Short answer
The answer, before the reasoning
A practical GRI source register is a controlled row-level link between a disclosure requirement and the evidence used to report it. Each row should identify the exact requirement, owner, reporting boundary, source system, period, unit, methodology, evidence, reviewer, issue status and final publication location.
GRI does not prescribe this register as a template, but the control directly supports Accuracy, Verifiability, the GRI Content Index, external assurance and year-on-year repeatability. The data request should be generated from the register rather than from an unstructured email list.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Why this question matters
Many reporting teams begin data collection with a spreadsheet headed only 'indicator', 'value' and 'owner'. That may be enough to chase a number, but it is not enough to establish whether the number answers the disclosure, uses the correct boundary, has been reviewed or can be located in the published report. As drafting progresses, methodology notes sit in email, evidence sits in shared drives, and page references are added manually after design. The same questions then return the following year.
A source register turns this fragmented process into a reporting system. It decomposes each disclosure into manageable information requirements, creates an accountable request, links the response to evidence and review, and carries the approved result into drafting and the Content Index. It also makes unresolved issues visible early enough to escalate them rather than discovering them in the final publication week or during assurance walkthroughs.
Quick orientation
- Applies to
- Organisations preparing a GRI report across multiple functions, entities, sites, documents or publication locations.
- Primary decision
- How to structure one register that supports data collection, drafting, review, Content Index assembly, assurance and repeat reporting.
- Key sources
- GRI 1 Accuracy, Comparability, Completeness, Verifiability, Requirement 6 and Requirement 7; GRI 2 restatements and assurance disclosure.
- Common confusion
- The source register is an internal implementation control, not a formal GRI disclosure or a substitute for the public GRI Content Index.
1. The source-to-disclosure control objective
The register should allow a competent reviewer to answer five questions without searching through project correspondence: What exactly was required? Which population and period were in scope? Which source and method produced the information? What review and issue resolution occurred? Where is the approved information published? If one of those questions cannot be answered, the row is not complete.
Figure 1. Source-to-disclosure workflow for GRI reporting. The register links requirement, data request, source evidence, review, drafting and the Content Index, then carries the record into the next reporting cycle.
In practice
2. Why the register supports GRI quality
| GRI basis | What the register contributes |
|---|---|
| Accuracy | Links the value and narrative to the exact requirement, calculation basis, units, boundary and source rather than relying on a generic indicator label. |
| Comparability | Retains prior-year method, assumptions, definitions, coverage and restatement decisions so changes can be identified and explained. |
| Completeness | Shows the full population, exclusions, coverage and missing entities or requirements before aggregation hides them. |
| Verifiability | Provides original-source links, evidence for assumptions/calculations, preparer-reviewer separation, issue resolution and an auditable decision trail. |
| Reasons for omission | Records the exact missing requirement, permitted reason, required explanation, remediation action and expected time frame. |
| GRI Content Index | Carries the approved disclosure title, GRI Standard, material topic, Sector Standard reference, location and omission wording into the public index. |
| External assurance | Allows walkthroughs from published disclosure to criteria, source, method, control, review and retained evidence. |
| Year-on-year repeatability | Creates a controlled roll-forward starting point instead of rebuilding requests and definitions from memory. |
3. Design the register at requirement level
A disclosure can contain several sub-requirements, different owners and different sources. Treating the disclosure number as one row often conceals gaps. For example, a quantitative disclosure may require a total, breakdowns, methodology, assumptions and contextual explanation. One row may be sourced from an environmental system, another from finance, another from an approved methodology and another from management commentary. The register should be detailed enough to detect requirement-level gaps but not so fragmented that the team cannot manage it.
Figure 2. Anatomy of a practical GRI source-register record. The record should show what is required, who owns it, how the data are defined, where the evidence sits, what remains unresolved and where the approved disclosure is published.
In practice
Core register fields
| Field group | Required fields | Control question — Typical owner |
|---|---|---|
| Identity | Row ID; reporting year; framework; Standard edition; disclosure; sub-requirement; material topic; Sector reference. | Is the row tied to one precise information requirement and the correct source edition? — Reporting team / technical author |
| Applicability | Applicable / not applicable / reported / omission under review; rationale; approval. | Has the team made a visible decision instead of leaving the requirement blank? — Technical reviewer / topic owner |
| Scope | Entity, site, geography, worker group, value-chain population, period, unit, boundary, exclusions and coverage. | Does the requested information use the same scope as the published claim? — Reporting owner + data owner |
| Source | System, report, dataset, file, URL, evidence location, extraction date, version and source owner. | Can a reviewer reach the original source rather than a copied number? — Data owner |
| Method | Formula, factor, allocation, estimate, conversion, assumptions, definitions, restatement treatment and methodology link. | Can the calculation and judgement be reproduced? — Methodology owner / preparer |
| Evidence and control | Preparer, reviewer, review date, reconciliation, recalculation, variance, approval, assurance status and retention path. | What establishes the quality of the information? — Reviewer / control owner |
| Issue | Issue ID, type, severity, owner, action, due date, escalation level, decision and closure evidence. | Is an unresolved gap visible and governed? — Project manager / issue owner |
| Drafting | Approved wording, author, draft status, balance check, limitation wording and linked narrative sections. | Does the text remain consistent with the source and method? — Technical author / editor |
| Publication | Report title/version, page or anchor, URL, Content Index row, final sign-off and change lock. | Can a user and reviewer find the complete disclosure? — Publisher / Content Index owner |
| Roll-forward | Prior-year row, recurring request, changed fields, update trigger, next-year owner and archive status. | What can be reused and what must be revalidated next year? — Content owner |
4. Build the register in eight steps
Freeze the source set. Record the applicable GRI Universal, Sector and Topic Standards, editions and effective context before designing requests.
Decompose disclosures. Split each disclosure into requirement-level information needs, including quantitative breakdowns, methodology, narrative, omissions and contextual information.
Set applicability and scope. Define the reporting entities, impact population, metric boundary, period, unit, definitions and required disaggregation for each row.
Assign accountability. Name the data owner, methodology owner, preparer, reviewer, approver and drafting owner; avoid a generic team mailbox as the only owner.
Map existing sources. Link source systems, reports, policies, contracts, calculations, governance minutes and external datasets before issuing a new request.
Generate the data request. Send only the rows relevant to the recipient, with definitions, evidence expectations, due date and escalation route.
Review and resolve. Test completeness, accuracy, variance, methodology and evidence; open issues rather than silently correcting data in the master register.
Publish and lock. Carry approved wording and locations into the report and Content Index, retain the final evidence set, then create the next-year roll-forward copy.
5. Data request template
The request should translate the technical row into an instruction the data owner can execute. A request asking only for 'GRI 2-7 employee data' assumes that the recipient knows the categories, basis of count, period, expected breakdown, estimate permissions and evidence requirements. The template below makes those expectations explicit.
In practice
| Data request field | Content to provide |
|---|---|
| Request ID and disclosure | Unique register row ID, GRI Standard and disclosure/sub-requirement, material topic and reporting year. |
| Question in operational language | A plain-language request describing the metric or narrative needed without requiring the owner to interpret the Standard. |
| Scope | Entities, sites, countries, workforce/supplier/product population, reporting period and exclusions to be included. |
| Definition | Technical definition, classification rules, numerator/denominator, unit, currency, conversion and treatment of unusual cases. |
| Required breakdown | Gender, contract type, location, energy source, incident type, site, category or other disaggregation required by the disclosure. |
| Source and extraction | Expected source system/report, extraction date, file format, query/report name and source owner. |
| Methodology | Calculation, estimate, allocation, factor, sampling, model or narrative method; prior-year basis and approved changes. |
| Evidence | Source extract, calculation file, policy, contract, minutes, survey instrument, dataset or sign-off needed to support the response. |
| Quality checks | Required reconciliation, variance explanation, completeness statement, reviewer and known limitations. |
| Due date and escalation | Submission date, review window, issue owner, escalation date and project contact. |
| Certification | Data owner confirmation that definitions, scope, method and evidence are complete, plus named local reviewer where applicable. |
6. Example data request
The operational question, scope, date, breakdowns, methodology treatment, reconciliation, evidence, reviewer and due date are visible. The request does not ask the HR owner to decide whether an omission is permitted or to draft the Content Index; those judgements remain with the reporting and technical review team.
7. Status and review model
A single percentage-complete field is too weak for a controlled project. A row can contain a submitted value but still fail on scope, methodology, evidence or drafting. Use a status model that reflects the actual reporting gate.
In practice
| Status | Meaning | Who can move the row |
|---|---|---|
| Not started | Applicability and owner assigned; request not yet issued. | Reporting coordinator |
| Requested | Operational request sent with scope, definitions, evidence and due date. | Reporting coordinator |
| Submitted | Response received but not technically reviewed. | Data owner / preparer |
| Review in progress | Completeness, method, variance, evidence and consistency are being tested. | Reviewer |
| Issue open | A specific gap or conflict has been logged; publication treatment is not approved. | Reviewer / issue owner |
| Data approved | Value or narrative source approved for drafting, subject to controlled change. | Named reviewer / approver |
| Draft approved | Public wording is consistent with the approved source and limitations. | Technical reviewer / editor |
| Published reference tested | Final page, anchor or URL verified in the released version and Content Index. | Publisher / Content Index owner |
| Locked and retained | Final evidence, version and approval archived; next-year roll-forward created. | Content owner / records owner |
8. Issue log and escalation logic
The register shows the affected requirement; the issue log manages the resolution. An issue should be opened when the response cannot be corrected through an ordinary review comment or when the resolution needs cross-functional judgement, management decision or publication treatment. Keep the issue ID linked to every affected register row.
In practice
| Issue type | Example | Initial action — Escalation trigger |
|---|---|---|
| Missing population | A subsidiary, site, worker group or supplier system is not included. | Quantify or describe the uncovered population; assign a remediation owner. — Potentially material coverage gap or no credible completion date. |
| Conflicting definition | Countries classify contractors, incidents or renewable energy differently. | Apply the group definition and document local-to-group mapping. — Conflict changes the consolidated trend or cannot be resolved by the methodology owner. |
| Unsupported method | A factor, proxy, allocation or model has no source or rationale. | Request source documentation, test alternatives and perform sensitivity analysis. — Method could materially alter the disclosure or public claim. |
| Material variance | Current-year value differs sharply from prior year, budget, finance or operational data. | Prepare a bridge and identify business, boundary, method and error components. — Variance remains unexplained by the review deadline. |
| Narrative overclaim | Draft wording asserts effectiveness, compliance or reduction not supported by evidence. | Revise wording and identify the additional evidence needed. — Management wants to retain the claim despite the evidence gap. |
| Omission decision | Required information is unavailable or a requirement is considered not applicable. | Test whether the reason is permitted and prepare the required explanation. — The omission affects the statement of use, a likely material topic or assurance scope. |
| Publication mismatch | Content Index reference does not lead to complete disclosure or the website version differs. | Correct the location and re-test the released version. — The report has been released or the mismatch affects a public claim. |
In practice
Escalation levels
| Level | Decision owner | Typical threshold |
|---|---|---|
| Level 1 - operational | Data owner and reviewer | Clarification, formatting, ordinary variance or missing low-risk evidence within the review timetable. |
| Level 2 - technical | Methodology owner and GRI technical reviewer | Definition, boundary, estimate, disclosure applicability, omission or cross-disclosure inconsistency. |
| Level 3 - management | Reporting sponsor, CFO/COO/CHRO or relevant executive | Resource constraint, material missing population, unresolved performance claim or cross-country non-compliance with group instruction. |
| Level 4 - governance / assurance | Highest governance body delegate, audit committee or assurance lead | Statement of use risk, material restatement, significant assurance finding, disputed public claim or release decision. |
In practice
9. How the register supports each reporting stage
| Stage | Use of the register | Output |
|---|---|---|
| Scoping | Lists applicable Standards, requirements, material topics, entities, owners and source availability. | Complete reporting inventory and responsibility map. |
| Data collection | Generates controlled requests and tracks response, coverage, method and evidence. | Reviewed metric and narrative source pack. |
| Drafting | Carries approved value, limitation, method and evidence into the relevant section without reinterpreting the source. | Traceable disclosure wording. |
| Content Index | Uses approved disclosure identity, location, Sector reference and omission decision. | Accurate, requirement-level references. |
| Assurance | Provides walkthrough route from disclosure to criteria, source, calculation, control and issue resolution. | Efficient evidence retrieval and finding remediation. |
| Board approval | Summarises unresolved high-risk rows, material judgements, restatements and limitations. | Focused governance decision pack. |
| Publication | Tests the final report/website reference and locks the approved version. | Released report and accessible Content Index. |
| Next year | Rolls forward recurring rows, definitions and sources while highlighting changed requirements and boundaries. | Repeatable reporting cycle and change log. |
In practice
10. Example source-register rows
| Row ID / requirement | Scope and source | Method / evidence — Review and issue — Publication output |
|---|---|---|
| G2-2-2-C · consolidation approach | Parent and all sustainability-reporting entities; legal-entity census; financial consolidation list; acquisition/disposal log. | Group boundary memo; minority-interest treatment; reporting manual; CFO and sustainability-owner approval. — Technical review complete; issue G-14 open for a non-controlled JV boundary note. — Basis of reporting section; GRI Content Index 2-2, page/anchor to be tested after design. |
| ENE-103-2-B-I · purchased renewable/non-renewable electricity | All controlled sites; utility invoices, meters, supplier fuel mix and contractual-instrument register. | MWh reconciliation; attribute coverage; residual portion; factor and certificate evidence; local reviewer sign-off. — Two sites missing retirement evidence; Level 2 issue; market-based claim blocked pending resolution. — Energy table plus methodology note; Content Index location provisional. |
| BIO-101-2-C · offset information | Each biodiversity offset associated with sites having the most significant impacts. | Offset goals, geography, good-practice principles, certification/verification, residual-impact assessment and stakeholder trade-offs. — Ecology reviewer approved three offsets; one payment classified as compensation, not offset. — Biodiversity management section and site annex; final page references pending. |
11. Hypothetical implementation case
The reporting lead creates a source register with one row per meaningful information requirement and assigns stable IDs. The GRI 2, GRI 3 and material-topic rows are linked to the entity census and governance evidence. Topic metrics are linked to system extracts and calculation files. Narrative requirements are linked to approved policies, process evidence, minutes or management records rather than to a draft paragraph alone.
Each subsidiary receives a filtered request pack. A central methodology note defines employee categories, energy conversion, incident classification and acquisitions. The issue log identifies three recurring problems: local definitions that do not match the group manual, evidence stored only in email, and website disclosures whose URLs are not final. The group resolves definitions before consolidation, moves evidence to controlled folders, and delays the final Content Index test until the published site is available. At year end, the approved register is locked and copied forward with changed rows flagged for the next cycle.
In practice
12. Weak versus stronger setup
| Weak setup | Stronger setup | Control improvement |
|---|---|---|
| One row per disclosure number. | Rows at the level needed to identify separate data, narrative, methodology and omission requirements. | Requirement-level gaps become visible. |
| An email asks the owner for a value. | A filtered request defines scope, period, unit, definitions, evidence, checks and due date using the register row ID. | The response is operationally executable and traceable. |
| The evidence link points to the final report draft. | The row links to original source evidence, calculation, review and separately to approved disclosure wording. | The disclosure can be verified rather than circularly self-supported. |
| Status is '80% complete'. | Status distinguishes submitted, reviewed, issue open, data approved, draft approved and published reference tested. | Management sees the actual publication risk. |
| The Content Index is assembled after design. | Approved locations and omission decisions flow from the register, followed by a final release-version test. | Page and link errors are reduced. |
In practice
13. Common mistakes
| MISTAKE 1 | Using the GRI disclosure number as the only request specification. |
|---|---|
| Why it happens | The reporting team assumes the data owner will interpret the Standard and group boundary correctly. |
| Why it matters | Responses are incomplete, inconsistent or shaped to local definitions rather than the disclosure requirement. |
| Correction | Translate the requirement into operational scope, definitions, breakdowns, evidence and checks while preserving the exact source anchor. |
| Evidence of correction | Approved data-request row and recipient-specific request pack. |
In practice
| MISTAKE 2 | Linking to copied values instead of original sources. |
|---|---|
| Why it happens | Consolidation files are easier to access than source systems or evidence folders. |
| Why it matters | A reviewer cannot establish provenance, extraction date or whether a later correction was reflected. |
| Correction | Retain the consolidation file but also identify the original source, version, owner and extraction evidence. |
| Evidence of correction | Source path, extraction metadata and reconciliation result in the register. |
In practice
| MISTAKE 3 | Allowing the preparer to close their own material issue. |
|---|---|
| Why it happens | Project timetables blur the separation between data preparation and technical approval. |
| Why it matters | Unsupported estimates, scope changes or narrative claims bypass independent challenge. |
| Correction | Define status permissions and require a named reviewer or approver for data, methodology, omission and drafting decisions. |
| Evidence of correction | Reviewer identity, date, finding, resolution and approval evidence. |
In practice
| MISTAKE 4 | Treating the final Content Index as the source register. |
|---|---|
| Why it happens | Both contain disclosure identifiers and locations, so teams combine them into one public table. |
| Why it matters | Internal source, method, evidence, issue and review information is lost, while the public index becomes unreadable. |
| Correction | Maintain a detailed internal register and publish only the GRI-required Content Index information plus carefully selected useful additions. |
| Evidence of correction | Controlled internal register and separately approved public Content Index export. |
In practice
14. Myth versus reality
| MYTH | GRI requires every reporting team to maintain a source register in a prescribed |
|---|---|
| REALITY | GRI does not prescribe this internal template. A source register is a practical control that helps the organisation apply Accuracy, Completeness, Comparability and Verifiability and produce a reliable Content Index. |
| Why the confusion arises | Internal assurance and software tools often present their templates as if they were part of the Standard itself. |
| Practical consequence | The organisation can tailor the register to its systems and risks, but should preserve requirement-level traceability, ownership, evidence, review and publication location. |
In practice
17. Related standards and indicator mapping
| Framework / disclosure | Relationship | Use in this article |
|---|---|---|
| GRI 1: Foundation 2021 - reporting principles | Direct | Accuracy, Comparability, Completeness and Verifiability provide the quality basis for the register. |
| GRI 1: Foundation 2021 - Requirement 6 | Direct | Tracks permitted reasons for omission and the required explanation at requirement level. |
| GRI 1: Foundation 2021 - Requirement 7 | Direct | Supports the public GRI Content Index and tested disclosure locations. |
| GRI 2: General Disclosures 2021 - 2-2 and 2-4 | Supporting | Entity boundary, consolidation approach, acquisitions/disposals and restatements. |
| GRI 2: General Disclosures 2021 - 2-5 | Supporting | Assurance scope and references can be linked to the relevant register rows. |
| GRI 3: Material Topics 2021 | Supporting | Links materiality process evidence, material topics and topic-management disclosures to their sources. |
| Applicable GRI Topic and Sector Standards | Implementation | Populate the requirement inventory, topic-specific methods, data and Sector references. |
A GRI data request should state the request and disclosure ID, the information needed, scope, population, period, unit, definitions, disaggregation, methodology or estimate treatment, evidence and reconciliation expectations, owner, reviewer, due date and escalation route. Generate it from the source-register row, leaving omission and Content Index judgements with the reporting and technical review team.
The source register is not the GRI Content Index. It is an internal control linking requirement-level data to owners, boundaries, methods, evidence, review, issues and final publication locations; the Content Index is GRI’s public locator and reporting-status record, which the source register helps the team produce.
Questions
Questions people ask
Does GRI require a source register?
A practical GRI source register is a controlled row-level link between a disclosure requirement and the evidence used to report it. Each row should identify the exact requirement, owner, reporting boundary, source system, period, unit, methodology, evidence, reviewer, issue status and final publication location. GRI does not prescribe this register as a template, but the control directly supports Accuracy, Verifiability, the GRI Content Index, external assurance and year-on-year repeatability.
Should the register use one row per disclosure?
A practical GRI source register is a controlled row-level link between a disclosure requirement and the evidence used to report it. Each row should identify the exact requirement, owner, reporting boundary, source system, period, unit, methodology, evidence, reviewer, issue status and final publication location.
What should a GRI data request contain?
A GRI data request should state the request and disclosure ID, the information needed, scope, population, period, unit, definitions, disaggregation, methodology or estimate treatment, evidence and reconciliation expectations, owner, reviewer, due date and escalation route. Generate it from the source-register row, leaving omission and Content Index judgements with the reporting and technical review team.
Is the source register the same as the GRI Content Index?
The source register is not the GRI Content Index. It is an internal control linking requirement-level data to owners, boundaries, methods, evidence, review, issues and final publication locations; the Content Index is GRI’s public locator and reporting-status record, which the source register helps the team produce.
How does the register support assurance?
Each row should identify the exact requirement, owner, reporting boundary, source system, period, unit, methodology, evidence, reviewer, issue status and final publication location. GRI does not prescribe this register as a template, but the control directly supports Accuracy, Verifiability, the GRI Content Index, external assurance and year-on-year repeatability.
Sources
Primary sources
Take it with you
The checklists as a working spreadsheet
Every checklist and table on this page, with empty status, owner and evidence columns for your team to fill in and keep.
✓ LRA AI Assistant · Human-in-the-loop
Ask about this guide
It answers from this page, and reaches into the linked disclosure cards when your question is about the standard itself. Your first two answers are free without signing in.
Go deeper · GRI
GRI Standards Certified Training
A full reporting cycle with a mentor: impact inventory, threshold, Topic Standard selection, Content Index and assurance readiness.
Available as Guided Flex, Live Cohort, 1:1 Expert Mentorship or Corporate Programme.
