Deep dive: SEC climate disclosure rules & compliance — the fastest-moving subsegments to watch

More than 2,800 SEC registrants filed their first climate-related disclosures under the agency's final climate disclosure rules during the 2025 reporting cycle, with compliance costs averaging $1.2 million per large accelerated filer according to an analysis by Deloitte (2026). That initial wave exposed enormous variation in data readiness, internal controls maturity, and assurance capability across industries. Despite ongoing legal challenges that narrowed certain provisions, the core requirements around Scope 1 and Scope 2 emissions, climate risk governance, and financial impact quantification remain intact and are reshaping corporate reporting infrastructure across every sector. For procurement leaders operating in global supply chains that touch US-listed companies, understanding which compliance subsegments are accelerating fastest is critical for anticipating data requests and positioning ahead of cascading disclosure obligations.

Why It Matters

The SEC's climate disclosure rules represent the most significant expansion of mandatory corporate reporting in the United States since Sarbanes-Oxley. Every public company filing with the SEC must now disclose material climate-related risks, describe governance structures overseeing those risks, and report Scope 1 and Scope 2 greenhouse gas emissions with third-party assurance. The rules affect approximately 7,500 domestic and foreign private issuers filing with the SEC, collectively representing over $50 trillion in market capitalization (SEC, 2025).

The compliance timeline is staggered by filer category. Large accelerated filers with public float above $700 million faced initial disclosure obligations for fiscal years beginning in 2025. Accelerated filers follow one year later. Smaller reporting companies face reduced requirements but are not exempt from core governance and risk disclosures. This phased approach has created a wave of compliance activity that procurement teams must track because data requests cascade through supply chains as reporting entities seek supplier-level emissions data.

The financial materiality threshold embedded in the rules means that companies must quantify climate-related impacts exceeding 1% of any relevant financial statement line item. PwC's 2026 survey of 500 US-listed companies found that 67% identified at least one climate-related financial impact exceeding this threshold, primarily in asset impairment, capital expenditure adjustments, and insurance cost escalation. For procurement leaders, this means that climate-related costs embedded in supply contracts are increasingly visible to investors and subject to board-level scrutiny.

Emerging market suppliers are particularly affected because US-listed companies sourcing from these regions must incorporate supplier emissions into their Scope 3 assessments, even though Scope 3 reporting under the SEC rules is currently voluntary. The practical reality is that large accelerated filers are requesting supplier emissions data regardless, driven by parallel CSRD obligations in the EU and voluntary frameworks like CDP. A 2025 survey by EcoVadis found that 78% of US-listed companies with global supply chains now require Tier 1 suppliers to report emissions data annually.

Key Concepts

Climate risk governance disclosure requires companies to describe the board's oversight of climate-related risks and opportunities, including the identification of specific board members or committees responsible, the frequency of climate risk briefings, and how climate considerations factor into strategic planning and risk management processes. Companies must also disclose management's role in assessing and managing climate risks, including the organizational structures, processes, and reporting lines through which climate information flows to decision-makers.

GHG emissions reporting with assurance mandates that large accelerated filers report Scope 1 and Scope 2 emissions with limited assurance initially, transitioning to reasonable assurance over a multi-year phase-in. This requirement has created an entirely new assurance market, with demand for qualified GHG verifiers exceeding supply by an estimated 3 to 1 ratio in 2025. Limited assurance involves analytical procedures and inquiries, while reasonable assurance requires detailed testing of underlying data, systems, and controls comparable to financial statement audits.

Financial statement integration requires companies to disclose climate-related financial impacts within audited financial statements when those impacts exceed materiality thresholds. This includes the capitalized costs of transition activities, expenditures on carbon offsets, impairment charges on climate-affected assets, and the financial effects of severe weather events. The integration of climate data into audited financials subjects these disclosures to the same internal controls requirements as traditional financial reporting under SOX Section 404.

Transition plan disclosure covers the description of a company's strategy for managing identified climate risks and capitalizing on opportunities, including targets, timelines, and capital allocation plans. Companies with published transition plans must disclose progress metrics and explain material deviations from previously stated targets.

What's Working

GHG Emissions Data Infrastructure

The build-out of corporate GHG emissions data infrastructure is the fastest-moving compliance subsegment, driven by the hard deadline for emissions reporting. Persefoni, the enterprise carbon accounting platform, reported a 340% increase in US-listed company subscriptions between Q1 2025 and Q1 2026, with the platform now processing emissions data for companies representing over $8 trillion in combined market capitalization (Persefoni, 2026). Watershed, another leading platform, onboarded 180 new SEC registrants during the same period. These platforms automate the collection, calculation, and audit trail generation for Scope 1 and Scope 2 emissions, reducing the manual effort by 60 to 80% compared to spreadsheet-based approaches.

The data infrastructure buildout is particularly advanced in energy-intensive sectors. A consortium of 45 oil and gas companies established a shared emissions data protocol in 2025 that standardizes measurement methodologies for upstream operations, reducing inter-company data variation by 40% and simplifying assurance procedures. In the utilities sector, the Edison Electric Institute published a sector-specific emissions reporting template adopted by 85% of US investor-owned utilities, enabling consistent reporting across generation, transmission, and distribution operations.

Financial services firms have invested heavily in financed emissions calculation engines. JPMorgan Chase deployed a proprietary system that estimates emissions across its $2.4 trillion loan portfolio using a combination of reported client data, sector-average emission factors, and economic activity proxies. The system processes data from over 40,000 counterparties and generates emissions estimates with confidence intervals that the bank reports alongside point estimates.

Internal Controls Over Climate Reporting

The extension of SOX-equivalent internal controls to climate disclosures has catalyzed a new compliance subsegment. KPMG's 2026 survey found that 72% of large accelerated filers established dedicated climate reporting control frameworks during 2025, with average implementation costs of $400,000 to $800,000 for companies with existing sustainability reporting programs and $1.5 to $3 million for those building from scratch. The most mature implementations mirror financial reporting controls with segregation of duties, automated data validation rules, quarterly management review processes, and formal change management procedures for emissions calculation methodologies.

EY's climate assurance practice reported conducting over 400 limited assurance engagements for SEC registrants during 2025, developing standardized testing procedures that evaluate data completeness, accuracy of emission factor application, and proper organizational boundary definition. The firm identified that the most common control deficiency is inadequate documentation of estimation methodologies used for Scope 1 fugitive emissions, affecting approximately 35% of first-year filers in the manufacturing and energy sectors.

Board Governance Readiness

Board-level climate governance has matured rapidly. Spencer Stuart's 2026 Board Index found that 58% of S&P 500 companies now have at least one board member with demonstrable climate or sustainability expertise, up from 31% in 2023. More significantly, 44% of S&P 500 boards have assigned climate oversight to a dedicated committee or formally integrated climate responsibilities into existing risk or audit committee charters. The governance disclosure requirement has prompted boards to formalize processes that were previously informal, creating documented evidence trails for climate risk discussions, strategic planning sessions, and capital allocation decisions.

What's Not Working

Scope 3 Data Readiness

While the SEC's final rules made Scope 3 reporting voluntary rather than mandatory, the practical reality is that investor expectations, CDP questionnaires, and CSRD requirements are driving demand for Scope 3 data regardless. The gap between demand and capability remains wide. The Boston Consulting Group's 2025 analysis found that only 23% of S&P 500 companies can report Scope 3 emissions with confidence intervals narrower than plus or minus 30%. For companies with complex global supply chains sourcing from emerging markets, data quality drops further, with uncertainty ranges of 50 to 100% common for Category 1 (purchased goods and services) emissions. Suppliers in emerging markets frequently lack the measurement infrastructure, technical expertise, and organizational incentive to provide primary emissions data, forcing reporting companies to rely on spend-based estimates with high uncertainty.

Assurance Capacity Constraints

The demand for GHG assurance services has outpaced the supply of qualified professionals. The AICPA reported that fewer than 2,000 CPAs in the United States hold GHG verification credentials recognized by the SEC's assurance framework, against estimated demand for 5,000 to 7,000 practitioners during the initial compliance wave. The Big Four accounting firms have responded by hiring environmental engineers and sustainability consultants and enrolling them in accelerated attestation training programs, but the pipeline requires 18 to 24 months to produce practitioners capable of leading assurance engagements independently. This capacity constraint has inflated assurance fees by 25 to 40% above pre-rule projections, with large accelerated filers reporting average GHG assurance costs of $200,000 to $500,000 annually.

Financial Impact Quantification

Translating physical and transition climate risks into auditable financial statement line items remains a significant challenge. Companies struggle with the forward-looking nature of climate financial impacts, which requires scenario analysis, probability weighting, and time-horizon assumptions that do not fit neatly into historical-cost accounting frameworks. The SEC staff issued interpretive guidance in late 2025 clarifying expectations for asset impairment testing related to stranded asset risk, but companies in the fossil fuel, real estate, and agriculture sectors continue to face methodological uncertainty. A 2026 analysis by S&P Global found that financial restatement risk related to climate disclosures is concentrated in sectors where physical asset portfolios have long useful lives and high exposure to transition risk, particularly upstream oil and gas, thermal coal, and coastal commercial real estate.

Key Players

Established Companies

• Deloitte: the largest provider of climate disclosure advisory services to SEC registrants, with over 600 engagements in the 2025 reporting cycle and dedicated climate assurance teams in 30 US offices
• PwC: leading provider of SOX-integrated climate controls advisory, with a proprietary Climate Controls Framework adopted by over 200 large accelerated filers
• Persefoni: the dominant enterprise carbon accounting platform for SEC compliance, processing emissions data for companies representing over $8 trillion in market capitalization
• S&P Global: provider of climate risk analytics and benchmarking data used by companies and investors to evaluate disclosure quality and peer comparisons

Startups

• Watershed: a carbon accounting platform that onboarded 180 SEC registrants in 2025, offering automated Scope 1 and Scope 2 calculations with built-in audit trail generation and assurance-ready reporting
• Novisto: an ESG data management platform specializing in regulatory compliance workflows, with pre-built SEC climate disclosure templates and internal controls mapping
• Sustain.Life: a mid-market focused carbon accounting solution enabling smaller accelerated filers to meet SEC emissions reporting requirements at lower cost points

Investors

• BlackRock: the world's largest asset manager, actively engaging with portfolio companies on SEC climate disclosure readiness and incorporating disclosure quality into stewardship assessments
• State Street Global Advisors: integrating SEC climate disclosure data into its proprietary ESG scoring system and voting against directors at companies with inadequate climate governance
• CalPERS: the largest US public pension fund, using SEC climate disclosure filings to evaluate portfolio company transition risk and inform engagement priorities

KPI Benchmarks by Use Case

Metric	Large Accelerated Filer	Accelerated Filer	Smaller Reporting Company
Compliance cost (annual)	$800K-$2M	$400K-$1M	$150K-$400K
GHG assurance cost	$200K-$500K	$100K-$250K	$50K-$120K
Data collection cycle time	45-90 days	60-120 days	90-180 days
Internal controls maturity	SOX-integrated	Partial integration	Basic documentation
Board climate expertise	1-3 members	0-2 members	0-1 members
Scope 1&2 data accuracy	Plus/minus 5-10%	Plus/minus 10-20%	Plus/minus 15-30%
Restatement risk (Year 1)	8-15%	12-20%	15-25%

Action Checklist

• Map all SEC filing entities within your corporate structure and determine filer category, compliance timeline, and applicable disclosure requirements for each
• Deploy an enterprise carbon accounting platform with built-in audit trail generation and assurance-ready reporting for Scope 1 and Scope 2 emissions
• Establish internal controls over climate reporting that mirror SOX Section 404 requirements, including segregation of duties, data validation rules, and quarterly management review
• Engage an assurance provider with GHG verification credentials at least 6 months before your first filing deadline to allow time for readiness assessment and remediation
• Conduct a financial materiality assessment to identify climate-related impacts exceeding the 1% threshold for relevant financial statement line items
• Formalize board governance structures for climate oversight, including committee charters, meeting cadence, and documentation protocols
• Begin collecting primary emissions data from Tier 1 suppliers in anticipation of investor and customer pressure for Scope 3 reporting
• Establish a cross-functional disclosure committee spanning finance, legal, sustainability, and operations to coordinate climate reporting workflows

FAQ

Q: How do the SEC climate disclosure rules interact with CSRD requirements for companies listed in both the US and EU? A: Companies subject to both regimes must map overlapping requirements to avoid duplicative reporting efforts. The SEC rules focus on financial materiality (single materiality), while CSRD requires double materiality assessment covering both financial and impact perspectives. In practice, data collected for CSRD reporting typically exceeds SEC requirements, so companies are building unified data platforms that serve both frameworks. The European Financial Reporting Advisory Group (EFRAG) and SEC staff have engaged in technical dialogue on interoperability, but no formal equivalence determination exists as of early 2026. Companies should maintain a single source of truth for emissions data and map outputs to each framework's specific format and disclosure requirements.

Q: What are the most common deficiencies found in first-year SEC climate filings? A: Based on SEC staff comment letters and assurance provider observations from the 2025 cycle, the most frequent deficiencies include incomplete organizational boundary definitions (failing to account for joint ventures, equity investments, or franchised operations), inconsistent application of emission factors across business units, inadequate documentation of estimation methodologies for fugitive and process emissions, and insufficient disclosure of climate risk governance processes. Financial statement integration issues are also common, particularly the failure to connect disclosed climate risks to specific financial statement impacts such as asset impairment, contingent liabilities, or capital expenditure adjustments.

Q: How should emerging market suppliers prepare for SEC-driven data requests from US-listed customers? A: Emerging market suppliers should prioritize three actions. First, establish baseline Scope 1 and Scope 2 emissions measurement using internationally recognized protocols such as the GHG Protocol Corporate Standard. Second, implement a data management system that produces auditable records, even if using simplified calculation approaches initially. Third, obtain third-party verification at the limited assurance level, which typically costs $15,000 to $40,000 for mid-sized manufacturing facilities. Suppliers that proactively provide verified emissions data position themselves as preferred partners, as US-listed companies increasingly factor supplier data readiness into procurement decisions and contract renewals.

Q: What is the expected trajectory for assurance requirements under the SEC rules? A: The SEC rules phase in assurance requirements over a multi-year period. Large accelerated filers begin with limited assurance over Scope 1 and Scope 2 emissions, transitioning to reasonable assurance within three fiscal years. Reasonable assurance requires detailed testing of data systems, controls, and calculation methodologies comparable to a financial statement audit. Companies should begin preparing for reasonable assurance from day one by building controls infrastructure that meets the higher standard, rather than establishing limited assurance controls and then upgrading. Early investment in robust controls reduces the incremental cost of transitioning from limited to reasonable assurance by an estimated 40 to 60%.

Sources

• SEC. (2025). Final Rule: The Enhancement and Standardization of Climate-Related Disclosures for Investors. Washington, DC: US Securities and Exchange Commission.
• Deloitte. (2026). SEC Climate Disclosure Compliance: First-Year Insights and Benchmarking Report. New York: Deloitte.
• PwC. (2026). Climate Disclosure Readiness Survey: US Public Company Benchmarks. New York: PwC.
• Boston Consulting Group. (2025). The Scope 3 Data Challenge: Corporate Readiness for Supply Chain Emissions Reporting. Boston: BCG.
• S&P Global. (2026). Climate Financial Impact Assessment: Sector Analysis of SEC Disclosure Filings. New York: S&P Global.
• Spencer Stuart. (2026). 2026 S&P 500 Board Index: Climate Governance and Director Expertise. Chicago: Spencer Stuart.
• AICPA. (2025). GHG Assurance Workforce Readiness: Capacity Assessment and Pipeline Analysis. Durham, NC: AICPA.