Jonathan R. Everhart is Chairman, CEO & Chief Investment Officer of Global ReEnergy Holdings. This post is based on Global ReEnergy Holdings memorandum by Dr. Everhart.
Related research from the Program on Corporate Governance includes The Illusory Promise of Stakeholder Governance (discussed on the Forum here) by Lucian A. Bebchuk and Roberto Tallarita; Does Enlightened Shareholder Value Add Value? (discussed on the Forum here) and Stakeholder Capitalism in the Time of COVID (discussed on the Forum here), both by Lucian A. Bebchuk, Kobi Kastiel, and Roberto Tallarita; Restoration: The Role Stakeholder Governance Must Play in Recreating a Fair and Sustainable American Economy—A Reply to Professor Rock (discussed on the Forum here) by Leo E. Strine, Jr.; and Corporate Purpose and Corporate Competition (discussed on the Forum here) by Mark J. Roe.
IMPLEMENTING CYBERSECURITY WITHIN THE NASDAQ ENVIRONMENTAL, SOCIAL, AND GOVERNANCE (ESG) FRAMEWORK
This policy brief discusses cybersecurity from the corporate governance standpoint and illustrates how Nasdaq can implement cybersecurity into its ESG Reporting Guide, which is used by many public and private companies globally. The intersection of a company’s cybersecurity and ESG is a new corporate governance model. Cybersecurity has become a prevalent issue, specifically in the context of the digital economy, as corporate stakeholders require cyberattacks and security breaches to be proactively measured and mitigated in governing enterprise-wide risk management. Additionally, cybersecurity has gained wider attention due to increasingly impactful data breaches (i.e., SolarWinds) and the shift to remote working environments. As companies prioritize ESG, the inclusion of cybersecurity into their ESG governance framework is critical to manage the risks posed by cybersecurity to their ESG efforts. Nasdaq’s ESG Reporting Guide is a leading standard within the global capital markets for companies implementing ESG policies and metrics. This policy brief provides a use case demonstrating the implementation of the National Institute of Standards and Technology’s (NIST) Cybersecurity Framework into the Nasdaq ESG Reporting Guide. This can aid in encouraging more enhanced cybersecurity governance and improvements for the global capital markets.
WHY IS CYBERSECURITY CRITICAL TO AN ESG FRAMEWORK?
OPTIMIZING ESG THROUGH CYBERSECURITY GOVERNANCE
Since the inception of ESG practices, cybersecurity has not been considered a key component of ESG. However, with the increase in high-profile data breaches, the acceleration of the global digital economy, and the shift to remote working environments, cybersecurity has rapidly become integral to ESG. Leading institutions, like JPMorgan, suggest that considering cybersecurity as an ESG metric is a relatively new model, however all evidence points to continued interest of this new model by organizational stakeholders across the board. [1] For instance, a 2019 survey by RBC Asset Management on investing concluded that 67% of investor respondents from the U.S., Europe, Asia, and Canada ranked cybersecurity as a top concern. [2] Core cybersecurity spending reached $68 billion in 2020, consisting of major spending in infrastructure protection, network security equipment, integrated risk management, and application security. [1] A Bloomberg report estimates cybersecurity spending to surpass $200 billion annually by 2024. [3] Given the rising importance of cybersecurity to a company’s operational and financial performance, it has become a key ESG issue and should be implemented within a company’s ESG practices.

Enhanced ESG Disclosures for Investment Funds and Advisers: A Comment from BlackRock
More from: Elizabeth Kent, Paul Bodnar, BlackRock
Paul Bodnar is Global Head of Sustainable Investing and Elizabeth Kent is a Managing Director at BlackRock, Inc. This post is based on a comment letter by BlackRock submitted to the U.S. Securities and Exchange Commission regarding the proposed rules on ESG disclosures for investm ent funds and advisers.
This post is based on a comment letter submitted to the SEC regarding the proposed rules on ESG disclosures for investment funds and advisers by BlackRock. Below is the text of the letter with minor adjustments to eliminate the correspondence-related parts.
BlackRock, Inc. (together with its subsidiaries, “BlackRock”) respectfully submits the following response to the Securities and Exchange Commission’s (“SEC”) proposed rule “Enhanced Disclosures by Certain Investment Advisers and Investment Companies About Environmental, Social, and Governance Investment Practices” (“the proposal”). [1] We commend the SEC for taking this step to promote investors’ access to consistent, comparable, and reliable information about investment funds’ and investment advisers’ incorporation of environmental, social, and governance (“ESG”) criteria into their investment processes.
READ MORE »