ESG reporting covers a company's environmental, social and governance performance as a whole, while carbon reporting focuses on a single environmental metric: greenhouse gas emissions. Carbon reporting is therefore one component inside broader ESG reporting, but in Malaysia it is the component regulators are prioritising first.

The confusion is understandable. Many companies are asked for a carbon footprint by one customer, an ESG report by another, and a Sustainability Statement by Bursa Malaysia. The requests overlap, yet each has its own purpose, audience and level of scrutiny.

This article explains how the two differ, why Malaysia's National Sustainability Reporting Framework (NSRF) pulls them closer together, and how companies can handle both with one set of reliable data.

What Is the Difference Between ESG Reporting and Carbon Reporting?

The core difference is scope. ESG reporting spans three areas: environmental topics such as energy, water and waste, social topics such as workforce and community, and governance topics such as board oversight and ethics. Carbon reporting measures only greenhouse gas emissions, usually expressed in tonnes of carbon dioxide equivalent.

A useful way to picture it is a house and a single room. ESG reporting describes the whole house, and carbon reporting describes one room that happens to carry a lot of weight with investors and regulators. A company can publish a carbon inventory without a full ESG report, but a credible ESG report today will almost always include one.

What Does Carbon Reporting Include?

Carbon reporting includes a company's greenhouse gas emissions, grouped into Scope 1, Scope 2 and Scope 3. Scope 1 covers direct emissions from sources the company owns or controls, such as boilers and vehicles. Scope 2 covers indirect emissions from purchased electricity, steam, heating or cooling. Scope 3 covers all other indirect emissions across the value chain, from suppliers to product use and disposal.

What Does ESG Reporting Include Beyond Carbon?

ESG reporting also covers topics such as health and safety, diversity, human rights in the supply chain, data privacy, anti-corruption, board structure and risk oversight. Even on the environmental side, it extends beyond emissions to cover resource use, pollution and biodiversity where relevant. These topics are harder to reduce to a single number, which is part of why carbon has become the anchor metric.

Who Uses Each Type of Report?

Investors, lenders and regulators use both, but they use them differently. Carbon data feeds climate risk models, transition planning and lending decisions, whereas wider ESG information supports overall risk screening and stewardship. Corporate customers also request carbon data when they compile their own value chain emissions.

Why Is Carbon Reporting Central to ESG Reporting in Malaysia?

Carbon reporting is central because Malaysia has tied its sustainability disclosure rules to national climate goals. The country has committed to reduce its economy-wide carbon intensity by 45% by 2030 against 2005 levels and to reach net-zero emissions by 2050, and the NSRF was launched in support of that commitment.

The framework adopts IFRS S1 and IFRS S2 as the baseline. IFRS S2 is the climate-related standard, so a company that follows the NSRF must disclose climate risks, opportunities and greenhouse gas emissions as part of its wider sustainability reporting. Carbon is not an optional extra; it is the entry point.

How Does IFRS S2 Treat Greenhouse Gas Emissions?

IFRS S2 requires companies to disclose their Scope 1, Scope 2 and Scope 3 greenhouse gas emissions, measured in line with the GHG Protocol unless a jurisdiction requires another method. It also asks for governance, strategy and risk management disclosures about climate, including scenario analysis. This means carbon figures must sit alongside a narrative on how climate affects the business.

Why Did Regulators Start with Climate?

Regulators started with climate because climate-related risk is widely seen as financially significant and because the data methods are relatively mature. A phased design also helps companies learn before the full standard applies. Group 1 and Group 2 companies may focus on climate-related disclosures for their first two reporting periods before wider IFRS S1 coverage follows.

What Do Malaysian Companies Have to Disclose on Carbon Today?

Malaysian in-scope companies must report climate-related information under the NSRF according to their reporting group, with relief for the hardest-to-measure categories. The timing depends on whether the company sits in Group 1, 2 or 3.

Group 1, large Main Market issuers with a market capitalisation of RM2 billion or above, began for financial years starting on or after 1 January 2025. Group 2, the remaining Main Market issuers, starts on 1 January 2026. Group 3, made up of ACE Market issuers and large non-listed companies, starts on 1 January 2027.

Do Companies Have to Report Scope 3 Emissions?

Not immediately in most cases. Under the NSRF's additional transition reliefs, companies may postpone Scope 3 disclosure except for categories their regulator already requires. Bursa Main Market issuers, for example, already report Scope 3 emissions from business travel and employee commuting. Scope 3 is difficult because the data sits with suppliers and customers, and regulators have noted that many of those suppliers are small and medium enterprises.

What Is Required for Scope 1 and Scope 2?

Scope 1 and Scope 2 are the core of carbon reporting and the focus of the planned assurance requirement. These figures are within the company's own operations, so they are easier to measure and verify than value chain emissions. Companies should expect investors and, eventually, assurance providers to examine them closely.

How Does Assurance Apply to ESG Reporting and Carbon Reporting?

Assurance applies first and most directly to carbon. The NSRF plans mandatory reasonable assurance of Scope 1 and Scope 2 greenhouse gas emissions for Group 1 entities, which makes emissions data the first slice of ESG reporting to face independent verification.

In September 2026 the Advisory Committee on Sustainability Reporting deferred that start date to annual periods beginning on or after 1 January 2028, after a review of the first reporting cohort found that disclosure quality needed to improve. Any independent assurance must follow ISSA 5000, and a Sustainability Assurance Guide is planned. Listed issuers must continue to state whether their disclosures were internally reviewed or independently assured.

Why Is Carbon Assurance Different from Wider ESG Assurance?

Carbon assurance is different because emissions are quantitative and follow an established measurement method, so they are easier to test than governance or social narratives. An assurance provider can recalculate an emissions figure from activity data and emission factors. Qualitative statements about culture or oversight are harder to verify in the same way.

What Should Companies Do to Prepare Carbon Data?

Companies should document their organisational boundary, collect activity data from invoices and meters, record emission factors and keep a reproducible calculation file. Defined data owners and review steps matter just as much. The aim is that a third party could take the same inputs and arrive at the same number.

How Can Companies Connect Carbon Reporting to Broader ESG Reporting?

Companies can connect them by treating carbon as one module in a shared reporting system and by keeping governance, strategy and risk narratives consistent with the emissions numbers. A carbon figure that appears in the report without a reduction plan or board oversight looks incomplete.

What Is a Sensible Order of Work?

A sensible order is to measure Scope 1 and Scope 2 first, add a climate risk assessment, link targets to governance, and then build toward Scope 3 once capacity grows. Finance, sustainability and operations teams should work together, since IFRS-based disclosures are meant to connect with the financial statements. Financial institutions have extra support: the Joint Committee on Climate Change issued NSRF guidance for banks, insurers and takaful operators in August 2026.

What Are the Different Views on ESG vs Carbon Reporting?

Stakeholders broadly agree that carbon data matters, but they disagree on whether it should dominate. The debate centres on balance.

What Do Regulators and Investors Say?

Regulators and investors generally see carbon reporting as the most decision-useful and verifiable starting point. A common baseline helps them compare companies and judge transition risk. Starting with climate also matches the national emissions targets.

What Do Critics of a Carbon-First Approach Say?

Critics argue that focusing heavily on carbon can overshadow social and governance issues that matter just as much to long-term resilience, such as labour practices and supply chain conduct. They also warn that precise-looking emissions numbers can create false comfort if the underlying data and controls are weak. Commentators following the 2026 assurance deferral have made a similar point: assurance only covers what falls in its scope, so the wider report still depends on internal controls.

What Do Companies and Suppliers Say?

Companies point to cost, the scarcity of skilled staff and the difficulty of collecting supplier data. Smaller suppliers worry about being asked for emissions data they have never tracked. Their shared request is for practical guidance and capacity-building, which regulators are beginning to supply.

FAQ: Common Questions About ESG vs Carbon Reporting in Malaysia

Is Carbon Reporting Part of ESG Reporting?

Yes. Carbon reporting sits within the environmental pillar of ESG reporting, although it is often presented as its own section because of its importance.

Is Carbon Reporting Mandatory in Malaysia?

For in-scope companies, yes. Climate-related disclosure under IFRS S2 is part of the NSRF, phased in by group from 2025 to 2027, with reliefs for Scope 3.

Which Emissions Must Be Reported First?

Scope 1 and Scope 2 are the priority. Scope 3 can be postponed under transition reliefs except where a regulator already requires specific categories.

When Does Mandatory Carbon Assurance Begin?

Mandatory reasonable assurance of Scope 1 and Scope 2 emissions for Group 1 entities now applies to annual periods beginning on or after 1 January 2028.

Can a Company Do Carbon Reporting Without ESG Reporting?

A company can measure emissions on its own, but in-scope companies must still meet NSRF disclosure requirements, and investors usually expect carbon data to sit within a wider ESG report.

Do Small Businesses Need Carbon Reporting?

Not directly under the NSRF unless they meet the RM2 billion revenue threshold for non-listed companies. They may still receive data requests from larger customers.

Conclusion

Carbon reporting is the sharpest, most measurable part of ESG reporting, and Malaysia is putting it first. ESG reporting is the full picture, and carbon is the part regulators intend to verify earliest.

Companies that build a reliable carbon data process now will be better placed for both wider IFRS S1 disclosure and eventual assurance. The two are not competing tasks; they are layers of the same discipline.