Designing an impact framework that survives audit

In the past, claiming social or environmental 'impact' was often a marketing exercise, full of glossy photos and feel-good stories. But as we move into a world of mandatory and assured ESG disclosure, those feel-good stories will have to stand up to the same level of scrutiny as financial numbers.

Whether you're a social enterprise, a corporate foundation, or a company reporting on the outcomes of your community investment, you need a system to measure and manage your impact. You need an impact framework. More importantly, you need one that will survive an audit. Here's how to build one.

Start with your 'why': The Theory of Change

Before you even think about metrics or data, you need to articulate your strategy for creating change. The best way to do this is with a Theory of Change. This is a simple, logical narrative that explains how you believe your actions will lead to a desired long-term goal.

A good Theory of Change answers these questions:

What is the specific social or environmental problem we are trying to solve?
What is our ultimate goal, or long-term impact?
What are the steps (or preconditions) required to get there?
What assumptions are we making about how this change will happen?

This isn't just a diagram for your annual report. It's the strategic backbone of your program. It forces you to think critically about cause and effect and provides the a clear story you can communicate to stakeholders, from your board to your funders.

From theory to practice: The Logic Model

If the Theory of Change is your strategic map, the Logic Model is your detailed itinerary. It translates your narrative into a structured framework that connects your resources to your results. A standard logic model includes:

Inputs: The resources you invest (e.g., funding, staff time, equipment).
Activities: The actions you take (e.g., run workshops, develop software, clean a riverbank).
Outputs: The direct, tangible results of your activities (e.g., 100 people trained, 1 app downloaded, 10 tonnes of rubbish removed). These are easy to count but don't prove impact.
Outcomes: The changes that result from your activities. These are often broken into short-term (e.g., increased knowledge), medium-term (e.g., changed behaviour), and long-term (e.g., improved employment status, healthier ecosystem).
Impact: The ultimate, high-level change you contributed to, as defined in your Theory of Change.

This structure is what an auditor will look for. It shows a clear, logical link from what you did to the change you claim to have made.

Choosing metrics that matter (and can be measured)

Once you have your logic model, you can select metrics for each stage. The key is to move beyond counting outputs and start measuring outcomes. This is the difference between reporting activity and reporting impact.

Your metrics should be SMART:

Specific: Clear and unambiguous.
Measurable: Quantifiable or at least demonstrably observable.
Achievable: Realistic to collect with the resources you have.
Relevant: Directly linked to your Theory of Change.
Time-bound: Trackable over a defined period.

For example, instead of just tracking '# of people attending our financial literacy workshop' (an output), a better outcome metric would be '% of attendees who created a budget and started saving within 3 months of the workshop'.

Building an auditable data trail

A framework is useless without credible data. For every metric, you need to define your data collection strategy. This is where many organisations fall down when faced with an audit. You must be able to answer:

What data will be collected for this metric?
How will it be collected (e.g., survey, interview, database records, government stats)?
Who is responsible for collecting and verifying it?
When will it be collected?
Where will it be stored securely and consistently?

You don't need a million-dollar software system from day one. A well-organised set of spreadsheets with clear version control can be perfectly auditable. The key is process, documentation, and consistency.

Preparing for assurance

The new Australian Sustainability Reporting Standards (ASRS) will require limited assurance on climate disclosures from day one, and this requirement will likely expand to other ESG topics over time. Limited assurance involves the auditor checking whether your disclosed information is plausible and that you have reasonable processes in place.

Having a well-documented impact framework with a clear data trail is your number one defence. It shows the auditor you have a systematic, evidence-based approach to managing and measuring your performance. It demonstrates that your impact claims are not just plucked from thin air.

The bottom line

Building a robust impact framework isn't about creating more bureaucracy. It's about shifting from guesswork to evidence. It's a critical management tool that helps you learn what's working, improve your programs, and communicate your value with credibility. In an era of increasing scrutiny, proving your impact is just as important as having it.