For many Malaysian businesses, sustainability reporting has moved beyond a voluntary corporate statement. Malaysia NSRF reporting requirements create a clearer route toward consistent, investor-ready disclosures, but they also raise practical questions: Does the framework apply to us? What data must we collect? Who owns the work? And how can reporting create operational value rather than another annual compliance burden?
The National Sustainability Reporting Framework (NSRF) is Malaysia’s roadmap for adopting internationally aligned sustainability disclosures. It is designed to strengthen the quality, comparability, and credibility of information provided by companies to investors, lenders, customers, regulators, and other stakeholders. For leaders, the opportunity is bigger than producing a compliant report. A well-managed NSRF program can reveal energy waste, supply-chain exposure, governance gaps, and opportunities to build a more resilient business.
What the Malaysia NSRF reporting requirements are designed to achieve
The NSRF is built around the IFRS Sustainability Disclosure Standards: IFRS S1, which covers general sustainability-related financial disclosures, and IFRS S2, which focuses on climate-related disclosures. These standards ask organizations to explain how sustainability-related risks and opportunities could affect enterprise value, including cash flows, access to finance, cost of capital, and long-term business prospects.
This is a meaningful shift from reporting only on good intentions or isolated community initiatives. Companies are expected to connect sustainability issues to business strategy, financial planning, risk management, and performance measurement. The report should help a reader understand not only what the company is doing, but also why the issue matters commercially and how leadership is managing it.
The NSRF follows four connected disclosure pillars: governance, strategy, risk management, and metrics and targets. These pillars are familiar to organizations that have used climate-reporting approaches such as the Task Force on Climate-related Financial Disclosures framework, but the NSRF places them within a more structured reporting baseline.
Who is expected to report, and when
Implementation is phased to give companies time to develop reliable systems and capabilities. The starting point depends on an organization’s listing status and size.
Large companies listed on Bursa Malaysia’s Main Market are expected to begin reporting for financial years ending on or after December 31, 2025. Other Main Market listed issuers follow for financial years ending on or after December 31, 2026. ACE Market listed issuers, as well as large non-listed companies that meet the relevant size thresholds, are scheduled to begin for financial years ending on or after December 31, 2027.
For large non-listed companies, the framework generally focuses on organizations with annual revenue of RM2 billion or more, or total assets of RM2 billion or more. However, group structures, reporting boundaries, sector-specific expectations, and updates from regulators can affect how the requirements apply. Businesses should confirm their position against the latest official guidance rather than relying on a broad classification alone.
Even if a company is not yet directly in scope, waiting may be costly. Smaller suppliers increasingly receive ESG data requests from listed customers, multinational buyers, banks, and investors. Starting early gives management time to establish a baseline, improve data quality, and respond confidently when those requests arrive.
What companies need to disclose
NSRF-aligned reporting is not a single data collection exercise. It requires a connected account of how the organization identifies and manages sustainability-related financial risks and opportunities.
Governance and accountability
Companies need to describe the board’s oversight of sustainability-related risks and opportunities, as well as management’s role in assessing and managing them. This means clarifying decision rights, reporting lines, meeting cadence, relevant expertise, and how sustainability performance is escalated.
A common weakness is assigning ESG to one enthusiastic employee without giving that person authority, budget, or access to operational data. Credible governance integrates responsibilities across the board, senior management, finance, operations, procurement, human resources, and risk functions.
Strategy and financial relevance
Organizations must explain which sustainability-related risks and opportunities could reasonably affect their business model, value chain, strategy, and financial planning. Climate is an immediate focus under IFRS S2, including physical risks such as flooding and heat, and transition risks such as changing regulations, customer requirements, technology shifts, or carbon-related costs.
This is where generic statements fall short. A manufacturer, for example, may need to consider electricity exposure, water reliability, raw-material availability, and customer expectations for lower-carbon products. A services company may face different priorities, including talent retention, data governance, business travel, office energy use, and supplier standards. Materiality depends on the business and its value chain.
Risk management processes
The report should show how sustainability-related risks are identified, assessed, prioritized, monitored, and integrated into the organization’s overall risk management process. Leaders should be able to demonstrate that ESG risks are not managed in a separate spreadsheet once a year, but are considered in strategic planning, investment approvals, supplier selection, business continuity, and internal controls.
Metrics, targets, and emissions data
Companies must disclose performance measures and targets relevant to their identified risks and opportunities. For climate reporting, this includes greenhouse gas emissions measured across Scope 1, Scope 2, and eventually Scope 3 categories where applicable.
Scope 1 covers direct emissions from sources owned or controlled by the business, such as fuel used in company vehicles or boilers. Scope 2 generally covers indirect emissions from purchased electricity. Scope 3 includes other value-chain emissions, such as purchased goods, logistics, employee commuting, business travel, product use, or waste.
Scope 3 is often the most difficult area because the data sits outside the company’s direct control. The NSRF includes transition relief to help organizations phase in parts of the disclosure requirement, including additional time for Scope 3 reporting. That relief should be used to build supplier engagement and better estimation methods, not as a reason to postpone foundational work.
A practical way to prepare for NSRF reporting
The most effective preparation begins with a focused diagnostic. Before selecting software or drafting a report, management needs a clear view of its reporting boundary, current data sources, governance maturity, key stakeholders, and material sustainability issues.
A practical preparation plan should address five areas:
- Confirm whether the organization falls within the NSRF timeline and define the entities, operations, and value-chain activities included in the reporting boundary.
- Establish board and management accountability, with clear roles for finance, sustainability, operations, risk, procurement, and internal audit.
- Conduct a sustainability and climate risk assessment that connects material issues to business strategy, financial planning, and enterprise risk management.
- Build a disciplined data process for energy, fuel, emissions, workforce, suppliers, and other relevant indicators, including ownership, calculation methods, evidence, and review controls.
- Set realistic targets and implementation priorities, then prepare disclosures that are supported by documentation and capable of assurance over time.
The right sequence matters. A company that buys reporting software before defining its data owners and methodology may simply digitize inconsistent information. Equally, a company that develops ambitious targets without operational plans may create reputational risk. Strong reporting is built on governance, evidence, and measurable action.
Common gaps that can weaken a first report
Many first-time reporters underestimate the connection between ESG and finance. Sustainability teams may understand emissions data, while finance teams understand materiality and controls, but neither group can produce a complete NSRF-aligned disclosure in isolation. Cross-functional ownership is essential.
Another challenge is incomplete value-chain information. Supplier data will rarely be perfect at the start. The practical response is to document reasonable methodologies, improve data quality over time, engage priority suppliers, and be transparent about limitations. Credibility comes from a disciplined process, not from pretending every figure is exact.
Organizations should also avoid copying language from another company’s report. A disclosure that sounds polished but does not reflect the organization’s actual governance, risks, targets, or progress can undermine stakeholder confidence. Specificity matters more than volume.
Turn reporting into a business improvement program
NSRF preparation can become a useful management discipline when it is linked to operational transformation. Energy data can identify efficiency projects. Supply-chain mapping can improve continuity and supplier relationships. Better governance can strengthen accountability. A climate risk review can inform capital expenditure, site selection, insurance decisions, and product development.
This is the approach Adcellent Biz supports through its ESG Generation pathway: moving from awareness and assessment to strategy, implementation, measurement, assurance readiness, and reporting. The goal is not to treat the report as the finish line. It is to build the capabilities that make responsible growth measurable and repeatable.
Start with the decisions your business needs to make over the next three to five years. When NSRF reporting is connected to those decisions, it becomes more than a regulatory response – it becomes evidence that your organization is prepared to create value, manage change, and grow with purpose.