{"id":5933,"date":"2026-08-27T11:09:03","date_gmt":"2026-08-27T10:09:03","guid":{"rendered":"https:\/\/icompliance.eu\/resources\/csrd-in-practice-5-steps-to-an-assurance-ready-report\/"},"modified":"2026-08-29T19:19:28","modified_gmt":"2026-08-29T18:19:28","slug":"csrd-in-practice-5-steps-to-an-assurance-ready-report","status":"publish","type":"page","link":"https:\/\/icompliance.eu\/en\/resources\/csrd-in-practice-5-steps-to-an-assurance-ready-report\/","title":{"rendered":"CSRD in Practice: 5 Steps to an Assurance-Ready Report"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tResources<\/a> \/<\/span> CSRD in Practice: 5 Steps\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

CSRD & ESRS \u00b7 Updated in August 2026<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

CSRD in practice: 5 steps to assurance-ready<\/em> reporting<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tDirective (EU) 2026\/470 has narrowed the scope of companies required to comply with the CSRD, but those that remain within its scope \u2014 and those opting for voluntary reporting under the VSME framework \u2014 need a defensible process, not just a well-written report. Here are the five steps to prepare your organisation for independent verification (limited assurance). \t\t\t\t\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tContact iCompliance \u2192<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tSee pillar \u2192<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

A new, more restrictive regulatory framework<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Since Directive (EU) 2026\/470, which has been in force since 18 March 2026, the mandatory scope of the CSRD has been significantly reduced: broadly speaking, only companies or groups that simultaneously exceed 1,000 employees and \u20ac450 million in annual net turnover are now covered. Member States have until 19 March 2027 to transpose the Directive. At the same time, the Commission further simplified the ESRS on 3 July 2026, with application scheduled for the 2027 financial year (optional use already permitted in 2026). <\/p>

In practice, this means two things: fewer companies are subject to the CSRD, but those that fall within its scope face the same core requirement \u2014 a sustainability report subject to independent external verification (limited assurance)<\/strong>. And those outside the scope are not left without demand for ESG reporting: banks, investors and customers continue to request information, now primarily through the voluntary VSME <\/a>reporting framework. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

The role of iCompliance \u2014 and what we don\u2019t do<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

iCompliance supports the organisation throughout virtually the entire preparation process: assessing applicability, dual materiality, mapping data to the ESRS, designing controls and evidence, and preparing for the external audit. We do not issue the independent assurance opinion<\/strong> \u2014 that is the responsibility of a ROC or another legally authorised assurance service provider. Our role is to prepare the organisation so that this audit runs smoothly, first time round. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/rect><\/line><\/line><\/line><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Step 1 \u2014 Check whether the CSRD applies, and from when<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Identify the entity or consolidation group, the number of employees, the turnover and the financial year to which the new criteria apply (1,000 employees + \u20ac450M). Also check the national transposing legislation, which may contain transitional rules for companies already in the process of preparing for the changes. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/path><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Step 2 \u2014 Carry out the dual materiality assessment<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Map stakeholders, impacts, risks and opportunities (IROs); assess impact materiality and financial materiality separately; document criteria, thresholds and decisions. Dual materiality remains the central pillar of the revised ESRS and determines which disclosures are actually required. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/path><\/path><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Step 3 \u2014 Map the material topics to the ESRS requirements and data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Translate the results of the materiality assessment into specific disclosure requirements: identify the relevant data points, the data owners, the sources, the calculation methodologies and any existing information gaps.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/circle><\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Step 4 \u2014 Establish controls, documentation and an audit trail<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

This is the key differentiating factor: a repository of evidence, clear responsibilities (RACI), documented calculation methodologies, formal approvals, version control and validation by management. The aim is not simply to \u2018write an ESG report\u2019, but to build a reporting system that can stand up to scrutiny by an external auditor. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/path><\/svg><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Step 5 \u2014 Prepare for the independent review (limited assurance)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Before the ROC or assurance provider arrives: carry out a dry run, review the evidence, check for consistency between sections of the report, address any gaps identified and obtain formal validation from management regarding the completeness of the disclosures. It is this preparatory work \u2014 not the report itself \u2014 that determines whether the audit proceeds smoothly. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Outside the scope of the CSRD? VSME is the way forward <\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Being outside the mandatory scope does not remove the pressure to report on ESG \u2014 particularly from banks, investors and clients in the value chain. The voluntary VSME standard<\/a>, adopted by the Commission in 2026, was designed specifically for SMEs and companies outside the mandatory scope, with requirements proportionate to their size. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Assess your readiness for the CSRD<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tA 30-minute discussion to confirm the scope, identify gaps and set out the next steps leading up to the independent audit.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tAssess Reporting Readiness \u2192<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tDownload the VSME\/CSRD Checklist \u2192<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Related<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

From risk registration to resilience with ISO 31000<\/a><\/p>

VSME explained: a practical guide for SMEs<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Frequently Asked Questions<\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Common questions about the CSRD and independent review<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

To whom does the CSRD currently apply?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tUnder Directive (EU) 2026\/470, this generally applies only to companies or groups with more than 1,000 employees and an annual turnover of more than \u20ac450 million. National transposition by 19 March 2027. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Does iCompliance issue an assurance opinion?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tNo. We prepare the scope, dual materiality, data, controls and evidence; the independent limited assurance opinion is issued by a registered auditor or an authorised assurance provider. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What if my company is not subject to the CSRD?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tYou can opt for the VSME voluntary reporting scheme, which is increasingly sought after by banks, investors and customers throughout the value chain.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Build resilience. Make better decisions. <\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tLet\u2019s assess your priorities and draw up a practical plan \u2014 together.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tContact iCompliance \u2192<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Resources \/ CSRD in Practice: 5 Steps CSRD & ESRS \u00b7 Updated in August 2026 CSRD in practice: 5 steps to assurance-ready reporting Directive (EU) 2026\/470 has narrowed the scope of companies required to comply with the CSRD, but those that remain within its scope \u2014 and those opting for voluntary reporting under the VSME […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":1834,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_ice_seo_score":0,"_ice_review":"","footnotes":""},"class_list":["post-5933","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/pages\/5933","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/comments?post=5933"}],"version-history":[{"count":3,"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/pages\/5933\/revisions"}],"predecessor-version":[{"id":5943,"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/pages\/5933\/revisions\/5943"}],"up":[{"embeddable":true,"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/pages\/1834"}],"wp:attachment":[{"href":"https:\/\/icompliance.eu\/en\/wp-json\/wp\/v2\/media?parent=5933"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}