Malaysia's National Sustainability Reporting Framework does not give you a deadline in 2027. It gives you a reporting year, and for most Group 2 companies that year is already running.
- The NSRF sets a reporting year, not a filing deadline. A December year end is already running.
- Utility billing history ages out, and refrigerant recharges cannot be reconstructed once the service sheets are gone.
- Three of the four IFRS S2 pillars are narrative. Disclose an honest gap rather than an invented arrangement.
- Fix the boundary, name a data owner for each number, and start capturing imperfectly now.
This is the detail that catches teams out. A filing deadline is something you prepare for. A reporting year is something you are either already measuring or have already lost.
The timeline, plainly
The NSRF adopts IFRS S1 and S2 and phases them in by company size.
If you are Group 2 with a December year end, the year being reported on is the one you are living through right now. Every month that passes without a meter reading captured is a month that has to be reconstructed later from whatever the utility can still produce.
Why "we'll start after year end" doesn't work
The instinct is reasonable: close the books, then do the sustainability report. It is how most compliance reporting works.
It fails here for three specific reasons.
Utility data has a shelf life. Most suppliers give you twelve to twenty-four months of billing history online, and some give you less. Start in March 2027 and January 2026 may already require a written request and a two-week wait, repeated for every account, at every site.
Refrigerant is invisible in arrears. Fugitive emissions are recorded when a contractor recharges a chiller. That gas is on a service sheet in a filing cabinet, and nobody kept a copy. Reconstructing a year of refrigerant leakage after the fact is usually impossible, so the line ends up at zero, which is not a measurement. It is an omission that reads like one.
A comparative year needs to exist. IFRS S2 expects comparatives. If FY2026 is your first measured year, your first report has nothing to compare against and every subsequent conversation starts from a standing position rather than a trend.
What Group 2 actually has to disclose
IFRS S2 organises around four pillars. Three of them are narrative, and this is where most preparation goes wrong.
Governance — who on the board and in management is accountable for climate, how often they consider it, and how it feeds decisions. This is not a data collection problem. It is a question about whether those arrangements exist, and if they do not, the honest answer is that they have not been established. Writing one before it is true is worse than the gap.
Strategy — the climate risks and opportunities identified, their time horizons, and their effect on the business model. Generic risks that could apply to any company are worse than an honest gap, because they read as though an assessment was done.
Risk management — how climate risk is identified and assessed, and how it connects to the wider enterprise risk process.
Metrics and targets — Scope 1, Scope 2 on both a location-based and a market-based method, and eventually Scope 3. Plus any targets, with base year and scope coverage. If you have no target, disclose that you have no target. A great many first reports invent an aspiration here, and an aspiration in a regulatory filing is a commitment.
The relief that is not a reprieve
The framework offers transition reliefs. Most usefully, Scope 3 is deferred, and there are provisions around comparatives in the first year.
Relief on Scope 3 is not relief from Scope 3. Group 2 reports it from FY2028, which means the data collection for it starts well before that. Scope 3 is the part you do not control: it comes from suppliers, from freight, from travel bookings, from waste contractors. Getting a supplier to give you emissions data for the first time is a relationship exercise measured in months, not a data request measured in days.
The companies that will report Scope 3 comfortably in FY2028 are the ones asking suppliers in FY2026 and getting nothing useful back, then asking better in FY2027.
What good preparation looks like this year
Not a system purchase. In order:
Fix the boundary first. Which legal entities are in, on which consolidation approach: operational control, financial control or equity share. Everything downstream depends on it, and changing it later restates every figure you have collected.
Find out who owns each number. Electricity sits with facilities. Fuel sits with fleet. Refrigerant sits with maintenance. Travel sits with finance or the travel agency. Waste sits with procurement. None of these people currently think of themselves as sustainability data owners, and telling them in January 2027 is too late.
Start capturing now, badly. An incomplete inventory that improves monthly beats a perfect one that starts in fourteen months. The first pass will have gaps and estimates. Label them as estimates and fill them in later. That is what the data quality disclosure is for.
Get one refrigerant service record. It is the single most commonly missed line, and finding out now whether your contractor documents recharge quantities is a five-minute question that saves a zero on your Scope 1.
The uncomfortable version
Most Group 2 companies will file something in 2027. Fewer will file something they can defend when an assurance provider asks how a figure was derived.
The difference is almost never the software. It is whether the data was captured while it was still capturable, by people who knew they owned it, with the evidence attached at the moment of capture rather than reconstructed afterwards.
That work starts in the reporting year. Which, for a December year end, is now.