Hire an ESG Consultant or Build In-House? A Decision Framework for Vietnamese SMEs (2026)

Quick answer: don't ask "buy or build" at the level of the whole ESG package — ask it at the level of each task group. Some work must, by law and by customer requirement, be done by an accredited third party (verification, emissions assurance) and therefore cannot be done in-house; some work is cheapest and most accurate kept in-house because only insiders can touch the source data; the rest is a grey zone, and the four variables below decide which way you should lean.

Last updated: 10/08/2026.

Quick summary for busy readers

Six points to remember before signing any consulting contract:

• There is no blanket "buy" or "build" answer. The right answer is a task-split table: each task group has its most sensible owner.
• Some work can never be done in-house. Verifying emissions for CBAM, or assuring a sustainability report, is by design done by an independent accredited body — you cannot "verify" yourself.
• Some work should not be outsourced. Collecting electricity bills, fuel logs, HR records and production data — only insiders can do this quickly, correctly and repeatably every year.
• Four variables decide the grey zone: headcount, sector (is it on the mandatory inventory list), whether a customer deadline already exists, and whether you already have an internal owner.
• Sector is the strongest fork. If your facility is on the list attached to Decision 13/2024/QD-TTg, a facility-level GHG inventory is a legal obligation with a deadline, not a choice.
• The balance shifts over time. Year one usually leans toward buying to establish the method; from year two it leans in-house to hold costs and keep the know-how.

Key facts — one verifiable source per line:

• The facility-level GHG inventory obligation applies only to facilities on the list attached to Decision 13/2024/QD-TTg, effective 1 October 2024, replacing Decision 01/2022/QD-TTg.
• Corporate-level emissions inventories follow the GHG Protocol Corporate Standard — which "provides requirements and guidance for companies… preparing a corporate-level GHG emissions inventory".
• SMEs may self-report sustainability information against the voluntary VSME standard recommended by the EU in Recommendation (EU) 2025/1710 of 30 July 2025 — "a voluntary sustainability reporting standard for small and medium-sized undertakings".
• From 1 January 2026 CBAM enters its definitive regime; embedded emissions of imports must be verified by an accredited body under the EU accreditation framework (European Commission — CBAM).
• Reporting under the GRI Standards — the "leading global standards for impact reporting" — is used when a customer or investor asks for a universal framework.
• IFRS S2 Climate-related Disclosures "requires an entity to disclose information about climate-related risks and opportunities" — the framework when investors or financiers are involved.

Why "buy or build" is the wrong question at the wrong level

Direct answer: asking the question at the level of the whole ESG package is wrong from the start — because an ESG package is not one task but a chain of tasks with very different natures. The single word "ESG" bundles three kinds of work: (1) work only insiders can source data for, (2) methodological expertise you can buy, and (3) mandatory-independent work you have no right to do yourself. Answer "outsource everything" and you pay outsiders to collect your own electricity bills; answer "do everything in-house" and you sign off on the part where your signature has no legal standing.

The clearest boundary is verification. Under CBAM, the EU separates the party that calculates emissions from the party that verifies them: verification must be done by a body within the accreditation framework (European Commission — CBAM). The same logic repeats in sustainability reporting: you draft the report, but when a customer demands high confidence the assurance part must come from a third party. In other words, part of ESG is designed not to be internalisable — and that is the first thing to pull out of the budget question.

Only the rest is where you genuinely have a choice. And that choice should not rest on a feeling like "we're small so let's outsource to be safe" or "outsourcing is expensive so let's do it ourselves", but on four quantifiable variables.

It helps to name what sits on the buildable side. Basic disclosure is deliberately within an SME's own reach: the EU's voluntary VSME standard exists precisely so a small supplier can report core sustainability information itself, without a full advisory apparatus. The heavy, buyable side is the method and the independent stamp — designing an inventory that will survive an audit, and the verification a customer's framework demands. Seen this way, the budget question dissolves into a placement question: how much of the buildable side you are ready to own, and how soon you need the buyable side. The four variables below turn that placement from a gut feeling into something you can defend on paper.

Four variables that decide which way you lean

Direct answer: the four variables below — headcount, sector, customer deadline, internal owner — are enough to place your business on the "build ↔ buy" axis for the grey-zone work. No single variable decides it; read all four together.

1. Headcount. Scale is measured not by revenue but by the number of repeating tasks and data sources. Under ~50 employees, ESG data usually fits in a few bills and one timesheet — one part-time owner can manage it, so lean build for collection. Above ~200 employees, multiple sites/shifts/product lines make standardising the method heavy — lean buy for system design, keep operations in-house.

2. Sector — the strongest fork. The concrete question: is your facility on the list attached to Decision 13/2024/QD-TTg? If yes, a facility-level GHG inventory is a legal obligation performed under the guidance of line ministries (Industry & Trade, Transport, Construction, Natural Resources & Environment) — with deadlines, a filing destination, and penalties for getting it wrong. This mandatory, technical work usually needs at least one round of hired expertise to set up the method correctly. If your facility is not on the list, your ESG is voluntary and customer-driven — you may choose a lighter standard such as VSME and do more of it in-house.

3. Whether a customer deadline already exists. This is the time variable. If an EU customer has already sent a questionnaire with a due date (see ESG questionnaires from EU customers), you are schedule-bound — lean buy to purchase speed, because building capability from scratch rarely fits a single ordering cycle. With no hard deadline, you have room to build in-house more cheaply.

4. Whether you already have an internal owner. ESG does not run itself; it needs a focal point, even part-time. If you already have this person and they understand the plant, most collection and tracking should stay in-house, buying only the method. If you have no one yet, short-term outsourcing is reasonable — but treat it as a contract with handover, so next year you are not dependent.

Read the four variables together, not in isolation. They interact rather than add up mechanically. The clearest case for buying is when three buy-signals stack: the facility is on the mandatory list, a customer has already fixed a due date, and no one is assigned yet — you are then bound by law, squeezed by schedule and short of people all at once, so a short hire with a handover is the least risky path. The clearest case for building is the mirror image: off the list, no hard deadline, and an existing officer who understands operations — there, a full-package hire only pays outsiders for work you can do yourself. Most SMEs sit in the middle, and it is precisely this middle where the task-split table below earns its keep.

Table 1 — The four variables and which way they tip the decision

Variable	Lean BUILD when…	Lean BUY when…
Headcount	Under ~50; few data sources, one part-timer can manage	Over ~200; many sites/shifts/product lines, complex method
Sector (Decision 13/2024 list)	NOT on the list → voluntary ESG, choose a light standard (VSME)	ON the list → mandatory facility inventory, needs a correct method
Customer deadline	No hard deadline; room to build gradually	Due date set; must buy speed to fit the ordering cycle
Internal owner	Already have someone who knows operations and retains know-how	No one yet; hire short-term WITH a handover clause

Which work to keep in-house, which to outsource

Direct answer: split the ESG package into task groups and assign an owner to each, and you'll find most of the volume belongs in-house, the expertise belongs to consultants, and a narrow band of mandatory work belongs to an independent third party. The table below is a starting point; the ratio shifts with the four variables above.

Table 2 — Keep-in-house / outsource split, with reasons

Task group	Sensible owner	Why
Collecting source data (electricity bills, fuel logs, HR records, output)	In-house	Only insiders can touch the data; it repeats yearly, so outsourcing is both costly and slow
Choosing the framework & setting materiality	In-house + short hire	The decision is the company's, but a session of advice avoids picking the wrong framework (VSME vs GRI vs IFRS S2)
Setting up the inventory method (boundaries, emission factors, templates)	Buy (with handover)	Technical, per the GHG Protocol; getting it wrong once corrupts the whole multi-year series — buy it right from the start
Running collection & periodic calculation	In-house	Once the method exists, this is repetitive; keep it in-house to cut cost and retain know-how
Writing the sustainability report	In-house drafts, hired editing	The content is yours; a consultant helps present it to standard and avoid wording that reads as greenwashing
Independent verification / assurance	Accredited third party	Independent by design — e.g. verifying CBAM emissions (EC — CBAM); you have NO right to do it yourself
Training the team & capacity-building	One-off hire	A course has a start and end; afterwards the capability stays in your people

Read this table vertically and a rule appears: the bulk of the volume sits in-house, the expertise value sits with the consultant, and the legal validity sits with the third party. Outsourcing group 1 (collection) is waste; doing group six (verification) yourself is void.

An anti-greenwashing safeguard sits inside this very split. Every environmental claim in the report — "cut emissions by X%", "green product", "carbon neutral" — must carry a scope and a source: reduced against which base year, counted under which Scope, emission factors taken from where. This is why report-writing should be drafted in-house but edited on hire: the content is yours because only you hold the data, but an outside eye familiar with the standards will block assertions that outrun the data — the kind that gets a file rejected by an EU customer or flagged by a regulator. The real value of a consultant here is not to "write it for you" but to stop you overstating, forcing every environmental sentence to trace back to a number that actually exists.

Three operating models — and each one's own risk

Direct answer: combine the decisions above and you land in one of three models — fully in-house, hybrid, or fully outsourced — each with a characteristic risk to guard against in advance.

Table 3 — Three ESG operating models for SMEs

Model	Fits when	Main risk to guard against
Fully in-house	Not on the mandatory list; already have an owner; no hard deadline	Wrong framework/factors → report rejected by customer; greenwashing risk from having no reviewer
Hybrid	Most manufacturing SMEs: buy method + training, keep operations in-house	Blurred responsibility → work falls into the "gap" between the two; fix with a role-split table in the contract
Fully outsourced	Tight deadline; no owner yet; need fast results for one cycle	Vendor dependence, know-how doesn't stay → you re-hire from scratch next year; a handover clause is mandatory

For most Vietnamese manufacturing SMEs, the hybrid model is the balance point: buy the hard part (method, training, verification) and keep the repetitive part (collection, tracking). The condition for hybrid not to break is a clear role-split in the contract — who holds the data, who owns the numbers, and what the handover contains.

A concrete example shows the three variables pulling in three directions: a 120-employee metalworking shop, not on the mandatory list, has just received a questionnaire from a European customer with a three-month deadline, and has only appointed a deputy director as part-time ESG owner. "Off the list" pulls toward building, "has a deadline" pulls toward buying, "just got an owner" pulls back toward building — so hybrid is the balanced answer: hire a consultant to stand up the inventory method quickly and bundle a training course for that deputy director within the three months, while the in-house team collects electricity bills and machine logs from day one to learn the routine. When the cycle ends, the capability stays in the house; next year the shop runs the repetitive part itself and calls the consultant only when the customer changes what it asks for.

How the balance shifts over time

Direct answer: the buy/build ratio is not fixed — year one usually leans toward buying to build the foundation, later years lean in-house to hold costs and keep the know-how. This is why every good consulting contract must include a handover, not just a "deliver the report" clause.

Year one. You have no method, no templates, no one experienced yet. Buying to shorten the learning curve is reasonable — but buy the templates, processes and a training course along with it, so those stay in the company.

From year two. Once the system runs, most of the work is repetition: collecting the same data, running the same formulas, updating the same report. Keep this in-house to cut cost; retain the consultant relationship only for big changes (a new framework, a new customer, expanding into Scope 3) and the verifier only when you need an independent stamp.

The thing to watch when moving from buying to building is scope. Year one mostly stops at Scope 1 and Scope 2 — direct emissions from fuel combustion and purchased electricity — which sit neatly inside internal data, so an in-house team can take them over. When customers start asking about Scope 3 (emissions along the supply chain), the difficulty jumps a level because the data lies beyond your reach, with your suppliers and downstream customers. That is usually the right moment to call the consultant back for a controlled scope expansion, rather than groping in the dark and producing numbers that will not hold up under challenge.

If you're unsure where to start, read two foundation pieces first: what is ESG for SMEs for the framework, and GHG inventory Scope 1-2-3 for the heaviest technical part — which is precisely the part most worth buying in year one.

So whom to hire — and what to ask before signing

Direct answer: choose a partner not by a polished deck but by whether they split the three task groups above correctly — and whether they are willing to hand over so you become self-sufficient. A good consultant will actively advise you to keep collection in-house, rather than quoting a full package for work you can do more cheaply yourself.

Four questions to ask before signing: (1) What does the handover include — just the report, or also templates, processes, emission factors and training? (2) Who is responsible for the numbers if a customer or auditor challenges them? (3) Are you independent of the verification step, or do you both prepare and "self-verify"? (4) After the contract, how far can my in-house team run on its own?

A few signs should make you stop and probe: a partner quoting a full package without carving out the parts you can do yourself; promising a "certificate" or "verification" they issue themselves while also being the party that prepared the numbers — exactly what CBAM forbids by separating the calculator from the verifier; or delivering a single report file with no templates, processes or factors for you to reproduce it next year. A good partner, by contrast, will proactively tell you which parts to keep, and define the handover as a concrete list of artefacts rather than a promise. Choosing the right person here saves you not only this year's cost but also years of dependence afterwards.

GROW accompanies SMEs along exactly this task-split logic through its Green Transition Advisory pillar: building the inventory method, training your in-house team to run it from year two, and pointing you to an independent verifier only when a framework such as CBAM requires an outside stamp. Book a free consultation to map the task split for your own size and sector.

The right question is not "buy or build" but "who should do this task" — and the answer is almost always: keep the data in-house, buy the method, and let an independent third party handle verification.