Infosec Institute sustainability score: 27/100

No formal Scope 1 or Scope 2 emissions data found in any public source — no sustainability report from Infosec Institute as a standalone entity or within Cengage Group's published communications, and no entry in US EPA FLIGHT or any equivalent mandatory registry. However, Infosec Institute is a small digital-services business operating out of small office locations in Wisconsin with no owned manufacturing or heavy infrastructure. Estimated total operational emissions are well under 1,000 tonnes CO₂e, making the absence of formal reporting considerably less consequential than for a large emitter. Score of 2 reflects: no formal data, but estimated footprint is negligible at this scale.

No Scope 3 data or supply chain emissions assessment found for Infosec Institute or its parent Cengage Group. The company's supply chain is inherently limited: it is a software and e-learning business whose primary inputs are cloud hosting, employee labour, and marketing services. There is no manufacturing, physical product distribution, or complex global sourcing. The absence of formal Scope 3 data is less concerning here than for a goods-producing company, but no evidence of even informal supply chain awareness (e.g., cloud provider emissions tracking, business travel monitoring) was found. Score of 2 reflects a short, low-impact supply chain with no formal or informal data disclosed.

No trajectory data of any kind is available. Infosec Institute has published no emissions figures for any year, making year-on-year comparison impossible. The company was acquired by Cengage Group in early 2022 and has since grown its platform, suggesting operational activity has expanded. While the underlying emissions from a small digital-services business are likely modest, the absence of any baseline or trend data — combined with a company that is actively growing its client base and digital infrastructure — means a trajectory cannot be established. Score of 1 reflects no data and a mid-sized company with moderate digital footprint and evidence of growth.

No renewable energy strategy, green energy tariff, or energy procurement policy found for Infosec Institute. No RE100 membership, no PPA, no on-site generation. The company operates small office spaces and relies on cloud infrastructure for its training platform delivery. Cloud providers (typically AWS, Azure, or Google Cloud) are increasingly powered by renewables, but Infosec Institute publishes no data on which cloud provider it uses or that provider's renewable energy performance, so no credit can be given for assumed upstream renewable consumption. Score of 2 reflects minimal energy consumer (small offices, no owned data centres) with no formal renewable energy strategy evidenced.

No nature or biodiversity policy, TNFD alignment, deforestation commitment, or nature risk assessment found for Infosec Institute. As a digital-services and education company, the company has inherently low direct nature impact: no land use, no deforestation risk, no significant physical resource extraction in its core operations. Its nature footprint is primarily indirect via hardware procurement (devices used by learners) and office facilities. There is no evidence of awareness programmes or procurement policies addressing e-waste or hardware sourcing. Score of 3 reflects genuinely negligible direct nature impact from a software education company, without any formal awareness or policy.

No resource use, waste management, or circular economy policy found for Infosec Institute. No data on office waste recycling, hardware lifecycle management, e-waste policy, or supplier sustainability requirements. As a predominantly digital business, material consumption is limited to office supplies, IT hardware, and marketing materials. The absence of any documented waste or resource policy — even a basic recycling or e-waste disposal commitment — means only a minimal score is appropriate. Score of 2 reflects basic expected recycling at a small office level, but no formal strategy or public commitment evidenced.

No water consumption data, water reduction targets, or water stewardship programme found for Infosec Institute. As a digital-services business operating small offices, the company's water footprint is negligible: limited to sanitation and drinking water in office facilities, with no industrial processes, cooling towers, or water-intensive manufacturing. This is a genuinely low-water-impact business by nature of its sector. Score of 4 reflects the inherently negligible water impact of a small software education company, consistent with the rubric's allowance for companies with genuinely minimal water exposure.

No environmental targets of any kind found — no emissions reduction goals, no net-zero pledge, no SBTi commitment (not listed on SBTi target dashboard), no renewable energy target, and no sustainability roadmap. Neither Infosec Institute nor its parent Cengage Group has published any climate or environmental target in any publicly available document as of the research date. Score of 0 reflects total absence of targets and no reduction strategy evidenced.

No sustainability report, ESG disclosure, TCFD/CSRD reporting, dedicated sustainability role, or board-level climate governance found for Infosec Institute. Cengage Group's public CSR communications focus entirely on social and DEI matters, with no environmental dimension. No sustainability-linked executive compensation, no public impact reporting, and no mission-lock structure (not a B Corp or equivalent). Score of 1 reflects a company with no public environmental information and no formal sustainability governance structure, but one that is small enough that the absence of a sustainability department is less concerning than it would be for a large company.

No environmental controversies, regulatory fines, greenwashing rulings, or credible NGO criticism found for Infosec Institute across any source searched. No evidence of lobbying against climate policy, no membership in climate-obstructive trade associations, and no structural enablement of fossil-sector activity — the company's core business is cybersecurity education with no material connection to fossil fuel infrastructure. InfluenceMap has no profile on Infosec Institute. No deductions apply. Score of 8 (starting point) with no deductions reflects a clean record with no documented environmental controversy or harmful lobbying.