Ticking ESG boxes; cloud storage and IT services are the key to compliance, says Espria

Person typing on a laptop with digital security and compliance icons overlayed, illustrating the integration of cybersecurity measures and regulatory compliance to strengthen organisational resilience.

With global commitments such as Net Zero becoming more of a priority in the next decade, business leaders must address whether their organisations can tick all the necessary ESG boxes in terms of their IT. Identifying particular facets of sustainability is key to this, as this may vary depending on individual businesses and needs. Thus, a wider overview of industry practices is required – which can be found when businesses look to their cloud storage and managed services provider of choice. Once ESG targets have been set, meeting them and remaining within levels of compliance can be a real challenge when it comes to technology. If you don’t have visibility every step of the way, how can you ensure those ESG boxes remain ticked, and your technology is up to scratch? Businesses need solutions that not only solve their IT demands, but also provide a level of peace of mind that their operations are compliant, environmentally friendly, and future-proof for years to come as we move into a greener world. Ritchie Puckey, Head of Compliance at Espria, believes that when it comes to ESG compliance, IT service providers have an obligation to lead the conversation in terms of upholding sustainable initiatives and ensuring client accountability. “From an ESG perspective, all organisations are now looking towards meeting the minimum standards of expectations. Services must be provided ethically and sustainably and evidenced as such. “Everybody wants to do the right thing for the environment, and most importantly, businesses need to be perceived as doing the right thing. However, ensuring every section of the business is compliant with ESG regulations can be drawn out. For MSPs, compliance is a massive tick box to reassure and provide that sort of galvanisation to the end customer -that they are making sustainable and ethical decisions at every stage. “Compliance extends to all industries. For local government, as an example, all associations must evidence the fact they are purchasing at least 20% of their technology from a sustainable and ethical supply source, to adhere to minimum standards of expectation by 2025. Puckey believes that MSPs are in a prime position to uphold these regulations as they can unify multiple different services under one banner. “Rather than focusing on individual products or talking about the hardware, the software or the services separately, MSPs can focus on combining them all with how they can provide offerings. Providers will scrutinise the sustainability and ethics within their client operations, and as with cybersecurity, implementing full zero trust methodology, they can offer a similar process for productivity and sustainability initiatives. “For smaller organisations, reporting the environmental impact of their supply chain and their customer base is a necessity. Implementing and using tools to aid sustainability, security and productivity reporting is important, and can all be provided by their MSP.” Puckey further asserts that cloud storage is a key part of meeting ESG compliance, rather than something to be concerned about regarding energy consumption. “With its infrastructure designed to scale, a cloud-first approach to delivering solutions is the way to go. In a traditional model, you would have a server running in your office at 20% capacity, using power 24/7/365 and pushing out heat. Data centres are specifically designed to run and cater to multiple users and environments more efficiently, and when looking at power consumption, it’s far more efficient than many individual businesses running their own servers.” “Service providers are investing heavily in sustainable power and renewables to power these data centres. There is even talk now of using the batteries within the data centres to feed back into the grid. Cloud has a lower reliance on hardware deployment, and therefore requires less on-site maintenance support; thus, MSPs can demonstrate to customers reduced energy use, decreased GHGs (Greenhouse gases), reduced technology waste, data centre efficiency and a shift to renewal energy resources all from a single source.” Receiving a Judges’ Commendation in CRN’s Sustainability in Tech Awards, Espria understands its role in and the importance of sustainability to help meet global commitments such as Net Zero, whilst also providing a catalyst for growth and risk reduction. This informs how core business processes, the development of a common culture and the integration of ESG into governance can be manifested. By offering Sustainable Assessments and implementing analytical tools and reporting metrics, Espria empowers its customers to make better decisions, automate processes and provide more data-driven sustainable solutions. Through digital transformation, Espria improves the sustainability of their clients’ businesses in a measurable and accountable way. To read more about our ESG, please click here. 

What’s in this article

    You may be interested in

    The Hidden Costs of Printing: How Managed Print Services Reduce Business Waste

    Introduction For many organisations, printing is viewed as a routine operational expense. Printers are purchased, toner is replaced when needed, and documents continue to flow through the business without much scrutiny. However, the true cost of printing extends far beyond paper and ink. Unmanaged print environments often create hidden expenses through inefficient device usage, excessive energy consumption, IT support demands, security risks, and employee downtime. These costs can accumulate significantly over time, impacting productivity and profitability. This is particularly relevant as businesses seek to optimise operations, reduce waste, and improve sustainability while controlling expenditure. Whether…

    Read the article

    Can Your Business Actually Recover? The Operational Resilience Question Most SMEs Cannot Answer

    Operational resilience is not a technology problem. It is a business problem. And until boards and leadership teams own it, no amount of IT investment will be enough. The Gap Between Confidence and Reality Most organisations believe they are more resilient than they are. The backups are running. The antivirus is licensed. The IT team knows what they are doing. That confidence, in our experience, rarely survives first contact with an actual incident. The question is not whether your systems are protected. The question is whether your business can keep delivering its most important services…

    Read the article

    Integration of Sophos and Microsoft for enhanced threat intelligence

    Why the Sophos–Microsoft Partnership Matters – Especially for Education, Financial Services and Legal Organisations

    For most organisations today, Microsoft is the foundation of how you operate and on top of this there is also a requirement for regulatory compliance and operational resilience. Whether it’s Microsoft 365 for collaboration, Teams for communication, or Azure for infrastructure, these platforms sit at the heart of day-to-day business. But for sectors like Education, Financial Services, and Legal, that reliance comes with heightened risk, and responsibility. These organisations are not only prime targets for cyber attackers, they are also subject to strict regulatory, data protection and governance obligations. That’s why the partnership between Sophos…

    Read the article

    Checklist marked passed next to cracked cyber shield over network, illustrating compliance vs cyber resilience.

    Why Cyber Resilience Can’t Be Audited Once a Year: Lessons from the UK Cyber Action Plan

    Moving from box‑ticking compliance to real‑world cyber readiness  Written by Richard Puckey  Cyber security has a confidence problem  For years, many organisations have taken comfort in annual cyber audits, certifications and compliance checklists. Pass the audit, tick the box and move on. On paper, everything looks secure.  The problem? Cyber threats don’t operate on an annual cycle.  The UK’s Cyber Action Plan is a clear signal that this approach is no longer enough. It challenges businesses to rethink cyber security not as a periodic compliance exercise, but as a living, breathing capability and culture that must stand up…

    Read the article

    A person sitting in a comfortable, modern living space while speaking on the phone, representing a tenant reaching out to a housing association’s customer service team. The environment conveys everyday life and the importance of accessible, responsive communication.

    How Housing Associations Can Transform Tenant Experience with Modern OmniChannel CX

    Written by Russell Hallam, CX Consultant at Espria In today’s housing landscape, tenants expect fast, seamless and personal interactions, no matter which channel they use. Phone, digital, web chat, video, email, messaging: it all needs to feel connected, consistent and effortless. But for many teams, the reality is different. Disconnected systems slow down responses, important information is buried across platforms and frontline staff shoulder the burden of manual processes.  At Espria, we’ve helped housing associations modernise their customer experience with cloud-enabled omnichannel solutions designed for efficiency, visibility and compliance. Here’s what that looks like in action. 1. RealTime CRM Integration: Context at the Exact Moment You Need It  When a tenant calls,…

    Read the article

    Silhouette pointing to a digital padlock, indicating cyber security

    Elevating Human Risk Management: A Boardroom Must for Cyber Resilience in 2026

    Written by Richard Puckey As organisations move through 2026, cybersecurity has firmly established itself as a core business risk. Regulatory scrutiny is increasing, threat actors are more capable than ever and the operational and reputational impact of cyber incidents continues to escalate. In response, businesses have invested heavily in security technology such as advanced detection platforms, zero trust architectures, AI-driven analytics and automated response capabilities. These controls are considered essential and non-negotiable. However, are they sufficient? The reality facing security leaders today is clear, the majority of material cyber incidents still involve a human decision…

    Read the article