ESRS explained: what companies must report and how to prepare

A practical guide to ESRS readiness: scope, double materiality, data ownership, controls and audit trail to build a repeatable, auditable CSRD reporting process.

Abstract  

The European Sustainability Reporting Standards (ESRS) define how CSRD in-scope companies should structure sustainability reporting and which disclosures must be supported by data, governance and evidence.  

This article explains ESRS readiness as a practical sequence of steps: from defining scope and boundaries to conducting double materiality, mapping data and ownership, and building documentation and audit trail.  

The goal is to move beyond one-off compliance and establish a repeatable, auditable reporting process that supports both credibility and decision-ready ESG management. 

 

Key Takeaways 

 

ESRS are a practical framework: they clarify what to disclose and, above all, which internal processes and data are needed to support credible reporting. 

Readiness starts from foundations: scope and boundaries must be defined before data collection to ensure consistency over time. 

Double materiality is the filter: it determines what is in scope for disclosure and prevents dispersion of effort across non-material topics. 

Mapping data, ownership and controls turns ESRS into an operational process, reducing gaps and inconsistencies across teams and systems. 

Evidence and audit trail make reporting defensible: documentation supports reliability, assurance readiness and decision-making. 

The goal is not a one-off report, but an ESRS-ready system that remains repeatable, scalable and aligned with governance and risk management. 

 

What ESRS require in practice 

The European Sustainability Reporting Standards (ESRS) define how companies subject to the Corporate Sustainability Reporting Directive (CSRD) must structure and present sustainability information.  

They were developed by EFRAG and formally adopted by the European Commission through Delegated Regulation (EU) 2023/2772, published in the Official Journal of the European Union in December 2023. 

 

ESRS translate the objectives of the CSRD into operational disclosure requirements. In practice, they require companies to explain: 

 

  • how sustainability is governed at board and management level; 
  • how ESG risks and impacts are identified and managed; 
  • which policies, actions and targets are in place; 
  • and which quantitative indicators support those statements. 

 

The standards are organised into two cross-cutting standards (general principles and general disclosures) and topical standards covering environmental, social and governance matters. However, ESRS are not a checklist to be completed line by line. Their application is based on double materiality: companies are required to report only on topics that are material from an impact and/or financial perspective. 

This means ESRS are less about “reporting everything” and more about demonstrating that a structured process exists to identify, prioritise and manage relevant sustainability topics. 

From an operational perspective, ESRS introduce three important shifts

 

Sustainability reporting becomes integrated with governance and risk management, not treated as a separate communication exercise; 

Data must be traceable, documented and capable of supporting assurance; 

Disclosures must be coherent across narrative explanations, metrics and targets. 

 

For many companies, the real challenge is not understanding what ESRS say, but translating them into internal processes. The standards require alignment between sustainability teams, finance, risk management, procurement and operations. They implicitly demand a system. 

Seen this way, ESRS are not only a regulatory obligation. They are a framework for building a structured, repeatable and auditable ESG management process. 

 

Step 1: Define scope and boundaries 

 

The first practical step in ESRS readiness is defining scope and reporting boundaries. Before collecting any data, companies must clarify which entities, activities and parts of the value chain fall within their sustainability reporting perimeter. 

Under the CSRD framework, the reporting scope generally follows the financial consolidation perimeter. However, ESRS introduce an additional layer of analysis: companies must also consider impacts, risks and opportunities across their value chain, including upstream and downstream activities where relevant. 

 

This does not mean reporting exhaustively on every supplier or customer. It means demonstrating that the company has assessed where significant sustainability impacts or financial risks may arise and has defined a coherent reporting boundary accordingly. 

Three dimensions are particularly important at this stage: 

 

  • Organisational boundary: Which legal entities are included? Is the scope aligned with financial reporting? 
  • Operational boundary: Which activities, sites or business lines generate material impacts? 
  • Value chain boundary: Where are the most relevant upstream and downstream impacts located? 

 

A clear definition of scope is essential for two reasons. 

First, it ensures internal consistency. ESG data must be aligned with financial data, risk management processes and governance structures. Misalignment at this stage can generate inconsistencies later in disclosures. 

Second, scope definition directly affects data collection. Without a clearly defined perimeter, companies risk collecting incomplete or inconsistent data, increasing reporting complexity over time. 

From a readiness perspective, companies should document: 

 

  • the rationale for their reporting boundary; 
  • how value-chain considerations were assessed; 
  • and how this scope may evolve over time. 

 

This documentation is not only useful for transparency; it becomes critical if and when sustainability information is subject to assurance. 

Defining scope is therefore not a technical formality. It is the structural foundation on which the entire ESRS process is built. 

 

Step 1 is about defining a clear reporting scope and boundaries, so ESG data collection starts from a consistent and defensible perimeter. 

 

Step 2: Identify material topics (double materiality in practice) 

 

Once scope and boundaries are defined, the next step is identifying which sustainability topics are material under the ESRS framework. This is where double materiality becomes operational

Under ESRS, companies must assess materiality from two complementary perspectives: 

 

  • Impact materiality: how the company’s activities affect the environment and society. 
  • Financial materiality: how sustainability matters generate risks or opportunities that may influence financial performance, position or future cash flows. 

 

Double materiality is not a theoretical exercise. It determines which ESRS disclosure requirements apply and which data must be collected, monitored and explained

In practical terms, companies need a structured assessment process that: 

  • identifies relevant sustainability topics across the value chain; 
  • evaluates the severity and likelihood of impacts; 
  • assesses financial risk and opportunity exposure; 
  • documents the methodology and decision criteria used. 

 

Importantly, the outcome of the materiality assessment must be defensible. Under CSRD, companies are required to explain their process, assumptions and conclusions. Where sustainability reporting is subject to limited assurance, documentation becomes essential. 

A robust double materiality assessment typically involves: 

 

  • cross-functional internal input (finance, risk, operations, procurement, HR); 
  • engagement with key stakeholders where relevant: 
  • clear scoring or prioritisation logic; 
  • governance oversight and formal validation. 

 

The objective is not to produce an exhaustive list of ESG topics, but to define a focused and justified set of material issues that guide reporting, data collection and strategic decision-making

In this sense, materiality acts as a filter. It prevents companies from dispersing resources and helps concentrate efforts on what truly matters from both an impact and a financial perspective. 

Well-designed materiality assessments also improve internal alignment. When sustainability priorities are clearly defined and validated, they become easier to integrate into risk management, performance monitoring and long-term planning. 

 

Step 2 is about identifying which sustainability topics are material in practice, so reporting focuses on what truly matters and is supported by a documented double materiality assessment. 

 

Step 3: Map data, owners and controls 

 

Once material topics are identified, ESRS readiness becomes operational. Companies must translate each material topic into concrete data requirements, clear ownership and proportionate control mechanisms

This step is about building a structured link between ESRS disclosure requirements and internal processes. For every material topic, companies should identify: 

 

  • which quantitative indicators are required; 
  • which qualitative disclosures must be supported; 
  • where the data originates; 
  • and who is accountable for its production and validation. 

 

Mapping data is not simply a technical exercise. It requires alignment between sustainability teams and operational functions. Finance may hold information relevant to climate risks and targets. HR may manage workforce-related metrics. Procurement may oversee supply chain data. Risk management may already assess exposure linked to environmental or governance issues. 

Clarity of ownership is essential. Each KPI and disclosure should have a responsible function and a defined review path. Without explicit accountability, ESG reporting risks becoming fragmented and inconsistent over time. 

 

Controls are the second component of this step. ESRS do not prescribe detailed control frameworks, but they implicitly require that reported information be reliable and explainable. In practice, proportionate controls often include: 

 

  • agreed definitions and methodologies for key indicators; 
  • internal validation checks before consolidation; 
  • documentation of assumptions and estimation methods; 
  • version control and approval procedures. 

 

The objective is not to replicate financial reporting complexity, but to ensure repeatability and internal coherence. Companies that complete this mapping exercise early reduce the risk of data gaps, late corrections and inconsistencies across disclosures. 

 

Step 3 is where ESRS start to become a management process rather than a reporting obligation. 

 

Step 4: Evidence, documentation and audit trail 

 

After mapping data and assigning responsibilities, the next priority is ensuring that disclosures can be supported with clear evidence

Under the CSRD framework, sustainability reporting is subject to assurance. Even where assurance is initially limited, companies benefit from embedding documentation into their process from the beginning. 

Evidence means being able to demonstrate: 

 

  • the origin of each key data point; 
  • the methodology used to calculate or estimate it; 
  • the internal review or validation performed; 
  • and how figures have evolved over time. 

An effective audit trail does not require excessive documentation. It requires consistency. Methodologies should be applied year over year unless changes are justified and clearly explained. Data sources should be identifiable, whether they come from internal systems or from value chain partners. 

 

Value chain information deserves particular attention. In many cases, companies rely on estimates, sector averages or supplier declarations. In these situations, transparency is critical. Documenting limitations and assumptions strengthens credibility and supports constructive dialogue with stakeholders. 

Documentation also reduces internal pressure. When evidence is embedded in the process rather than reconstructed at the end of the reporting cycle, reviews become smoother and assurance becomes less disruptive. 

 

Step 4 ensures that ESG information is not only collected, but defensible. 

 

From compliance to system: building an ESRS-ready process 

 

When scope, materiality, data mapping and documentation are aligned, ESRS readiness becomes a system. 

Approaching ESRS as a system means integrating sustainability into existing governance, planning and risk management structures rather than treating it as a parallel reporting track. 

Companies that make this shift typically focus on three structural elements: 

 

  • embedding ESG data collection into regular operational cycles; 
  • aligning sustainability oversight with existing governance bodies; 
  • connecting ESG metrics to risk management and strategic planning processes. 

 

This approach has practical benefits. It reduces duplication, strengthens internal consistency and improves the usability of ESG data for decision-making. It also supports coherence across narrative disclosures, quantitative metrics and forward-looking targets. 

 

ESRS are therefore not only about disclosure. They encourage companies to formalise how sustainability information is generated, validated and used. 

When treated as a structured management process, ESRS readiness becomes less about compliance pressure and more about building a robust foundation for long-term credibility. 

 

Mini-checklist: starting your ESRS readiness journey 

 

Confirm your reporting scope and value chain boundaries. 

Conduct and document a structured double materiality assessment. 

Map ESRS disclosure requirements to data sources and accountable owners. 

Define proportionate controls and validation steps. 

Document methodologies and ensure traceability of key figures. 

Integrate ESG reporting into governance, risk and planning processes. 

 

 

Explore related ESG Guides  

To continue building an ESRS-ready system, from data foundations to reporting execution, you may find these ESG Guide articles useful: 

 

FAQ 

Do companies need to report on every ESRS topic?  

No. ESRS reporting is based on double materiality. Companies are expected to disclose information on topics that are material from an impact and/or financial perspective, and to explain their assessment process. 

Why is scope definition so important before starting data collection?  

Because the reporting perimeter drives what data is needed and where it must be collected. A clear scope reduces inconsistencies and prevents rework later, especially when value chain information is involved. 

What makes ESG data “ESRS-ready”? 

ESRS-ready data is consistent, traceable and supported by documented methodologies. It has clear ownership, proportionate controls and an audit trail that makes key figures explainable over time. 

How can companies avoid turning ESRS into an overly complex project? 

By treating ESRS as a system. Start with a focused materiality assessment, map data and responsibilities using existing functions, and build documentation into the process rather than adding it at the end. 

Latest articles