ESG for Business: What the Three Letters Mean and How a Ukrainian Company Gets Started

ESG is a way of assessing the non-financial side of a company across three dimensions: Environmental (its impact on nature), Social (its relationships with employees, suppliers, and communities), and Governance (the quality of its corporate management). The acronym first appeared in 2004 in "Who Cares Wins", a report prepared at the initiative of the UN Global Compact for financial analysts. Twenty years on, the audience has changed: today ESG is the language that major customers, banks, and regulators use when they talk to companies of any size.

For a Ukrainian manufacturer, it looks something like this. An international client sends a forty-page questionnaire asking about CO₂ emissions, injury rates, and anti-corruption policies. A bank adds a section on environmental and social risks to the loan application. An EU importer requests carbon footprint data for your products because it reports under European rules itself.

Let's clear up the confusion first, because there's plenty of it around ESG. It often gets mistaken for charity, tree-planting PR, or "yet another certificate". In reality, there's no single ESG certificate, and the core idea is simple: show that your company understands its non-financial risks and manages them, with data instead of slogans.

Spelling out the acronym is easy. What's harder is understanding what exactly gets checked under each letter once your company lands on a customer's or bank's radar. Let's take them one at a time.

E covers everything a company takes from the environment and everything it puts back: energy and water consumption, greenhouse gas emissions, waste handling, use of hazardous substances. In questionnaires, this block is the largest and most specific: how many kilowatt-hours per unit of output, what's your carbon footprint, is there an environmental management system in place. That's why E is the most practical entry point into ESG: proven tools like ISO 14001 and the GHG Protocol already exist, and the results are measured in numbers.

S is about people: occupational safety and injury rates, working conditions, pay equity, human rights in your own supply chain. Ukrainian labour law already covers part of this block, and that's a fair argument to make in questionnaires. The weak spot is usually elsewhere: documentation. Policies live in people's heads rather than on paper, so there's nothing to show the auditor.

G looks at how the company makes decisions: ownership structure, anti-corruption rules, conflicts of interest, business ethics, risk management. This block gets underestimated most often, and that's a mistake: investor and bank questions start with G, because an opaque ownership structure cancels out even the best environmental numbers.

"Everyone's doing it" is a poor motivator, so let's call things by their names: in Ukraine in 2026, interest in ESG rests on three entirely material drivers.

Questionnaires from international customers. Large companies assess suppliers through platforms like EcoVadis and CDP Supply Chain, or through questionnaires of their own. Empty fields lower a supplier's score, and a low score is a reason to reconsider the contract. We've seen tenders where a bid without a completed ESG questionnaire simply wasn't registered.

Financing. International financial institutions such as the EBRD and IFC assess a borrower's environmental and social risks against their own standards before any credit decision. Ukrainian banks with Western capital are gradually adopting the same practice, and a company with clear ESG data gets access to green credit lines with lower rates.

Access to the EU market. Two mechanisms work here at once. CBAM obliges importers to declare the embedded emissions of steel, aluminium, fertilisers, and cement, and the European buyer gets that data from the Ukrainian manufacturer; we've covered this in detail in our overview of CBAM reporting for exporters. Meanwhile, the CSRD directive requires large European companies to report on sustainability, including their supply chain, so the requests cascade down to suppliers outside the EU.

There's no single "ESG standard", and that's the first thing to accept. There are several frameworks with different audiences, and mixing them up is costly.

GRI (Global Reporting Initiative) is the world's most widely used voluntary sustainability reporting standard. Its structure is modular: universal standards plus topic-specific ones covering emissions, employment, anti-corruption. When a customer asks for a "sustainability report" without further detail, they usually mean the GRI format.

ESRS and CSRD are the European regulatory pair. Directive (EU) 2022/2464, known as the CSRD, requires large EU companies to publish sustainability reports under the unified ESRS standards; the first reports came out in 2025 for the 2024 financial year. In February 2026, the Omnibus I simplification package (Directive (EU) 2026/470) raised the threshold: the direct requirement now applies to companies with over 1,000 employees and a net turnover above EUR 450 million. Ukrainian manufacturers aren't directly covered, but the cascade of requests through the supply chain hasn't gone anywhere.

The UN Global Compact isn't a reporting standard in the strict sense but a set of ten principles on human rights, labour, environment, and anti-corruption. A company joins voluntarily and publishes an annual Communication on Progress. It's the easiest formal start when you need a public ESG position without a full report.

So which framework should you use? Look at the audience. If a specific customer is asking, answer in their questionnaire format. If you're preparing a public report, take GRI. If you work with European investors or a parent company covered by the CSRD, study the ESRS.

The short answer: there's no general legal obligation for Ukrainian companies to publish an ESG report. The state won't fine you for not having one.

The longer answer is less reassuring. The obligation comes from contracts, not laws: a customer is free to drop a supplier that doesn't meet its supply chain requirements, and customers use that right more and more willingly. A bank is free to price ESG risks into your loan. A European importer must declare the embedded emissions of CBAM goods and won't buy products it has no data for.

In practice, the requests arrive in three forms. A customer questionnaire, anything from a ten-question form to a full EcoVadis assessment. A bank questionnaire inside the loan application, where environmental and social risks sit right next to the financial figures. And an emissions data request from an importer that needs it for a CBAM declaration. None of these documents is called a "mandatory ESG report", yet ignoring them isn't really an option.

So the honest way to reframe "is it mandatory" is this: which of your clients, banks, or markets will ask first, and when. For a metals exporter, it has already happened. For a supplier to an international FMCG company, it will most likely happen at the next supplier reassessment.

A working ESG strategy for a mid-sized Ukrainian manufacturer isn't a glossy 60-page document. It's four consecutive steps, each one useful even without the next.

1. Materiality assessment. Work out which topics actually apply to your business. The simplest practical method: collect the questionnaires your clients and banks have already sent you and list the recurring questions. That's a ready-made materiality map, drawn up by your own stakeholders. A food producer will have to answer about water and waste; a metal fabricator, about energy and emissions.

2. A policy and an owner. Put the company's position into a short document: what commitments you take on for E, S, and G, and who's responsible for delivery. One or two pages signed by the CEO work better than volumes nobody reads.

3. Data. The longest step. Set up regular collection of the basic indicators: energy and water consumption, waste volumes, CO₂ emissions, injury rates, staff turnover. For the emissions part, see our step-by-step guide to calculating a company carbon footprint. The rule is simple: an indicator without an owner and a data source isn't an indicator, it's a wish.

4. Reporting. Once the data flows reliably, format becomes a technical question: fill in the EcoVadis questionnaire, prepare a tender section, or assemble a first public report under GRI.

Time-wise, the rough breakdown looks like this: the first two steps take a month or six weeks, and collecting data for a baseline year takes anywhere from three months to a year depending on the state of your records. In other words, between the decision to "do ESG" and the first confident answer to a customer lies a quarter of solid work, not a week.

Notice the sequence? The report is the last step, not the first. Companies that start with a sustainability presentation rewrite it from scratch a year later because the numbers don't add up.

In most questionnaires the environmental block is the largest and most specific, so it's the most logical place to start. The good news: you don't need to invent your own methodology for E, because the tools have long been standardised.

An environmental management system under ISO 14001 covers the organisational part: a register of environmental aspects, compliance with environmental legislation, objectives and programmes, internal audits. An ISO 14001 certificate is a ready answer to a good third of the E-block questions, and customers treat it as clear, verifiable proof. How the standard works, how long certification takes, and what it costs is all in our complete ISO 14001 guide.

Carbon accounting under the GHG Protocol covers the E component's headline metric: practically every questionnaire asks for Scope 1 and 2 emissions, and for CBAM goods emissions data has become a condition of export. A first calculation is entirely feasible in-house using the openly available methodology.

If energy is your biggest environmental cost line, look at ISO 50001 as well: an energy management system provides the same systematic framework, just focused on energy consumption, and it integrates well with ISO 14001 in a single management system.

S and G follow a different logic: fewer standardised tools, more internal discipline in the form of policies, training, and documentation. Then again, questionnaire requirements for these blocks are still softer: usually it's enough to show that the policies exist and are actually followed.

ESG compliance means living up to stakeholder requirements and your own public claims: everything declared in policies, reports, and questionnaire answers must be backed by documents and data. And this is exactly where newcomers make the most expensive mistakes.

• Starting with the report instead of the data. A polished presentation without measurable indicators doesn't survive the customer's first follow-up question.
• Embellishing reality. A customer who finds a gap between your report and the facts will lose trust in all of your data at once.
• Reducing ESG to ecology alone. An ignored G block hits hard: an opaque ownership structure can kill a deal despite a spotless environmental profile.
• Treating it as a one-off project. The questionnaire is filled in, the box is ticked, no process is built. Next year everything starts from zero, only with different people.
• Copying someone else's policies. Customer auditors have read dozens of identical documents and can tell a living system from a template quickly.

If two or three of these look familiar, you're in the majority. A first attempt is rarely clean; what matters is that the second one is systematic.

Ekontrol has worked as a Bureau Veritas partner in Ukraine since 2014 and supports manufacturers in the part of ESG that can be measured and certified: ISO 14001 implementation, carbon accounting setup, preparation for customer audits and certification audits. We don't write glossy reports; we build a system where the data for any questionnaire comes together in days, not weeks.

If an ESG questionnaire is already sitting in your inbox and the answers aren't there yet, start with an independent management system assessment: it shows which data you already have and what needs to be built. Or discuss the task with an expert right away, and we'll go through your questionnaire together.