How Finance, Legal, and Sustainability Should Split Carbon Reporting Work

Carbon reporting fails cross-functionally more often than it fails technically. The data exists, the standards exist, the tools exist. What is missing is a clear operating model that says who decides what, on what timeline, with what escalation path.

Here is the model that keeps mid-market companies out of committee purgatory during CSRD, CDP, and customer audit season.

Why does carbon reporting stall inside mid-market companies?

Three failure modes, all cross-functional.

• Ownership ambiguity. Sustainability owns methodology, finance owns data, legal owns risk. Without a clear lead, disagreements consume weeks.
• Cadence gaps. Reporting deadlines are annual, but the work needs continuous attention. Committees that meet quarterly always find themselves scrambling in the last six weeks.
• Escalation vacuum. When finance and sustainability disagree on a categorization decision, nobody has the authority to break the tie inside a week.

Solving all three is a governance problem, not a technical one.

Who should own the carbon reporting function overall?

The CFO. This is not universally popular in sustainability circles, but for companies with mandatory disclosure obligations it is the correct answer for four reasons.

1. Regulated disclosure. CSRD, CDP-verified reports, and SEC climate rules are regulated disclosures with assurance requirements. Finance owns disclosure discipline in every other domain.
2. Data proximity. The majority of carbon data comes from finance systems: ERP, cloud bills, travel platforms accessed by finance ops.
3. Audit trail rigor. Finance already runs internal controls, close processes, and audit response. Extending that discipline to sustainability is faster than building it from scratch.
4. Signal to the market. CFO ownership signals that the numbers are financially rigorous. Enterprise buyers and assurance providers read the signal.

Sustainability reports into or works with finance. Legal is a peer. Ops is a peer. Marketing consumes outputs; it does not own inputs.

What does the RACI actually look like?

The following is a working RACI for the annual reporting cycle. It survives audit scrutiny and it does not require heroics.

R is responsible, A is accountable, C is consulted, I is informed. The CFO holds accountable on everything because it is a financial disclosure. The distinction between R and A matters: sustainability drives methodology work, but the CFO signs off on it.

What is the meeting cadence during reporting season?

Twelve weeks before a report deadline, shift to weekly cadence. Sooner is often better.

• Weekly 30-minute review. Standing attendees: finance lead, sustainability lead, legal counsel (or delegate), CFO or delegate.
• Standing agenda. Data readiness (what came in this week, what is missing), open methodology decisions, assurance findings, narrative drafts, legal review status.
• Output. Every open item leaves the meeting with an owner and a next-review date. No item stays open two weeks without escalation.

Off-season, monthly reviews suffice. But shift to weekly the moment the reporting clock starts, not when it feels urgent.

What decision rights break disagreements?

Written decision rights prevent methodology debates from consuming reporting quarters. Four rules that work.

• Methodology disputes: CFO decides. When finance wants to be conservative and sustainability wants to reflect a nuance, the CFO breaks the tie within one week of escalation.
• Legal disputes: legal decides. On anything that constitutes a public claim, forward-looking statement, or regulated disclosure, legal has an override that finance and sustainability cannot appeal.
• Data quality disputes: finance decides. When sustainability wants to use a source that finance considers unreliable, finance's judgment on data reliability holds.
• Category materiality disputes: sustainability recommends, CFO decides. Materiality is judgment. Sustainability makes the recommendation with quantitative backing; CFO ratifies.

None of these rules feel comfortable in every case. They are still faster than the alternative.

What is the escalation path when disputes cannot be resolved?

Two-step escalation. Everything gets resolved within one calendar week of being raised.

1. Raised at the weekly review. Both parties present positions in writing (email is fine). Owner assigned to draft a decision memo by end of week.
2. CFO decides. Reviewing the memo, the CFO issues a written decision. Decision goes into the methodology appendix if material.

Anything unresolved after two weeks either goes to the CEO for a business judgment call or gets time-boxed for the current report with a note that it will be revisited next cycle. What does not happen: indefinite discussion.

How do you handle assurance findings mid-cycle?

Assurance providers issue findings during the review process. These need a fast-lane workflow, because responding to them stalls the whole report.

• Finding logged within 24 hours. Sustainability logs the finding, tags it with category, and assigns a responder.
• Response drafted within 5 business days. Response goes to finance for accuracy check and legal for language check before returning to assurance.
• Escalation if response requires methodology change. Non-trivial changes go through the standard methodology decision process, but on a compressed timeline (48 hours to CFO decision).

Assurance findings pile up in bad reporting cycles because the process is not defined. Define it once, use it every cycle.

How do you handle customer audits and questionnaires between annual cycles?

Customer audits and questionnaires do not follow the annual cadence. They land whenever a customer decides. Three principles keep them from disrupting the reporting cycle.

• Questionnaires under 30 questions: sustainability responds within 10 business days. Standard SLA. No cross-functional escalation unless the questionnaire asks for numbers not in the last report.
• Questionnaires over 30 questions or with novel asks: full working group involvement. Weekly touchpoint until submitted. Legal reviews any commitments made in writing.
• Customer audits (on-site or deep document review): CFO chairs. Finance leads document production, sustainability leads subject matter, legal on-site or on-call for any regulated conversation.

A pattern: enterprise customer audits are often the first exposure to the level of scrutiny CSRD assurance will bring. Treat them as practice.

The mistake to avoid

The default mid-market carbon reporting model is a monthly working group meeting with no clear ownership, where decisions get discussed instead of made. That model does not survive first contact with a real reporting deadline. The alternative is not more meetings; it is fewer meetings with sharper decision rights, CFO accountability, and a written RACI that everyone has read. Companies that ship clean reports year after year have made these choices. Companies that panic in the last six weeks before every deadline have not. Making the choice is a one-time governance exercise, and it pays back on the first cycle.