Skip to main content
Promotional banner for the pentest readiness checklist
SEC Climate Proposal Fails to Define "Material", Here's What That Means for Your 10-KDisclosure & Financial Reporting
5 min readFor CFOs & Financial Reporting Officers

SEC Climate Proposal Fails to Define "Material", Here's What That Means for Your 10-K

What Happened

On March 21, 2022, the SEC advanced proposed rule amendments requiring public companies to disclose climate-related information in their financial filings. The proposal passed 3-1 and entered a 60-day public comment period. If adopted, the rules would mandate disclosure of Scope 1 and 2 greenhouse gas emissions, with Scope 3 emissions required when "material" or when included in a company's stated climate targets. The proposal aligns with the Task Force on Climate-Related Financial Disclosures (TCFD) framework and introduces attestation requirements for larger filers.

Timeline

March 21, 2022: SEC commissioners vote 3-1 to advance the climate disclosure proposal.

March 21 - May 20, 2022: 60-day public comment period opens for stakeholder feedback.

Earliest implementation: Fiscal year 2023 for initial Scope 1 and 2 disclosures, with phased implementation for Scope 3 and smaller reporting companies receiving exemptions.

Which Controls Failed or Were Missing

This isn't a traditional compliance failure, it's a regulatory gap that exposed systemic weaknesses in how public companies manage and report environmental data.

Missing: Standardized materiality thresholds for climate risk. The proposal requires Scope 3 disclosure "if material" but doesn't define what constitutes materiality in the context of value chain emissions. Without clear quantitative thresholds, your team faces interpretation risk and potential enforcement inconsistency.

Missing: Data governance frameworks for emissions tracking. Most organizations lack the data infrastructure to calculate Scope 1 and 2 emissions systematically, let alone Scope 3. Manual tracking through spreadsheets introduces calculation errors and makes attestation difficult.

Missing: Clear ownership of ESG within governance structures. The proposal doesn't specify which function should oversee climate disclosures. Finance teams understand SEC filing requirements but may lack emissions accounting expertise. Sustainability teams understand carbon accounting but may not be integrated into financial reporting cycles.

Weak: Third-party data validation processes. The proposal requires accelerated and large accelerated filers to obtain independent attestation for Scope 1 and 2 disclosures, but many organizations haven't established vendor selection criteria or audit procedures for emissions verification.

What the Relevant Standard Requires

The SEC proposal references the TCFD framework, which organizes climate-related disclosures into four pillars: governance, strategy, risk management, and metrics and targets.

TCFD Governance: Your organization must describe the board's oversight of climate-related risks and management's role in assessing those risks. Document who reviews climate data, how often, and what authority they have to act on findings.

TCFD Strategy: Disclose climate-related risks and opportunities across short, medium, and long time horizons. The SEC proposal specifically mentions "severe weather events and other natural conditions", quantify how these events affected operations and financial performance.

TCFD Metrics and Targets: If you've set public climate targets, disclose the scope of activities covered, the timeline for achievement, and progress data. The proposal requires Scope 1 and 2 emissions disclosure for all covered filers, with Scope 3 required when material or when included in targets.

The Sarbanes-Oxley Act already requires public companies to maintain effective internal controls over financial reporting. Under AS 2201, your external auditor evaluates whether those controls provide reasonable assurance regarding the reliability of financial reporting. If climate disclosures become part of your 10-K, they fall under Sarbanes-Oxley Act controls. That means your emissions data needs the same rigor as your revenue recognition.

The COSO Internal Control-Integrated Framework defines control activities as policies and procedures that help ensure management directives are carried out. For climate disclosures, this translates to documented procedures for emissions calculation, data source validation, and review processes before filing.

Lessons and Action Items for Your Team

Stop treating emissions data like a sustainability project. If this proposal passes, Scope 1 and 2 disclosures become financial reporting obligations subject to the same controls as other 10-K content. Your CFO needs to own the disclosure process, even if your sustainability team calculates the numbers.

Document your materiality determination now. The phrase "if material" creates a documentation requirement. You'll need to show how you evaluated whether Scope 3 emissions meet the materiality threshold. Build a framework that considers both quantitative impact (percentage of total emissions, financial exposure) and qualitative factors (reputational risk, regulatory trajectory). Document the assessment annually.

Implement calculation controls before attestation becomes mandatory. The proposal includes a safe harbor for Scope 3 liability, but no such protection exists for Scope 1 and 2. Your attestation provider will test your calculation methodology and source data. Start now:

  • Identify emission sources (facilities, vehicle fleet, purchased electricity)
  • Document calculation methodologies (emission factors, data sources)
  • Establish review procedures (who validates inputs, who approves outputs)
  • Create an audit trail (retain utility bills, fuel receipts, calculation worksheets)

Assign clear governance roles. Your board needs to understand climate risk oversight is shifting from voluntary to mandatory. Consider whether your audit committee should oversee climate disclosures (treating them as financial reporting) or whether you need a separate sustainability committee. Document the decision and the rationale.

Evaluate automation for data aggregation. Manual tracking doesn't scale and introduces errors that attestation will expose. You need systems that pull utility data, apply emission factors, and maintain version control. This isn't optional if you're an accelerated filer facing attestation requirements.

Prepare for Scope 3 even if you're exempt initially. The proposal phases in Scope 3 requirements and exempts smaller reporting companies, but investor pressure and customer demands will likely push you toward disclosure anyway. Start mapping your value chain: which suppliers and customers drive the most emissions? What data do they provide? Where are the gaps?

Test your disclosure against TCFD now. The proposal aligns with TCFD, so use the framework as a readiness check. Can you describe how climate risks affect your strategy? Can you quantify the financial impact of severe weather on operations? If not, you're not ready for SEC scrutiny.

The 60-day comment period has closed. Companies that waited for final rules missed the preparation window. Whether this proposal passes as written or with modifications, the direction is clear: climate disclosures are moving from voluntary frameworks to enforceable financial reporting requirements. Your controls need to reflect that shift.

a promotional banner asking how ready are you for PCI DSS 4.0? With a call-to-action to get the checklist now.

You Might Also Like