SEC's New Climate Disclosure Rules: A Practical Roadmap for Finance Teams

After years of litigation, revision, and political controversy, the SEC's final climate disclosure rules are now in force. The requirements, which mandate Scope 1 and Scope 2 greenhouse gas emissions reporting, material climate risk quantification, governance disclosure for climate oversight, and transition plan reporting for companies that have made such commitments, represent the most significant expansion of mandatory corporate environmental disclosure in the SEC's history. For finance teams at public companies, the question is no longer whether to comply. It is how to build the infrastructure to comply competently, and to do it fast enough to avoid deficient first-year filings.

"The challenge I hear from finance leaders is not that they don't understand what's required in the abstract," said Linda Morales, partner in the securities and ESG practice at Cravath Advisory. "It's that when they get into the specifics, particularly the quantitative financial impact requirements for material climate risks, they discover they don't have the data, the models, or the processes to produce the numbers with the precision the rules require."

The Six High-Exposure Areas

Analysis by Cravath Advisory and the Climate Finance Data Consortium identifies six specific disclosure areas where the gap between current practice and the rules' requirements is widest at most public companies. These are the areas most likely to generate SEC comment letters and investor scrutiny in the first compliance cycle, and the areas where investment in data infrastructure yields the most immediate compliance benefit.

• Scope 1 and 2 GHG quantification: Accurate, auditable emissions data across all owned or controlled facilities and energy sources, most companies lack the data infrastructure for the required precision
• Scope 3 materiality determination: While Scope 3 reporting was removed from the final rules, companies must still assess and disclose whether Scope 3 is material, a threshold determination that requires systematic supply chain engagement
• Quantitative climate risk impact: Financial impact estimates for material physical and transition risks on specific line items, revenue, COGS, capex, and financing costs, require scenario modelling most companies have not built
• Transition plan disclosure: For companies that have made net-zero or emissions reduction commitments, quantitative progress metrics and forward-looking milestones must now be disclosed
• Board and management oversight: Specific disclosure of which board committee has climate oversight responsibility and how climate considerations are integrated into material business decisions
• Assurance engagement: Limited assurance on Scope 1 and 2 data for large accelerated filers requires engaging a qualified assurance provider, a process that takes 6–12 months to establish properly

The Assurance Timeline Is the Critical Path

Of the six exposure areas, assurance is the one with the most consequential timeline constraint. Large accelerated filers, companies with public float exceeding $700 million, must obtain limited assurance on their Scope 1 and 2 GHG disclosures beginning with fiscal year 2026 filings. That means companies need to have a qualified assurance provider engaged, the data collection processes documented, and the preliminary emissions calculations substantially completed well before year-end 2026. For many companies that have not started this process, the timeline is already tight.

"We underestimated the assurance process by at least six months. It's not just finding a provider, it's building the internal documentation, the data trails, and the controls that a provider can actually audit. That work takes longer than most finance teams expect." , Controller, Fortune 500 Energy Company

The implementation roadmap recommended by the Cravath Advisory team prioritises the assurance-related work first, because it has the longest lead time and constrains the rest of the compliance process. Parallel workstreams address the quantitative climate risk modelling, which requires external scenario data inputs and internal financial modelling capability, and the governance documentation, which involves legal counsel and board secretariat work to establish the required committee structures and decision protocols. The final workstream covers transition plan disclosure for companies with existing commitments, which requires engaging sustainability and finance teams to establish the metrics and milestones the rules require.

Companies that have already been voluntarily reporting to CDP or under TCFD frameworks have a meaningful head start. Their GHG data collection processes are more mature, their assurance relationships may already exist in some form, and their boards have been discussing climate governance for longer. For companies coming to this for the first time with the mandatory rules, the implementation investment required is substantial, and the risk of deficient first-year filings, which tend to generate disproportionate SEC and investor attention, makes a well-resourced implementation essential rather than optional.