ESG reporting for Malaysian SMEs: where to start

If a customer has just sent you an ESG questionnaire, you are not alone: Bursa-listed companies must now report on their supply chains, and that means their suppliers, including SMEs, must produce data. Here is a sane starting sequence.

Start with what is being asked

Collect the actual questionnaires and contract clauses you have received. SME ESG programmes fail when they start from frameworks; they succeed when they start from customer requirements and work backwards.

The minimum viable ESG baseline

• Environmental: 12 months of electricity, fuel and water data, converted to a simple Scope 1 and 2 GHG inventory
• Social: headcount data, safety statistics (LTI), and your labour policies in writing
• Governance: anti-bribery policy, whistleblowing channel, and who owns ESG at management level

You almost certainly already generate 80% of the data. The work is collecting it in one place, consistently.

From that baseline, a one-page ESG statement answers most customer questionnaires. Standards like ISO 14001 and ISO 45001 then become the natural next step because they systematise the E and the S you are already reporting.