ESG rating process requires providers to maintain resources, disclose and share draft reports, and continuously monitor ratings. ESG rating providers must maintain appropriate resources, written policies and internal controls, disclose assigned ratings and changes publicly and to exchanges, use transparent methodologies based on public or defined alternative information, share draft reports with rated issuers with an opportunity for appeal, and continuously monitor ratings. Under a subscriber-pays model, providers must simultaneously share reports with subscribers and issuers, permit issuer comments to be included or addressed, publish sharing policies, and offer a clarification facility.