Why private companies need a plan for ESG reporting, assurance