As companies increasingly integrate environmental, social, and governance (ESG) factors into their strategies, they face a fundamental challenge: sustainability cannot be managed effectively without a solid organizational framework. Recent research reinforces the importance of this issue. BDO’s Global Sustainability Survey 2026 identifies governance and business ethics as the leading sustainability priorities among surveyed organizations. It also highlights the challenges of embedding sustainability into corporate strategy through reliable data and effective measurement systems.
Setting environmental and social objectives, defining key performance indicators (KPIs), and reporting on performance are essential steps. Yet turning commitments into tangible results also requires robust decision-making processes, clearly defined responsibilities, reliable data, effective controls, and the ability to anticipate and manage risks.
Governance as the Foundation of Sustainability
Governance plays a role that extends far beyond being the third pillar of ESG. It provides the organizational framework through which strategic priorities are translated into responsibilities, processes, controls, and everyday practices.
The effectiveness of a sustainability strategy therefore depends on how well it is embedded in an organization’s governance structures. For example:
- Environmental impact reduction targets must be supported by processes that identify and manage relevant environmental aspects
- Gender equality commitments require clear responsibilities, measurable indicators, and monitoring mechanisms
- Principles of integrity and ethical conduct must be reflected in organizational systems designed to prevent noncompliance and manage associated risks
Sustainability should not operate as a separate structure alongside corporate governance. Much of the infrastructure needed to manage and monitor sustainability performance may already exist within the organizational models and management tools a company has developed over time.
Management Systems: The Method Matters More Than Certification
ISO 9001, ISO 14001, ISO/IEC 27001, UNI/PdR 125:2022, the Model 231, ISO 50001, and ISO 50100:2026 serve different purposes and apply to different areas. Nevertheless, each contributes, to varying degrees, to the broader dimensions of sustainability.
Their value lies not simply in obtaining certification, but in establishing structured approaches to accountability, measurement, oversight, and continuous improvement.
Defining roles, identifying risks and opportunities, setting objectives, monitoring performance, conducting audits, and addressing deviations all help make business operations more structured, transparent, and verifiable.
From this perspective, management systems and organizational models can provide practical mechanisms for progressively integrating sustainability objectives into everyday business operations.
Three Practical Examples: Energy, Gender Equality, and Model 231
The first example concerns environmental and energy management. ISO 14001 provides a framework for managing environmental aspects and impacts, while ISO 50001 focuses on improving energy performance. ISO 50100:2026 establishes requirements and guidelines for reducing energy-related greenhouse gas emissions.
When embedded in business processes, these frameworks can turn environmental and decarbonization commitments into measurable objectives, clearly assigned responsibilities, action plans, and performance assessments. In doing so, they strengthen the connection between sustainability strategy and corporate governance.
The second example is UNI/PdR 125:2022, the Italian reference practice for gender equality. It demonstrates how an organizational commitment can move beyond a statement of intent and become measurable and manageable.
The framework establishes indicators across six areas:
- Culture and strategy
- Governance
- Human resources processes
- Opportunities for women’s growth and inclusion
- Pay equity
- Parental support and work-life balance
From a governance perspective, this represents an important step: a social commitment becomes part of a structured system of measurement, reporting, and data-based evaluation.
The third example is the Organization, Management, and Control Model established under Italian Legislative Decree 231/2001, commonly referred to as Model 231. The legislation introduced a framework for corporate liability in connection with certain criminal offenses committed, or attempted, in an organization’s interest or for its benefit.
Model 231 therefore serves as an ethical and organizational mechanism designed to prevent such offenses. Its relevance to sustainability governance lies in its contribution to a structured system of prevention, accountability, and internal controls.
From Separate Systems to Integrated Governance
The direction is clear: rather than creating multiple standalone systems, organizations should progressively integrate their governance, risk management, and compliance frameworks.
Quality management, environmental management, information security, gender equality, and Model 231 each serve distinct purposes. However, they can collectively strengthen corporate governance when their processes, responsibilities, risks, information, and controls are managed within a coherent framework.
The challenge is to avoid developing systems that meet formal requirements but operate in isolation, making it difficult to bring responsibilities, information, and performance indicators together to support consistent decision-making.
Effective governance connects these elements. It aligns risks with strategy, objectives with responsibilities, performance indicators with decision-making processes, and controls with corrective actions.
This integrated approach is also reflected in ESRS 2 – General Disclosures, which establishes specific governance disclosure requirements covering:
- The role of administrative, management, and supervisory bodies
- Sustainability information provided to these bodies
- The integration of sustainability performance into incentive schemes
- Due diligence processes
- Risk management and internal control systems for sustainability reporting
Beyond Certification: Building a Credible Governance Framework
This shift in perspective points toward a governance model in which quality, environmental management, human capital, information security, compliance, risk management, and internal controls each contribute to an organization’s ability to pursue long-term objectives ethically and sustainably.
Within this model, certifications are not, in themselves, proof of a company’s sustainability performance. Instead, management systems, organizational models, and certifications can become the building blocks of a credible organizational framework grounded in accountability, risk management, measurement, and continuous improvement.
For organizations, the defining question will increasingly be not how many certifications they hold, but how effectively their different systems work together to support sustainability governance.
