Regulatory rule-making around disclosure could push organizations to move their ESG activities under the oversight of risk and compliance teams.