Quick Read
SPK CSMS1000:2026 requires organisations to establish an obligations register before conducting any sustainability impact and risk assessment, creating a defined scope based on legal, regulatory, and voluntary commitments rather than unlimited impact mapping. This approach mirrors ISO 37301's compliance logic and ensures the sustainability programme reflects actual accountability rather than subjective prioritisation. The obligations register—comprising mandatory laws, reporting regulations, and voluntary commitments—becomes the boundary that determines which sustainability topics are material and how the entire assessment process unfolds.
Executive Summary
SPK CSMS1000:2026 opens its analytical section with a requirement that surprises many practitioners: before identifying impacts, before engaging stakeholders, before assessing any sustainability topic, the organisation must establish its obligations. This is not a procedural preference. It is a deliberate design decision that determines the quality and business relevance of everything that follows.
This paper explains what the obligations register requirement means in practice, why it comes first in the standard's logic, how it shapes the entire IRO assessment process, and what Speeki assessors examine when they evaluate an organisation's obligations register in a Speeki Meridian™ engagement.
Obligations answer the question that most sustainability programmes never ask: why are we doing this, and what are we actually required to achieve?
1. The Problem With Starting From IROs
The intuitive starting point for a sustainability assessment is impacts. What does this organisation do to the world? What risks does it carry? Where are the opportunities? This is the logic of most sustainability frameworks — begin by mapping the impacts and risks, then decide which ones matter.
The problem is scope. An organisation that begins by asking 'what are our impacts?' has no boundary on the question. Every human activity creates impacts. Every business carries sustainability-related risks. The universe of potential IROs is effectively unlimited, and without a boundary, two things happen. First, the assessment becomes unwieldy — every topic feels significant and prioritisation is subjective. Second, the assessment becomes disconnected from the organisation's actual accountability framework — it reflects what the sustainability team thinks is important rather than what the organisation is actually required to manage.
SPK CSMS1000:2026 solves this by requiring the obligations register to be established before the IRO assessment begins. The obligations register creates the scope. It defines what the organisation must achieve — not what it thinks might be important — and it does so by reference to external accountability: laws, regulations, reporting frameworks, and voluntary commitments the organisation has made.
This is the same logic that ISO 37301 (compliance management systems) applies to compliance obligations: before you can manage compliance, you must know what you are obliged to comply with. SPK CSMS1000:2026 applies the same principle to the whole sustainability programme. Before you can manage sustainability, you must know what you are obliged to manage.
2. What the Obligations Register Must Contain
2.1 Mandatory obligations
Mandatory obligations are those the organisation has no choice about. They include: all environmental, health and safety, and social laws applicable in every jurisdiction where the organisation has material operations; sustainability reporting regulations that apply to the organisation (CSRD, SGX sustainability reporting rules, HKEX ESG reporting requirements, US state climate disclosure rules, or equivalents); supply chain due diligence laws in applicable jurisdictions; anti-corruption and anti-bribery laws; labour and human rights laws; and any other regulatory requirement with a sustainability dimension.
The obligations register must cover all jurisdictions of material operation — not just the headquarters jurisdiction. A Singapore-headquartered company with significant European operations may be subject to CSRD through its EU subsidiaries. A company with operations in Europe might be subject to the Supply Chain due diligence laws. Obligations that apply to subsidiaries or operations in other jurisdictions apply to the CSMS.
2.2 Voluntary obligations
Voluntary obligations are commitments the organisation has chosen to make. They include: sustainability reporting frameworks adopted (GRI Standards, ISSB S1/S2, TCFD, TNFD); voluntary certification or rating schemes the organisation participates in; sector initiatives and codes of conduct; contractual ESG commitments with material customers, lenders, or investors (including sustainability-linked loan covenants and supply chain codes); and public commitments made by the organisation (net-zero commitments, science-based targets, specific ESG pledges in investor communications).
Voluntary obligations carry the same status as mandatory ones once they are adopted. An organisation that has publicly committed to science-based targets has an obligation to pursue them. An organisation that has agreed to sustainability-linked loan covenants has financial obligations around its ESG performance. These are real accountability obligations, not aspirations.
2.3 What each obligation must document
Required element | Why it matters |
|---|---|
Source and nature of the obligation | Specific law, framework, or commitment — not a category description |
Jurisdiction or counterparty | Which jurisdiction's law, or which party the voluntary commitment was made to |
Sustainability topics governed | Which sustainability domains the obligation addresses |
Reporting or disclosure requirements | Whether the obligation requires reporting, and to what standard or framework |
Applicable materiality type | Impact materiality (GRI), financial materiality (ISSB), or double materiality (CSRD/ESRS) |
Consequence of non-fulfilment | Regulatory penalty, contract breach, reputational exposure, or accreditation risk |
Responsible owner | The individual within the organisation accountable for monitoring and fulfilling the obligation |
3. Why Obligations Determine Materiality Type
One of the most important functions of the obligations register is determining which type of materiality assessment applies to the organisation. This is not an organisational choice — it is determined by the organisation's obligations.
If the organisation is subject to CSRD and required to report under ESRS, double materiality applies — both the significance of the organisation's impacts on people and environment, and the significance of sustainability risks and opportunities to the business, must be assessed. This is required by ESRS 1 and is a mandatory element of the reporting obligation.
If the organisation has voluntarily adopted ISSB S1 and S2 for investor-oriented sustainability disclosure, financial materiality applies — the assessment focuses on risks and opportunities that are material to the organisation's financial performance and position.
If the organisation reports under GRI Standards, impact materiality applies — the assessment focuses on the organisation's actual and potential impacts on people, society, and the environment.
Many organisations are subject to multiple frameworks simultaneously. A large listed company may have CSRD obligations (double materiality), investor expectations aligned with ISSB (financial materiality), and a GRI-aligned sustainability report (impact materiality). All applicable materiality types apply. The obligations register must identify the materiality type for each obligation, and the IRO assessment must address all applicable types.
The materiality type connection
The materiality type determined by the obligations register directly shapes the IRO assessment criteria in Clause 6.4. For impact materiality: IROs are assessed for scale, scope, remediability, and likelihood of impacts. For financial materiality: IROs are assessed for magnitude, likelihood, and time horizon of financial effects. For double materiality: both sets of criteria apply. Getting the obligations register right is therefore a prerequisite for getting the IRO assessment right.
4. How Obligations Determine Stakeholder Engagement
A second critical function of the obligations register is identifying which stakeholder groups must be engaged in the sustainability assessment — and for what purpose.
This is an area where SPK CSMS1000:2026 differs from many practitioner approaches, which treat stakeholder engagement as a general consultation exercise. The standard connects stakeholder engagement directly to obligations. Different obligations implicate different stakeholder groups.
Impact-led frameworks (GRI) require engagement with those most directly affected by the organisation's activities — communities, workers in the supply chain, local environments. The UNGP-informed approach to human rights due diligence requires engagement with rights-holders. ESRS S1 stakeholder engagement requirements specifically address affected communities and workers.
Financial materiality frameworks (ISSB) require engagement with capital providers — institutional investors, lenders, analysts. Understanding what sustainability-related risks and opportunities are material to investors requires understanding investor expectations.
Supply chain due diligence obligations require engagement with supplier communities and affected people in the value chain. This is a legal requirement in several jurisdictions, not a voluntary engagement choice.
By establishing obligations first, the standard ensures that stakeholder engagement (Clause 6.2) is structured, purposeful, and defensible — not a generic consultation exercise that ticks a box.
5. Building the Value Proposition
The obligations register has a fifth function that practitioners often overlook: it builds the value proposition for the entire CSMS. Understanding why the organisation is managing sustainability — what it must achieve, what it has committed to achieve, and what the consequences of non-fulfilment are — is the foundation for articulating why the CSMS matters to the business.
A sustainability function that can point to the obligations register and say 'this is why we do what we do' has a fundamentally stronger position with the governing body, executive leadership, and operational functions than one that must justify its programme by reference to values or reputation. Obligations create accountability. Accountability creates organisational commitment.
This is why SPK CSMS1000:2026 requires the obligations register to be used as input to the value propositions in Clause 5.5. The value propositions — the documented rationale for the sustainability programme from the perspective of each material stakeholder group — should be grounded in the obligations that make the programme necessary.
6. Keeping the Register Current
The obligations register is not a one-time exercise. Obligations change: new regulations come into force, voluntary commitments are made or updated, new jurisdictions become material, and reporting frameworks evolve. SPK CSMS1000:2026 requires the register to be reviewed at least annually and whenever significant changes occur in the organisation's operating context.
In practice, the obligations landscape is currently changing rapidly. Multiple major sustainability disclosure regulations have been introduced or amended in the past three years. The register review is not a box-ticking exercise — it requires active monitoring of the regulatory and framework landscape in every jurisdiction of material operation.
Changes to the register have downstream consequences. A new reporting obligation may change the applicable materiality type. A new contractual ESG commitment may add a voluntary obligation. An expansion into a new jurisdiction may introduce new mandatory obligations. These changes must be reflected in the register — and their implications for the IRO assessment, the CSMS scope, and the reporting programme must be assessed and actioned.
Speeki Meridian™ — Auditor Expectations
In a Speeki Meridian™ assessment, the obligations register is one of the first documents requested at Stage 1. Assessors look for: completeness across all jurisdictions of material operation (not just headquarters); correct identification of the applicable materiality type for each reporting obligation; documented ownership for each obligation; and evidence of the register having been reviewed within the past 12 months. At Stage 2, assessors will test whether the register is genuinely used — does the materiality type identified in the register match the criteria used in the IRO assessment? Does the stakeholder engagement plan reflect the stakeholder groups implicated by the obligations? Is the governing body informed when the obligations landscape changes materially? The most likely Stage 1 finding on Clause 6.1 is an obligations register that covers the primary reporting jurisdiction but misses obligations in subsidiary jurisdictions. The most likely Stage 2 finding is a register that exists but is not connected to the IRO assessment — it is a compliance document that sits separately from the sustainability management process.
Implementation Guidance
Start by listing every jurisdiction in which the organisation has material operations — not just where it is incorporated. For each jurisdiction, identify all applicable mandatory sustainability obligations: environmental laws, reporting requirements, supply chain due diligence obligations, anti-corruption laws. Add the organisation's voluntary obligations: frameworks adopted, public commitments made, contractual ESG requirements. For each obligation, document the materiality type. If the organisation is subject to CSRD, document double materiality. If it reports under ISSB, document financial materiality. If it uses GRI, document impact materiality. Many organisations will have multiple types. Assign an owner to each obligation — this should be a named individual, not a team or function. Build a review cycle: at minimum annual, with a trigger for ad hoc review whenever a new obligation is identified. Make the register visible: the governing body should see a summary at each governing body review. Changes to material obligations should be escalated promptly — not held until the annual review cycle.
About Speeki
Speeki is an accredited certification body operating across more than 100 countries. Speeki certifies organisations against SPK CSMS1000:2026 through the Speeki Meridian™ certification programme. Speeki is a certification body — it does not provide sustainability consulting or advisory services of any kind.
For current details of Speeki's accreditations, scope of certification, and service offerings, visit speeki.com. You can also ask Nicole AI on the Speeki website to find the information you need.
speeki.com | © Speeki Pte Ltd 2026