ending from 31 December 2025, Main Market issuers are required to include climate-related disclosures, performance data across a multi-year comparative window, stated targets, and a statement covering assurance.

The comparative-data requirement is the one that catches organisations out. A disclosure that must show performance across several years cannot be produced from a measurement programme started the same year the report is due.

Bank Negara Malaysia

The Climate Change and Principle-based Taxonomy, introduced in 2021, gives financial institutions a common basis for classifying economic activity by its climate impact. It binds the banks directly, but it reaches borrowers indirectly, because a lender applying the taxonomy will ask its customers for the underlying evidence. For a property owner, that increasingly arrives as a financing condition rather than a regulatory one.

Ministry of Investment, Trade and Industry

The national industry ESG framework supports the manufacturing sector in adopting ESG practice, opening with a voluntary readiness-assessment phase before moving towards firmer expectations. It sits within Malaysia’s wider commitment to reduce greenhouse gas emissions intensity by 45% by 2030 against a 2005 baseline.

Fiscal incentives

Government support runs alongside the obligation: allowances for qualifying green investment, a deduction for ESG-related expenditure, exemptions supporting carbon measurement and verification, and programmes enabling corporate procurement of renewable power. These are covered separately in our note on green and ESG incentives.

Reporting standards in use

Malaysian reporting draws on both local guidance and international standards.

StandardWhat it covers
IFRS S1General requirements for disclosing sustainability-related financial information
IFRS S2Climate-related disclosures, building on the TCFD structure, including scenario analysis
GRIBroad sustainability metrics across environmental, social and governance topics
SASBSector-specific indicators aimed at financially material topics
TCFDThe climate risk framework that IFRS S2 is built upon
CCPTClimate classification applied within the financial sector

IFRS S1 and S2 together form the global baseline that national frameworks, including Malaysia’s, are converging on. The significance for an operator is that these standards are built for investor use, which means the disclosures are expected to be specific, quantified and capable of being checked.

ESG ratings

Independent rating providers score organisations on ESG performance and disclosure quality. Those commonly referenced in the Malaysian market include the FTSE4Good Bursa Malaysia Index, MSCI ESG Ratings and Sustainalytics.

Ratings influence investment screening, allow peer benchmarking within a sector, and feed into how counterparties assess an organisation. They are largely built from what an organisation publishes, so disclosure gaps read as performance gaps, whether or not that is fair.

What compliance involves

In practice, an ESG compliance programme in Malaysia usually comprises:

  1. A materiality assessment establishing which topics genuinely matter to the business and its stakeholders.
  2. Alignment of the reporting approach with the applicable regulatory guidance and the chosen standards.
  3. Regular internal review of the data, the controls around it, and the gaps against the requirements.
  4. Engagement of external assurance where that is required or where credibility demands it.

Steps one, two and four are advisory work. Step three is where most programmes fail, because it depends on data that only exists if somebody has been measuring.

Audit and assurance: from intention to verification

An ESG audit is the mechanism that moves a sustainability statement from stated intention to verified position. It does four things:

  • Establishes credibility and transparency by testing reported figures against underlying records.
  • Identifies compliance gaps before a regulator or an investor does.
  • Builds investor and lender confidence in the numbers being relied on.
  • Mitigates greenwashing exposure, which is increasingly a legal and reputational risk rather than a theoretical one.
An auditor does not test intent. An auditor tests whether the number in the statement can be reconciled to a record. Where the record is a supplier estimate or an industry average, the disclosure is exposed, regardless of how well the programme was designed on paper.

The assurance timeline

External assurance is being introduced progressively rather than all at once. The published sequence for reasonable assurance under the national framework runs as follows.

FromWho it applies to
FY 2025Main Market issuers: climate-related disclosures required in the sustainability statement
2026Extended across the remainder of the Main Market
2027Reasonable assurance begins for Main Market issuers with market capitalisation of RM2 billion or above
2028Reasonable assurance extends to other Main Market issuers
2029Reasonable assurance extends to ACE Market companies and large non-listed entities

Read backwards, the timeline is a measurement deadline, not a reporting one. An organisation facing assurance in 2028 needs a defensible baseline and comparative data well before that, which puts the start of serious measurement in the near term, not at the end of the decade.

Where organisations struggle

  • Cost of compliance for smaller organisations. The requirements were designed with large issuers in mind; the effort does not scale down neatly.
  • Inconsistent practice between sectors. What counts as adequate evidence in one industry is thin in another, and guidance is still maturing.
  • Limited in-house expertise. Sustainability reporting sits between finance, facilities and corporate affairs, and often belongs fully to none of them.
  • Supply chain pressure. Listed customers push disclosure requirements down to suppliers and landlords who have no direct obligation but cannot decline the request.
  • Data that was never collected. The most common gap by a wide margin, and the only one that cannot be fixed by writing a better report.

The operational answer

Every requirement above eventually reduces to the same demand: produce the record. That is an operational task, not a reporting one, and it is the reason we run sustainability as a Sustainable Circular Economy programme rather than as a disclosure exercise.

A metered energy baseline, a weighed waste baseline and a measured water position give an organisation three things at once: an operating cost reduction, a defensible set of ESG figures, and an evidence trail that survives assurance. The report then becomes the easy part.

Questions we are asked

Large non-listed entities are brought into the national framework in the later phases. Beyond the formal scope, non-listed organisations are commonly pulled in indirectly through bank financing conditions, tenant requirements and procurement questionnaires from listed customers.
Limited assurance produces a negative-form conclusion: nothing came to the practitioner’s attention suggesting the information is misstated. Reasonable assurance is a higher bar, closer to a financial audit, requiring substantially more evidence and testing. The national timeline moves towards reasonable assurance progressively, which raises the standard of underlying records required.
It depends entirely on what sits behind the figures. A statement built on estimates satisfies a publication requirement but will not survive assurance. The useful test is to select three numbers at random from your last statement and ask which record each came from.
For energy, where billing and interval data usually already exist, a desktop baseline can be established quickly and verified on site shortly after. For waste, a continuous weighed measurement window is required, because no credible baseline can be reconstructed from historical haulage invoices alone. Water sits between the two.
Ownership works best where the data originates, so facilities and M&E take energy and water and operations takes waste, with a single reporting line into finance or corporate affairs for disclosure. Programmes fail when the disclosure team is made responsible for data it has no means of collecting.
Note. This guide is general information on the Malaysian regulatory landscape as at the date of publication, and is not legal, tax or accounting advice. Requirements, phasing and effective dates get revised periodically, so confirm the current position with the relevant regulator or your professional adviser before acting on it.

From framework to evidence

The rules ask for a record. We build the thing that produces it.

Measurement establishes where you actually stand on energy, waste and water, the three streams every environmental disclosure ends up drawing on.