
Photo by Mika Baumeister on Unsplash
Companies need to evaluate their environmental impact, social responsibility, and governance to identify sustainability risks. ESG help assess the effectiveness of policies and related controls.
This article discusses the definition of ESG auditing, the three pillars of assessment, the preparation checklist, and GCG compliance. You'll also understand how to integrate audit results into Audithink workpapers.
Understanding the Meaning of ESG Audits and Their Urgency for Business
A company's ESG audit is an evaluation of an organization's policies, processes, and performance across environmental, social, and governance aspects. This audit helps identify risks and opportunities for improvement.
Implementing ESG audits supports corporate transparency and accountability to stakeholders. The results can inform policy improvements and the monitoring of sustainability targets.
Understanding ESG Audits in Organizational Sustainability Evaluation
An ESG audit is an evaluation process to assess the alignment of a company's practices with established sustainability policies, criteria, and targets. Its scope is tailored to the characteristics of the organization.
Audits may cover energy use, waste management, workplace safety, employee rights, and transparency of decision-making. Auditors gather evidence to evaluate the effectiveness of related controls.
Audit results help companies identify gaps between policy and implementation. Recommendations for improvement can then be used to strengthen sustainability risk management.
The Difference Between Conventional Financial Audits and ESG Sustainability Audits
A financial audit focuses on the fairness of financial information based on applicable reporting criteria. The examination includes transactions, account balances, and controls related to financial reporting.
In contrast, ESG sustainability audits evaluate environmental, social, and governance aspects. The audit can cover emissions, occupational safety, human rights, and anti-corruption mechanisms. To understand the comparison more deeply with types of audits otherwise, the company may review the applicable scope of the audit.
Both can complement each other in managing corporate risk. However, the objectives, criteria, evidence, and required competencies depend on the scope of the audit.
Three Key Pillars of a Corporate ESG Audit
The company's ESG audit covers three main pillars, namely Environmental, Social, and GovernanceEach pillar has indicators tailored to the organization's activities and risks.
Companies need to define assessment criteria, data sources, responsible parties, and monitoring methods. This approach helps maintain evaluation consistency and documentation quality.
Environmental Aspects: Measuring Environmental Impact and Carbon Emissions
Pillar Environmental Evaluate the impact of a company's operations on the environment. The review may include energy consumption, water use, greenhouse gas emissions, and waste management.
Auditors examine environmental data, related permits, resource use records, and evidence of impact reduction program implementation. The results are compared against relevant targets and regulations.
The indicators selected need to be tailored to the industry's characteristics. Manufacturing companies, for example, may require greater attention to emissions, production waste, and energy efficiency.
Social Aspects: Evaluation of Social Responsibility and Occupational Safety
Pillar Social assesses how a company treats employees, consumers, communities, and other stakeholders. This aspect relates to workers' rights, safety, equality, and social responsibility.
Audits may examine workplace accident records, safety training, anti-discrimination policies, and grievance mechanisms. Auditors also assess evidence of the implementation of relevant social programs.
Evaluations help identify worker protection weaknesses and potential social impacts. Companies can then establish corrective actions based on the level of risk and the audit results.
Governance Aspects: GCG and ESG Compliance in Governance
Pillar Governance Evaluate the company's oversight structure, transparency, business ethics, and compliance. The audit may include anti-corruption policies, conflicts of interest policies, and whistleblowing mechanisms.
GCG and ESG compliance requires a clear division of responsibilities between the board of directors, management, and the oversight function. Auditors examine policies and evidence of their implementation in operations.
In Indonesia, companies covered by relevant regulations must comply with OJK regulations regarding sustainable finance. One reference is POJK No. 51/POJK.03/2017.
ESG Audit Checklist for Assessment Preparation

Photo by Markus Winkler on Unsplash
An ESG audit checklist helps auditors prepare documents, define indicators, and systematically evaluate evidence. The checklist should be tailored to the company's sector, business scale, and obligations.
Before the audit begins, define the scope, audit period, criteria, and work units involved. This preparation helps reduce evidence gaps during the evaluation process.
Environmental Performance Assessment and Waste Management Indicators
An environmental checklist can include indicators related to resource consumption, emissions, and waste management. Auditors need to examine the evidence supporting each indicator.
- Energy and water consumption.
- Greenhouse gas emissions data.
- Volume and management of waste.
- Compliance with environmental permits.
- Environmental impact reduction targets.
- Evidence of implementation of the improvement program.
Each indicator must have a clear data source and responsibility. Auditors then check the data for consistency and compliance with the assessment criteria.
Preparation of Corporate Governance Compliance Documents
Governance documents serve as important evidence for evaluating the implementation of policies and controls. The completeness of the documents helps auditors assess whether procedures have been consistently implemented.
Document checklists may include:
- GCG policy and code of ethics.
- Anti-corruption and conflict of interest policies.
- Organizational structure and division of responsibilities.
- Complaint and violation reporting mechanisms.
- Minutes of meetings and supervisory decisions.
- Compliance training notes and follow-up findings.
Auditors need to check dates, approvals, document owners, and evidence of implementation. Available documentation does not automatically prove that a policy is effective.
Integration of ESG Sustainability Audits into Audithink Working Papers
ESG audit documentation should link criteria, evidence, test results, and recommendations. Structured management facilitates review and follow-up monitoring.
Companies can utilize an internal audit system to centrally manage assignments and documentation. Integration needs should be tailored to the application's features and organizational processes. You can also learn strategic guidance on implementation in this article. GRC and ESG integration: implementation, importance & barriers.
Automated Data-Based Sustainability Indicator Monitoring
Monitoring sustainability indicators requires consistent and traceable data. Digital systems can help organize data, schedule evaluations, and identify those responsible for indicators.
Auditors can compare actual results with the company's targets. Significant differences are then analyzed to determine the cause and the need for corrective action.
Automation does not replace data validation or auditor judgment. The quality of the results remains dependent on the accuracy of the sources, indicator definitions, and control mechanisms.
Transparent Reporting and Action Plan Management
The ESG audit report summarizes the scope, criteria, audit results, and recommendations for improvement. Consistent presentation helps management understand risks and prioritize follow-up actions.
Each recommendation should have a responsible person, a deadline, and indicators for completion. The auditor then monitors progress and reviews evidence before closing the follow-up action.
Audithink can be considered to support the management of internal audit processes and their documentation. Confirming the required features remains essential before determining the system configuration for ESG audits.
Conclusion
A company's ESG audit helps evaluate its environmental impact, social responsibility, and governance. A structured checklist supports the examination of evidence, identification of risks, and the development of recommendations for improvement.
Companies can learn Audithink solutions to support internal audit management. Schedule a demo to discuss your company's documentation, reporting, and follow-up monitoring needs.
FAQ
What is a company ESG audit?
A company's ESG audit is an evaluation of its environmental, social, and governance practices to identify risks, assess controls, and determine opportunities for improvement.
What are the three main pillars of an ESG audit?
The three pillars of an ESG audit include Environmental for environmental aspects, Social for social responsibility, and Governance for corporate governance.
How to prepare an ESG audit checklist?
Determine the scope and criteria, compile indicators for each pillar, collect supporting documents, then determine the person responsible and the inspection method.
What is the difference between an ESG audit and a financial audit?
Financial audits focus on financial information, while ESG audits evaluate environmental, social, and governance aspects according to audit criteria.
Why is GCG and ESG compliance important for companies?
GCG and ESG compliance helps strengthen transparency, accountability, risk control, and oversight of responsible business practices.
How does internal audit software help ESG audits?
Internal audit software can help manage assignments, work papers, documentation of findings, reporting, and follow-up monitoring according to the available features.



