Governance, Strategy, Risk and Metrics: A Plain English Guide to AASB S2’s Four Core Content Areas

Once an organisation knows which AASB S2 group it belongs to, the next question is usually the harder one: what actually needs to be disclosed? AASB S2, Australia’s mandatory standard for climate related financial disclosures, structures every sustainability report around four core content areas: Governance, Strategy, Risk Management, and Metrics and Targets. These four pillars are drawn directly from the international ISSB framework and, before that, the TCFD recommendations, so they will look familiar to anyone who has followed global climate disclosure practice. Here is what each one actually asks for, in plain English.

Governance

Governance disclosures answer a simple question: who is watching this, and how? Specifically, AASB S2 requires organisations to describe the board’s oversight of climate related risks and opportunities, including which board or committee is responsible, how often climate is on the agenda, and what expertise informs those discussions. It also requires disclosure of management’s role: who is accountable day to day, how climate considerations feed into strategy and capital allocation decisions, and whether climate performance is linked to remuneration.

This is not a box ticking exercise. Regulators reviewing early disclosures have been clear that they expect to see evidence of genuine oversight, not a governance chart produced for the report and forgotten the rest of the year.

Strategy

Strategy is where an organisation sets out the climate related risks and opportunities it has identified, and how they could reasonably be expected to affect its business model, strategy, and cash flows over the short, medium, and long term. This includes both physical risks, such as exposure to extreme weather or changing rainfall patterns, and transition risks, such as policy changes, shifting customer demand, or the cost of decarbonising operations.

The strategy section is also where climate scenario analysis lives, and this is one area where Australian requirements go further than the international baseline. Under the Corporations Act, scenario analysis disclosures are only accepted if the entity has tested at least two scenarios: one where global warming well exceeds the Paris Agreement’s well below 2 degree goal, and one consistent with the more ambitious 1.5 degree goal. A single “central case” scenario is not enough. Organisations need to disclose which scenarios they used and why, the key assumptions behind them (climate policy, macroeconomic trends, energy mix, technology), and what the analysis revealed about their capacity to adjust, including the flexibility of their financial resources and their ability to redeploy or decommission assets. Where an organisation has a transition plan, whether that is a decarbonisation pathway, target set, or set of planned initiatives, it belongs here too. This is genuinely forward looking disclosure, and it is the area many first time reporters find most demanding, since it asks for judgement about the future rather than a reporting of historical fact.

Risk Management

Risk Management asks how climate risks and opportunities are actually identified, assessed, prioritised, and monitored, and, critically, how that process is integrated into the organisation’s broader enterprise risk management framework. A standalone climate risk register that exists in isolation from the rest of the business is not what this section is looking for. The expectation is that climate risk is treated as a normal input into how the organisation manages risk generally, sitting alongside financial, operational, and compliance risk rather than off to one side.

Metrics and Targets

The final pillar is where the numbers sit. This section requires disclosure of the metrics used to assess and manage climate related risks and opportunities, most centrally Scope 1, Scope 2, and Scope 3 greenhouse gas emissions, calculated in line with the GHG Protocol Corporate Standard. Scope 2 emissions must be reported on a location based basis, using grid average emissions factors, which catches out organisations that have only ever tracked emissions on a market basis through renewable energy contracts. Where an organisation has set emissions reduction or other climate related targets, this is also where progress against them is reported.

Emissions are only part of the picture. AASB S2 also requires disclosure against several other cross industry metric categories: the amount and percentage of assets or business activities exposed to transition risk, physical risk, and climate related opportunities, the capital deployed towards climate related risks and opportunities, any internal carbon price the organisation applies in decision making, and the extent to which executive remuneration is linked to climate related considerations. Where an organisation sets emissions reduction targets, it must also disclose whether those targets are gross or net, and where carbon credits are planned to help meet a net target, which scheme will verify them and how credible the underlying offset is.

Metrics and Targets disclosures carry assurance obligations from an entity’s very first reporting year, starting with limited assurance over Scope 1 and Scope 2 data and governance disclosures, and building toward reasonable assurance across all climate disclosures by financial years starting on or after 1 July 2030. Getting the underlying data right early matters, because the bar it needs to clear only rises from here.

Why all four have to work together

The four pillars are designed to be read as a connected whole rather than four separate exercises. A board that claims strong oversight but cannot point to a risk management process feeding it information will not hold up under scrutiny, and a strategy built on scenario analysis that never reconciles back to the emissions numbers in Metrics and Targets tends to read as aspirational rather than credible. Early reviews of lodged Group 1 reports have already flagged this: regulators are looking for internal consistency across the four sections, not four well written but disconnected chapters.

For organisations approaching their first AASB S2 disclosure, the practical starting point is usually to map what already exists against each of the four pillars, identify the genuine gaps, and build a realistic timeline to close them before the first reporting period locks the answer in.