Key takeaway
The Governance module starts with one fundamental question: does your board actually look at environmental issues? CDP grades this module by looking for evidence of board-level engagement, not by reading aspirational statements. The questions in this lesson (Q4.1 to Q4.3.1) cover board structure, board responsibility for environmental matters, and the cadence of board oversight. Get them right and you unlock around 12 to 15 points; get them wrong and you forfeit the foundation of your entire Governance score.
What CDP wants in board oversight
A CDP-strong board oversight setup has three components, each tested by a separate question:
- A board exists and is composed in a credible way (Q4.1)
- The board has explicit responsibility for environmental issues (Q4.2)
- The board reviews environmental matters at a defined frequency, with documented outputs (Q4.3)
Each question is graded across the full Disclosure-Awareness-Management-Leadership ladder. The maximum points across this trio is roughly 12-15, depending on sector, with non-disclosure penalties of 30+ points if you skip them.
Q4.1 - Board structure and diversity
Q4.1 asks whether you have a board, how often it meets, what types of directors sit on it, and whether you have a board diversity and inclusion policy.
The fields to fill (paraphrased):
- Board exists: Yes or No
- Meeting frequency: Annual, half-yearly, quarterly, monthly, etc.
- Director types: Executive, non-executive, independent non-executive (multi-select)
- Diversity policy: Yes-public, Yes-private, or No
- Policy summary (if Yes)
- Policy attachment (optional)
Scoring summary on Q4.1:
| Tier | Maximum points | What earns it |
|---|---|---|
| Disclosure | 5 points | Complete every displayed cell except the optional file attachment |
| Awareness | 1 point | "Yes" to board AND a diversity policy exists (public or private) |
| Management | 1 point | The diversity policy is publicly available (not private) |
| Leadership | 0 points available | This question maxes out at Management |
The non-disclosure penalty is 19 + 5 + 6 + 2.5 = 32.5 points across the four levels. The penalty is more than four times the reward for answering well, so always answer something.
Analogy
Think of Q4.1 like the first question on a tax form. It asks for your filing status. If you put the wrong answer, every later calculation is wrong. If you skip it entirely, the whole form is invalid. Q4.1's answer flows into Q4.2 and Q4.3 directly: if you say there is no board, the rest of the governance module collapses.
Q4.2 - Board responsibility for environmental issues
Q4.2 asks whether your board has explicit responsibility for environmental issues, and how that responsibility is structured.
The structural answer the grader wants:
- A named committee or named director(s) accountable
- A documented mandate (in board charter, terms of reference, or equivalent)
- A review schedule (typically quarterly)
- An escalation pathway from management to board
Three credible answer patterns:
- Sustainability committee model. A dedicated board sub-committee (Tata Steel's Safety, Health, Environment and Sustainability Committee, ITC's Sustainability Committee, Hindustan Unilever's Sustainability Committee).
- Risk committee model. Environmental issues integrated into the existing Risk Management Committee at board level. Common in financial services and infrastructure.
- Full board model. No sub-committee; environmental matters are reviewed by the full board at every meeting. Works for smaller boards with less complexity.
Any of the three models can score at Leadership tier if implemented properly. The mistake is when a company claims one of these structures but the documentation does not match. Saying "the board oversees climate" is not enough; you need a charter line, a meeting cadence, and minutes.
Worked example
ITC Limited, India. Their Sustainability Committee has been chaired by an independent director, meets quarterly, and reports to the full board annually. The committee charter (publicly available) explicitly lists climate, water, forests, and biodiversity oversight responsibilities.
This setup earns Leadership tier on Q4.2. The components: named committee, named chair (independent), defined frequency, documented charter, public availability.
A common mid-tier setup. A mid-size company says "the board reviews sustainability" but has no sub-committee, no charter line, and the topic is on the board agenda once a year. This earns Awareness tier at best, often Disclosure only. The fix is to formalise: amend the board charter to add an explicit sustainability oversight clause; commit to quarterly review; minute the discussions.
Q4.3 and Q4.3.1 - Frequency and substance of oversight
Q4.3 asks how often the board reviews environmental issues, and Q4.3.1 (the follow-up) asks what specifically they review.
Frequency tiers:
- Quarterly or more often unlocks Management consideration.
- Annual is the floor for Awareness.
- Less than annual or ad hoc caps at Disclosure.
The substantive content the board reviews matters as much as frequency. The grader wants to see:
- Specific topics: GHG performance, transition plan progress, climate risk, water risk, deforestation due diligence, target setting and revision
- Quantitative metrics: actual numbers (emissions, water withdrawals, deforestation incidents) presented to the board, not narrative summaries
- Decisions: explicit decisions taken by the board (target approval, capex sign-off, policy ratification), not just "discussions"
Q4.3.1 specifically asks for a list of topics reviewed. Be specific. "Climate risk management" is better than "sustainability." "Approval of the FY27-30 transition plan" is better than "transition plan review." The grader counts named substantive items.
How the trio interacts
Q4.1, Q4.2, Q4.3 are read together by the grader. A coherent answer:
- Q4.1: Yes, board exists, meets quarterly, diversity policy public.
- Q4.2: Sustainability Committee at board level, chaired by independent director, charter published.
- Q4.3: Committee meets quarterly, full board reviews annually, with specific agenda items including emissions, transition plan, water risk.
This combination puts you at Management tier across all three questions. To reach Leadership, you add:
- An external review of board-level climate competence (some firms commission this from EY, KPMG, or board consultancies)
- Climate-linked KPIs in director compensation (Q4.6)
- Public reporting of board-level oversight outcomes (in your annual report or sustainability statement)
Worked example: cleaning up the trio
Worked example
Sundar Foods Ltd, India (synthetic).
Year 1 disclosure.
- Q4.1: Yes board, monthly meetings, executive and non-executive selected, diversity policy "yes-private" with one-line summary. Score: 5 of 5 Disclosure, 1 of 1 Awareness, 0 of 1 Management. Total 6 of 7.
- Q4.2: "The board reviews sustainability annually." No sub-committee, no charter reference. Score: Disclosure tier only.
- Q4.3: Annual review, topics listed as "sustainability and ESG generally." Score: Awareness tier.
Total Module 4 Q4.1-Q4.3 Year 1: roughly 8 of 12 available points.
Year 2 upgrade.
- Make the diversity policy public on the website.
- Add a clause to the board charter: "The Board, through its Risk and Audit Committee, oversees environmental matters including climate-related risks and opportunities, water security, and supplier deforestation diligence."
- Schedule a quarterly Risk and Audit Committee agenda item: emissions, water, transition plan progress, with named metrics.
- Document board minutes referencing those agenda items.
Year 2 score on the same trio: 6 of 7 + 4-5 of 4-5 + 4-5 of 4-5 = roughly 14 of 16.
The work added: one charter amendment, one quarterly recurring agenda item, one website upload. The score improvement: 6+ points without changing the underlying business.
Sector deltas to know
Financial services companies face slightly different scoring on Q4.1 (the Management-tier non-disclosure denominator is 7 instead of 6) and on Q4.2 (more emphasis on financed-emissions oversight specifically). The structural answer pattern is the same; the financial sector simply gets a slightly higher penalty for opacity, reflecting CDP's view that capital allocators have systemic responsibility.
For sectors with high physical operations (steel, cement, agriculture), the grader looks for specific operational evidence in Q4.3.1 (water withdrawal at specific sites, deforestation incidents at specific commodity sources), not just topline metrics.
Key Takeaways
- Q4.1, Q4.2, and Q4.3 are read together; the grader looks for coherence between board structure, mandate, and review cadence
- A Sustainability Committee, Risk Committee, or Full Board model can each earn Leadership tier; the difference is documentation, not structure
- Frequency matters: quarterly oversight unlocks Management tier, annual is the floor for Awareness, less than annual caps you at Disclosure
- The specific topics and decisions reviewed at the board level need to be named and quantified, not generic
- The non-disclosure penalty across this trio is ~30 points; always answer something even if it is not perfect
Knowledge Check
Test what you just learned
6 questions · check each one as you go
What does Q4.1 'Board of Directors' question test?
What is the maximum points available on Q4.1?
True or false: A diversity policy that exists but is not publicly available earns Awareness but not Management points on Q4.1.
What does Q4.2 ask about?
What unlocks Management-tier scoring on Q4.3 (frequency of board review)?
Match each Q4.1 input to its scoring impact.
Match each item to its pair
All cells completed (board, frequency, director types, diversity policy)
Diversity policy 'Yes, but not publicly available'
Diversity policy 'Yes, and publicly available'
Q4.1 left blank