ESG stands for Environmental, Social, and Governance. It is a set of standards used to evaluate how responsibly an organization operates beyond pure financial performance. In practice, ESG covers issues such as energy use, labor practices, supply-chain oversight, board accountability, and recordkeeping. For companies, ESG is not just a reporting exercise: it depends on reliable evidence, consistent controls, and traceable data.
In cyber security, ESG matters because the same systems that store compliance records, supplier questionnaires, audit logs, and sustainability metrics can be attacked or manipulated. Ransomware, insider abuse, or compromised third parties can interrupt reporting, alter evidence, or expose sensitive vendor information. Defenders reduce this risk with access controls, immutable logs, backup and recovery, data validation, and supplier security checks. Strong cyber security helps ensure ESG claims remain verifiable rather than merely documented.