The threat
From FY2025, CSRD Wave 2 filers must report Scope 1 methane emissions at asset granularity under ESRS E1. The EU Methane Regulation, in force since August 2024, adds mandatory quantification, leak detection, and repair timelines for upstream oil and gas. Both demand limited assurance in year one. Reasonable assurance follows.
The threat is being unable to defend the number you publish.
Methane is harder to measure than CO₂. Fugitive emissions from compressor seals, valve glands, flare pilots, and storage tanks are intermittent. Many operators still rely on emission factors from API or EPA databases, multiplied by throughput or equipment counts. That works for a voluntary disclosure. It does not survive an assurance engagement when the auditor asks for source-level evidence and finds estimation layered on estimation.
Norsk Hydro restated its 2018 Scope 1 and 2 emissions by 15% in 2020 after discovering calculation errors in purchased electricity and process emissions. Methane has more failure modes. A CFO signing a CSRD report with a qualified opinion on methane faces enforcement from national competent authorities, investor questions, and the operational reality that you cannot manage what you cannot measure.
Risks it creates for the enterprise
The first risk is a qualified assurance opinion. If the assurance provider concludes that methane data is not fairly stated, the opinion goes into the sustainability statement. That statement is part of the management report under CSRD, filed with the commercial register, machine-readable, public. A qualification is a market signal that your environmental data is unreliable.
The second is regulatory enforcement. CSRD gives member states powers to impose penalties for non-compliance. BNetzA and other national authorities are building enforcement teams. A qualified opinion or material restatement triggers scrutiny.
The third is operational. If you cannot defend the number, you cannot set a credible reduction target. Investors and counterparties now expect methane intensity metrics. If your baseline is soft, your decarbonisation narrative is soft.
The fourth is reputational. Methane has become a proxy for operational discipline. A large upward restatement signals weak asset integrity and HSE governance. So does a pattern of estimation rather than measurement.
Likelihood-reducing controls
The strongest control is source-level measurement. Continuous monitoring on high-emitting equipment removes reliance on factors. Compressors, dehydration units, and storage tanks are the priority. The Oil and Gas Methane Partnership 2.0 framework, backed by UNEP and the European Commission, defines a five-tier measurement hierarchy. Tier 4 and 5 methods use direct measurement or advanced reconciliation. Operators who align with OGMP 2.0 Gold Standard have a defensible methodology and a public benchmark.
The second control is vendor data audits. If you operate joint ventures or rely on third-party midstream processors, their methane data feeds your Scope 1 total. Audit their measurement protocols annually. Contractually require alignment with your reporting standard. Do not accept black-box estimates.
The third is asset-level data governance. Every emission source needs an owner, a measurement method, a frequency, and a control test. That metadata must be version-controlled. When the assurance provider samples an asset, you need to show the calculation, the input data, the person responsible, and the last verification date.
The fourth is early assurance engagement. Bring the assurance provider in during Q2 of the reporting year. Let them review methodology before you close the books. A late-stage qualification is harder to fix than a mid-year control gap.
Impact-reducing mitigations
When measurement gaps surface during assurance, disclose the variance. ESRS E1 allows narrative explanation of estimation uncertainty. A footnote that says "compressor fugitives at Asset X estimated using EPA factors; direct measurement planned Q3 2026" is better than a silent number that later breaks.
Build a restatement playbook. Define the threshold for materiality, the approval chain, the disclosure timing, and the investor communication plan. If you discover a 10% error in methane after filing, you need to know within 48 hours whether you restate, how you amend the report, and what you tell the market.
Maintain methodology documentation that an auditor can read. A structured register that maps every asset to a calculation method, every method to a standard, every standard to a control test. If the method changes mid-year, version it.
Run a pre-close variance review. Compare this year's methane intensity to last year's, asset by asset. A 30% jump at one site is either real or wrong. Find out which before the auditor does.
---
CSRD and the Methane Regulation have turned methane from a voluntary metric into an audited liability. The CFO's job is to ensure the number in the sustainability statement can be defended in an assurance engagement and, if necessary, in front of a regulator. That requires measurement, governance, and a plan for when the data breaks.