What is CSRD? Everything You Need to Know

CSRD: Corporate Sustainability Reporting Directive — Definition & Overview

The Corporate Sustainability Reporting Directive (CSRD), formally known as EU Directive 2022/2464, is a landmark European Union regulation that fundamentally transforms how large companies must report on their environmental, social, and governance (ESG) performance. Adopted in December 2022 and requiring implementation by member states by December 2023, CSRD affects an estimated 50,000+ companies across Europe.

At its core, CSRD requires large European companies to publicly disclose detailed, standardized, and auditable information about their sustainability impact. Unlike its predecessor, the Non-Financial Reporting Directive (NFRD), which was voluntary for many companies and lacked standardized metrics, CSRD is mandatory for defined company sizes and comes with strict reporting standards called the European Sustainability Reporting Standards (ESRS).

Key Characteristics of CSRD

• Mandatory: Not voluntary. Covered companies must report or face regulatory penalties.
• Standardized: Companies report against 12 ESRS standards with defined disclosure requirements.
• Audit-Ready: Reported information must be verified by external auditors (first limited, then reasonable assurance).
• Phased Implementation: Different company sizes have different compliance deadlines (Wave 1, Wave 2, Wave 3).
• Double Materiality: Companies assess both financial materiality (impact on business) and impact materiality (impact on society/environment).

Who Needs to Comply With CSRD?

Not all companies are in scope for CSRD. The directive applies based on company size, public interest, and location. Understanding whether your company is affected is the critical first step.

CSRD Scope — The Three Waves

CSRD is being rolled out in three waves based on company size and stock market listing status:

Is Your Company In Scope?

Your company is likely in CSRD Wave 2 scope if:

• You have 500+ employees anywhere in the world, OR
• You have €25M+ in total assets (consolidated), OR
• You have €50M+ in net revenue (consolidated)
• AND you are registered in an EU member state OR have a subsidiary/branch in the EU meeting the thresholds

Additionally, even smaller EU-listed companies (Wave 1) must comply if they meet the size thresholds. The directive also applies to non-EU parent companies with EU subsidiaries meeting the thresholds.

Understanding CSRD: The Three Core Components

CSRD compliance involves three interconnected elements: governance and strategy, materiality assessment, and standardized reporting under ESRS.

1. Governance & Strategy — The "Why" of Sustainability

Companies must demonstrate that sustainability is embedded into their business strategy and governance. This includes:

• Board-level oversight of sustainability
• Executive compensation tied to ESG metrics
• Risk management processes addressing sustainability
• Clear sustainability strategy and targets

2. Double Materiality Assessment — The "What" to Report

Double materiality is CSRD's most significant departure from traditional CSR reporting. Companies must assess both:

• Financial Materiality (Outside-In): How ESG factors impact your business financially. Example: How climate change affects your supply chain costs.
• Impact Materiality (Inside-Out): How your business impacts society and the environment. Example: Your company's greenhouse gas emissions impact climate change.

Together, these determine which topics are "material" and require reporting in your sustainability statement.

3. ESRS Standards — The "How" to Report

Standardized disclosures are made against 12 European Sustainability Reporting Standards (ESRS). These replace company-specific reporting with consistent, comparable metrics.

The 12 European Sustainability Reporting Standards (ESRS)

CSRD requires reporting against 12 ESRS standards across governance, environment, and social dimensions:

CSRD Implementation Timeline — Key Deadlines

Understanding CSRD deadlines is critical. The directive is phased, so your timeline depends on your company size and wave assignment:

Wave 1 Timeline (EU-listed + 500+ employees)

• April 2025: First reports due (covering FY 2024)
• 2024-2025: Conduct baseline assessment, build data collection processes
• 2026 onwards: Ongoing compliance and annual reporting

Wave 2 Timeline (Large non-listed + 500+ employees)

• April 2026: First reports due (covering FY 2025)
• 2025-2026: 12-month window to prepare assessment and systems
• 2026 onwards: Ongoing compliance and annual reporting

Wave 3 Timeline (Listed SMEs — delayed)

• 2028 or later: Timeline to be confirmed (includes opt-out possibility)

Double Materiality — The Cornerstone of CSRD

Double materiality is CSRD's defining feature. Unlike traditional CSR reporting where companies chose topics, CSRD requires objective materiality assessment covering both business impact and societal impact.

Financial Materiality (Outside-In)

What sustainability factors impact your business financially? Examples:

• Climate change impacts supply chain costs and availability
• Water scarcity affects manufacturing
• Talent acquisition depends on workplace culture
• Regulatory changes affect compliance costs

Impact Materiality (Inside-Out)

What is your company's impact on the environment and society? Examples:

• Your emissions contribute to climate change
• Your manufacturing discharges pollute water
• Your supply chain practices affect worker wellbeing
• Your products affect consumer health and safety

The Materiality Matrix

Companies assess topics across both dimensions, creating a materiality matrix. Topics in the high-impact quadrants require detailed disclosure in the sustainability statement. This objective approach ensures transparency and comparability across companies.

CSRD vs. Other Frameworks — How Does It Compare?

CSRD isn't the only sustainability reporting framework. Understanding how it compares to others helps contextualize your reporting obligations:

Omnibus I Amendment — What Changed in December 2025?

The Omnibus I amendment (December 2025) made targeted updates to CSRD. Key changes affecting mid-market companies:

Phased Assurance Implementation

First reports (2025) will receive limited assurance only. Reasonable assurance comes later (2028+). This gives companies more time to mature their ESG data systems.

ESRS Refinements

Updates to climate and other standards clarify disclosure requirements and reduce overlap. Most changes support clearer reporting, not additional burden.

Double Materiality Guidance

Clarifications on materiality assessment help companies focus on genuinely material topics rather than exhaustive disclosure on everything.

CSRD for Non-EU Companies — How It Applies Globally

Even if your company isn't EU-based, CSRD may apply:

UK Companies

UK companies with EU subsidiaries, EU revenue >€150M, or EU customers requesting ESG data may fall in CSRD scope. The UK has its own parallel framework (UK SRS) starting 2027.

US & Swiss Companies

If you have EU operations meeting CSRD thresholds, you're in scope. This includes subsidiary reporting obligations and supply chain ESG data collection.

Global Supply Chain Pressure

Even if your company isn't directly in scope, if you supply CSRD-regulated companies, they'll request your ESG data for Scope 3 (supply chain) reporting. This is de facto CSRD pressure affecting global suppliers.

Compliance Penalties & Enforcement — What Happens for Non-Compliance?

CSRD is not optional. Member states have been mandated to enforce compliance:

Financial Penalties

• Fines up to 5% of annual net revenue (serious violations)
• Fines up to 2% of annual net revenue (moderate violations)

Regulatory Consequences

• Stock exchange delisting for non-compliance
• Exclusion from public procurement
• Regulatory investigation and oversight

Reputational Damage

• Non-compliance is public record
• Investor pressure from ESG-focused funds
• Customer/supplier relationship risk
• Media coverage of non-compliance

12-Month Preparation Roadmap for Mid-Market Companies

If your company is in Wave 2 scope (first report April 2026), here's a practical 12-month roadmap:

Month 1-2: Assessment & Planning

• Confirm CSRD scope and reporting wave
• Assess current ESG data maturity
• Gap analysis across 8 dimensions (governance, strategy, processes, data, systems, controls, expertise, assurance)
• Establish CSRD governance (ownership, steering committee)

Month 3-4: Materiality & Strategy

• Conduct double materiality assessment
• Identify material topics requiring disclosure
• Review/establish sustainability strategy and targets
• Map reporting requirements against current data availability

Month 5-7: Data Collection Infrastructure

• Design data collection processes
• Select tools/platforms for ESG data management
• Define data governance and quality controls
• Train teams on data requirements

Month 8-10: Data Collection & Reporting

• Collect data for first reporting period
• Consolidate and validate data quality
• Develop sustainability statement draft
• Conduct internal review and governance sign-off

Month 11-12: Assurance & Publication

• Engage external auditor for limited assurance
• Remediate audit findings
• Finalize sustainability statement
• Publish and communicate to stakeholders

Common CSRD Mistakes to Avoid

Based on early CSRD adopters (Wave 1 companies), here are costly mistakes to avoid:

Mistake 1: Treating CSRD as Just Reporting

CSRD isn't just a reporting exercise. It requires embedding sustainability into governance and strategy. Companies that treat it as compliance theater struggle to gather credible data and face audit issues.

Mistake 2: Incomplete Scope 3 Emissions Coverage

Scope 3 (supply chain) emissions are the largest category for most mid-market companies but are underestimated. Failing to address supply chain coverage thoroughly undermines the entire assessment.

Mistake 3: Weak Materiality Assessment

Companies that skip genuine materiality assessment and just report on all ESRS standards face auditor pushback. Materiality must be rigorous and defensible.

Mistake 4: Poor Data Governance

Without defined data ownership, quality controls, and systems, companies struggle to gather audit-ready data. Manual spreadsheets don't scale.

Mistake 5: Starting Too Late

Companies starting 6 months before their deadline are under severe time pressure. Starting early allows for iterative improvement and proper systems.

How Verdiso Can Help

Preparing for CSRD is complex but essential. Verdiso helps mid-market companies tackle CSRD through three complementary services:

• CSRD Readiness Assessment (€5K-€15K): 8-dimension gap analysis, materiality screening, compliance score, prioritized roadmap
• Verdiso Platform (from €500/month): Ongoing data collection, compliance tracking, regulatory updates
• Advisory & Support (custom): Board presentations, regulatory guidance, audit preparation

Most companies benefit from starting with an assessment to understand their current state, then building a roadmap with platform support and expert guidance.

CSRD Resources for Further Learning

To dive deeper:

• CSRD for UK Companies — Understand CSRD and UK SRS dual obligations
• Free Tools & Guides — Checklists, timeline calculator, ESRS reference
• Assessment Services — Full readiness assessment with expert review

Frequently Asked Questions About CSRD

Conclusion — CSRD Is Here. The Time to Act Is Now.

The Corporate Sustainability Reporting Directive is the most significant mandatory ESG requirement to date. For mid-market European companies, CSRD compliance is not optional—it's regulatory. Wave 2 companies have until April 2026 to publish their first report, which means 2025 is your preparation year.

The good news: CSRD is manageable with proper planning. Most mid-market companies can achieve full compliance in 12 months with clear governance, the right tools, and expert support. Starting now gives you a realistic timeline and avoids the stress of last-minute scrambling.

Whether you're just starting your assessment or well into implementation, the key is to start somewhere, focus on materiality, gather clean data, and build systems that scale. CSRD compliance becomes a competitive advantage when done right—investors value companies with robust ESG governance and transparent reporting.