← All guides
CSRD14 min read8 July 2026

CSRD Gap Assessment: Double Materiality, ESRS Standards, and Assurance Requirements Explained (2026)

Complete guide to CSRD gap assessment for European companies. Double materiality assessment methodology, ESRS 1/2 general disclosures, ESRS E1 climate reporting (Scope 1/2/3, transition plan), ESRS S1 workforce metrics, gender pay gap, and limited assurance requirements.

What is CSRD and who does it apply to?

The Corporate Sustainability Reporting Directive (CSRD, Directive 2022/2464/EU) replaced the Non-Financial Reporting Directive (NFRD) and expanded the scope of mandatory sustainability reporting dramatically. Where NFRD covered around 11,000 companies, CSRD will eventually cover approximately 50,000 EU companies — plus non-EU companies with significant EU operations.

The phase-in timeline is graduated:

  • Phase 1 (FY2024): Large public-interest entities (PIEs) with more than 500 employees — approximately 1,000 companies in the EU. First reports due in 2025.
  • Phase 2 (FY2025): Other large companies exceeding two of three thresholds: 250+ employees, €40M+ net turnover, €20M+ balance sheet total. Approximately 50,000 companies. Reports due in 2026.
  • Phase 3 (FY2026): Listed SMEs (small and medium enterprises on EU regulated markets), small and non-complex credit institutions, and captive insurance undertakings. Reports due in 2027. Listed SMEs may use a voluntary simplified standard (ESRS for listed SMEs).
  • Phase 4 (FY2028): Third-country undertakings with EU-generated net turnover above €150M through EU subsidiaries or branches. Reports due in 2029.

Non-EU companies serving EU markets should note that value chain disclosure requirements under ESRS mean that Phase 1 and 2 companies will be requesting sustainability data from suppliers — regardless of the supplier’s own CSRD status.

The European Sustainability Reporting Standards (ESRS)

CSRD is implemented through the European Sustainability Reporting Standards, adopted by the European Commission in July 2023 (Delegated Regulation (EU) 2023/2772). The ESRS structure is:

  • ESRS 1: General Principles — reporting concepts, double materiality, value chain, entity-specific circumstances
  • ESRS 2: General Disclosures — mandatory for all in-scope companies regardless of materiality (governance, strategy, material impacts/risks/opportunities, metrics/targets)
  • ESRS E1–E5: Environmental — climate, pollution, water, biodiversity, circular economy
  • ESRS S1–S4: Social — own workforce, value chain workers, affected communities, consumers/end-users
  • ESRS G1: Governance — business conduct

ESRS 2 is mandatory. For all other ESRS, disclosure is required only where the topic is “material” — determined through the double materiality assessment.

Double Materiality Assessment: the foundation of CSRD

The double materiality assessment (DMA) is both the most important and most misunderstood element of CSRD. It determines which ESRS topical standards apply to your company. Get it wrong, and the entire reporting structure is wrong.

Double materiality has two dimensions:

  1. Impact materiality: Does the company’s activities have actual or potential significant negative or positive impacts on people, communities, or the environment? This is an “outside-in” view — looking at the company’s effects on the world.
  2. Financial materiality: Do sustainability matters pose significant financial risks or opportunities that affect the company’s development, performance, or position? This is the “inside-out” view — looking at how sustainability affects the company.

A matter is material if it meets either dimension — not both. Climate change is typically material from both dimensions for most large companies. Water may be material from an impact dimension for water-intensive industries, even if physical water risk is low.

EFRAG’s Implementation Guidance 1 (IG 1, January 2024) provides the definitive methodology, including the six-step DMA process:

  1. Understand the context: identify your activities, business relationships, and geographies
  2. Identify actual and potential impacts, risks, and opportunities (IROs)
  3. Assess significance of impacts (impact materiality)
  4. Assess financial effects (financial materiality)
  5. Determine what is material based on threshold criteria
  6. Document, validate with senior management, and disclose the process

Common DMA mistakes:

  • Using industry-average materiality matrices instead of conducting a company-specific assessment
  • Excluding value chain impacts without justification
  • Not engaging stakeholders (employees, customers, civil society, investors) in the process
  • Setting materiality thresholds that are too high, excluding topics that competitors are reporting
  • Not documenting the methodology — auditors will review the DMA process, not just the result

ESRS E1: Climate — the most demanding standard

ESRS E1 is where most companies spend the most time and face the most significant data gaps. Key requirements:

GHG Inventory (ESRS E1-5)

CSRD requires a full GHG inventory aligned with the GHG Protocol Corporate Standard:

  • Scope 1: Direct emissions from owned/controlled sources. Typically the most straightforward.
  • Scope 2: Indirect emissions from purchased energy. Both market-based and location-based figures are required under ESRS E1-5. Market-based accounting requires renewable energy certificates (RECs/GOs) — unbundled certificates must meet residual mix factors for the relevant country.
  • Scope 3: Value chain emissions across applicable categories. ESRS E1-5 requires disclosure of all material Scope 3 categories. EFRAG phase-in provisions allow first-year reporters to omit Scope 3 data if data collection is not yet feasible — but the omission must be disclosed with a plan and timeline.

The 15 Scope 3 categories (GHG Protocol) and their typical applicability by sector is a key part of the Scope 3 materiality assessment. For most large companies, categories 1 (purchased goods and services), 11 (use of sold products), and 12 (end-of-life treatment) are the largest categories.

Climate Transition Plan (ESRS E1-1)

The climate transition plan is one of the most scrutinised CSRD disclosures. It must describe:

  • How the company’s strategy and business model are being adapted to the 1.5°C goal
  • GHG reduction targets (short, medium, and long-term — including 2030 and 2050)
  • Decarbonisation levers and planned actions with timelines
  • CapEx aligned to the transition (and CapEx in fossil fuel assets)
  • The role of carbon credits (which cannot substitute for actual reduction)
  • Phase-down of fossil fuel activities (if applicable)

Science-based targets (SBTi) validated targets are the market standard for demonstrating 1.5°C alignment. Companies without SBTi targets face greater scrutiny from auditors and investors on the credibility of their transition plan.

ESRS S1: Own Workforce — the most data-intensive social standard

ESRS S1 generates the most HR data requests. Mandatory metrics include:

Workforce metrics (S1-6 to S1-9)

  • Total number of employees (headcount) and FTE breakdown
  • Employees by gender and country
  • Employees by employment contract (permanent vs temporary) and working time (full vs part-time)
  • Non-employee workers (contractors, agency staff, self-employed) engaged by the company
  • Employee turnover rate, with breakdown by gender and age group

Gender pay gap (S1-16)

ESRS S1-16 requires disclosure of the gender pay gap ratio (GPG) — the difference between average gross hourly earnings of male and female employees. This aligns with the EU Pay Transparency Directive (2023/970/EU), which requires employers with 250+ employees to report their GPG annually from June 2027, and employers with 100–249 employees every three years. CSRD reporters should align their ESRS S1-16 methodology with the Pay Transparency Directive from the outset to avoid reporting divergence.

Health and safety metrics (S1-13)

OHS metrics must cover both employees and non-employee workers (contractors working on-site). ILO harmonised definitions apply:

  • Number and rate of recordable work-related accidents (per 1 million hours worked — TRIR)
  • Work-related ill health (number of cases by type)
  • Number of days lost due to work-related accidents and ill health
  • Number of fatalities
  • Coverage of OHS management system (percentage of employees covered)

ESRS G1: Business Conduct — mandatory anti-corruption disclosure

ESRS G1 applies to all CSRD reporters where material (and is typically material for most companies). Key requirements:

  • Anti-corruption and anti-bribery policies (G1-1): Documented policies referencing UNCAC, OECD Anti-Bribery Convention, and applicable national law. Training coverage evidence required.
  • Corruption incidents (G1-4): Number of convictions or fines for anti-corruption violations. This is a mandatory metric — even if the answer is zero. Absence of a tracking system is a non-conformity.
  • Supplier payment practices (G1-2): Average payment period to suppliers (aligned with EU Late Payment Regulation).
  • Political engagement (G1-5): Lobbying spend, EU Transparency Register membership, and trade association sustainability position alignment.

Assurance requirements

CSRD introduces mandatory limited assurance for sustainability reporting from the first year of application. A path to reasonable assurance (equivalent to financial statement audit) is expected from the European Commission’s review in 2028.

Limited assurance means the statutory auditor (or another accredited assurance provider) reviews whether anything causes them to believe the sustainability statement is not prepared in accordance with ESRS. This is a lower bar than a reasonable assurance opinion but still requires:

  • Documented DMA methodology and evidence
  • Data collection processes with appropriate controls
  • Management review and sign-off of sustainability data
  • Consistent application of ESRS disclosure requirements

Audit readiness checklist: Engage your assurance provider at least 6–9 months before your first reporting date. Conduct an internal assurance dry run. Document data collection methodology for all reported metrics. Ensure version control on all supporting evidence.

CSRD and other EU sustainability obligations

CSRD does not operate in isolation. Key interactions:

  • EU Taxonomy Regulation: CSRD sustainability statements must include EU Taxonomy KPIs (turnover, CapEx, OpEx aligned to taxonomy-eligible and taxonomy-aligned activities). ESRS E1 and EU Taxonomy reporting are tightly linked for climate.
  • CSDDD (Corporate Sustainability Due Diligence Directive, Dir. 2024/1760): CSDDD due diligence processes feed directly into CSRD ESRS S2 (value chain worker) and ESRS E1–E5 (environmental supply chain) disclosures. Running CSDDD and CSRD programmes in parallel reduces duplication.
  • SFDR (Sustainable Finance Disclosure Regulation): Asset managers subject to SFDR PAI (Principal Adverse Impact) indicators draw on CSRD-disclosed data. Improving CSRD data quality improves downstream SFDR reporting quality.

Start with a gap assessment

The most efficient way to begin CSRD preparation is a structured gap assessment. Map what you have against what ESRS requires, identify the largest data gaps, and build a remediation roadmap with clear owner assignments and deadlines.

Use ComplyKit’s CSRD Gap Assessment generator to assess your readiness across double materiality, ESRS E1 climate, ESRS S1 workforce, ESRS G1 business conduct, and all topical ESRS standards. Generate a structured gap report with prioritised remediation actions.

Also relevant: the Supplier Code of Conduct generator for ESRS S2 value chain worker compliance, and our CSDDD and LkSG guide for supply chain due diligence that feeds CSRD disclosures.

More guides