ESG stands for Environmental, Social and Governance — the criteria used to assess the sustainable and responsible practices of an organisation or its suppliers. Under CSRD, large companies must collect Scope 3 ESG data from their supply chain. Third-party ESG assessment is now directly integrated into TPRM programmes as a regulatory compliance and reputational risk requirement.