ESG reporting was once considered a voluntary corporate communications exercise, a sustainability page on a company website or a brief section of an annual report. That period is over. A combination of regulatory pressure, investor scrutiny, customer expectations, and talent market dynamics has elevated ESG from optional disclosure to strategic requirement.

The IT sector occupies an especially prominent position in this shift. Technology infrastructure generates measurable environmental impact at scale, handles vast quantities of personal and sensitive data, and increasingly shapes the social and economic opportunities available to individuals and communities. The decisions that IT leaders make about energy, procurement, data handling, and governance have real-world consequences that ESG frameworks are designed to make visible and accountable.

The environmental pillar is where IT organizations tend to begin their ESG journey, partly because it is the most measurable and partly because regulatory pressure has been most intense here. The environmental footprint of IT spans the full technology lifecycle, from the embodied carbon in hardware manufacturing to the energy consumed in daily operations to the e-waste generated when devices are retired.

Data centers sit at the center of the environmental picture. They currently consume approximately 2% of global energy demand and an estimated 980 million cubic meters of water annually for cooling. Software efficiency is an equally significant but often overlooked contributor. Inefficient code makes hardware work harder, increasing energy consumption and carbon emissions without any corresponding increase in business output.

Electronic waste has become the fastest-growing waste stream on the planet. Most IT assets are decommissioned well before the end of their functional life, driven by procurement cycles disconnected from actual performance requirements. Extending hardware lifecycles, certifying end-of-life disposal, and reducing the embodied carbon of procurement decisions are all core environmental actions within an IT ESG program.

The social pillar is where many IT organizations have the furthest to travel. It encompasses how technology departments treat their own employees, how the products and services they build affect users and communities, and the labor and social conditions throughout the hardware supply chain.

Within the workforce, social responsibility means equitable hiring and promotion practices, pay equity, inclusive working environments, accessible tools, and investment in employee development. The technology sector has historically underperformed on workforce diversity, and ESG frameworks create a structured basis for measuring and improving that performance.

Beyond the workforce, the social dimension includes data privacy and the responsible handling of personal information, the ethical design of AI and automated systems, digital inclusion and equitable access to technology services, and supply chain accountability for the conditions under which hardware is manufactured. These areas increasingly attract regulatory and public scrutiny, and organizations that fail to address them face reputational, legal, and operational exposure.

Governance in an IT ESG context describes the structures, policies, and accountability mechanisms through which technology decisions are made and overseen. Strong IT governance ensures that environmental and social commitments are not aspirational statements but are embedded in decision-making processes, subject to review, and verifiable by external stakeholders.

Key governance elements include data governance frameworks that define ownership, standards, and accountability for enterprise data; cybersecurity policies that protect individuals and organizations from harm; ethical AI policies with independent oversight mechanisms; board-level accountability for technology risk and ESG performance; and compliance programs aligned with applicable regulations including GDPR, CSRD, and the EU AI Act.

Governance is also the pillar that connects the other two. Without effective governance structures, environmental targets remain untracked and social commitments remain unverified. The quality of governance is what determines whether an organization’s ESG program reflects genuine change or superficial reporting.

The Green IT Framework, developed by DASCIN, provides a structured and vendor-independent approach to implementing sustainable IT practices. While the framework is organized around eight components, its scope directly maps to the environmental pillar of ESG and provides the operational foundation through which IT organizations can begin building a credible and measurable ESG program.

The framework organizes sustainable IT practice into five operational domains where environmental impact is generated, two enabling disciplines that make progress measurable and governable, and an overarching Green IT Strategy that connects all components to organizational goals and accountability structures.

The two enabling disciplines complete the framework. Measurement and Reporting transforms the five operational domains from aspirations into trackable performance, using the GHG Protocol, GRI Standards, ESRS E1 under the EU’s Corporate Sustainability Reporting Directive, and the composite Green IT Impact Score (GIIS). Continual Improvement ensures the program keeps pace with evolving technology, regulation, and stakeholder expectations through structured Plan-Do-Check-Act review cycles.

One of the most practical questions for IT professionals beginning an ESG program is how to connect operational activities to the reporting frameworks that investors, regulators, and customers require. The Green IT Framework provides the operational structure; the table below shows how its components connect to the three ESG pillars.

The regulatory landscape for ESG disclosure has shifted significantly and continues to evolve. IT organizations operating in or selling to regulated markets can no longer treat ESG reporting as voluntary. Several frameworks and regulations now create mandatory or near-mandatory disclosure obligations.

The Corporate Sustainability Reporting Directive (CSRD) in the European Union requires large organizations and listed companies to report against the European Sustainability Reporting Standards (ESRS), including ESRS E1 which directly addresses climate and energy. The Streamlined Energy and Carbon Reporting (SECR) framework applies to large UK organizations. The US Securities and Exchange Commission (SEC) has introduced climate-related disclosure rules for publicly listed companies. The Science Based Targets initiative (SBTi) provides a pathway for organizations to align emissions reduction commitments with climate science.

Beyond mandatory frameworks, procurement requirements from enterprise customers and institutional investors are creating de facto requirements even for organizations not directly subject to regulation. Increasingly, winning a major technology contract requires demonstrating credible, verified ESG performance.

ESG performance generates measurable financial value across several distinct categories. Organizations that treat ESG as a cost center or compliance burden consistently underestimate the financial return on structured ESG programs.

For most organizations, the most common barrier to ESG progress in IT is not a lack of motivation but a lack of structure. Knowing that ESG matters is not the same as knowing where to start or how to prioritize action across a complex technology environment.

The Green IT Framework provides a practical starting point. The recommended sequence is to begin with the Green IT Strategy, establishing the governance layer that gives all other work direction and accountability. From there, Measurement and Reporting should be activated early, even before all operational improvements are in place, because establishing baselines is prerequisite to tracking progress and meeting any reporting obligation.

The five operational domains can then be prioritized based on where an organization’s footprint is largest. For most enterprises, Data Storage and Hardware represent the largest environmental impact and offer the most immediate improvement opportunities. Software efficiency and Process changes typically follow, and the Practices domain deepens cultural embedding over time.