Skip to the answer

Disclosure GuidesPillar guides, articles, FAQ and expert notes

Level 2 · Decision guide·ESRS · Disclosure guides

First ESRS Reporting Cycle: A 15-Month Project Plan for Companies and Groups

A critical-path programme covering legal scope, governance, DMA, data design, calculations, drafting, controls, assurance and publication

Who this is for A 13-minute read for reporting teams working through Running the reporting cycle: governance, data and controls, and for reviewers testing whether the evidence behind it holds.

Published passport

Current as at 10 August 2026
RK Reviewed by Dr Ross KurinkoLinkedIn Strategic ESG Advisor · IFRS S1 & S2 / GRI / ESRS expert GRI Certified Global Trainer · PhD, University of Cambridge · ESG-AI expert 15+ years on FTSE 100 & Fortune Global 500 disclosures Canary Wharf, London LRA educational guidance · Not issued or endorsed by European Commission

Edition written against

ESRS 2023 legal baseline and Commission-adopted revised ESRS 2026, with explicit version gate

Published

10 Aug 2026

Knowledge Hub guide

Last reviewed

10 Aug 2026

Short answer

The answer, before the reasoning

A first ESRS cycle should be run as a 15-month controlled reporting programme, not as a year-end writing exercise. The critical path normally starts with legal scope, reporting boundary, governance and standard-version decisions; moves through business-model and value-chain mapping, the double materiality assessment and disclosure architecture; then fixes metric definitions, data ownership, calculation methods, evidence and controls before the reporting period closes.

Drafting, financial-statement connectivity, dry runs, assurance readiness, board approval and publication follow. Several workstreams overlap, but unresolved scope, late DMA conclusions, unstable metric methods, incomplete group instructions or delayed assurance access can stop the entire programme.

A mature annual reporting process can run on an established calendar, known definitions and recurring controls. A first ESRS cycle cannot. The organisation is simultaneously interpreting scope, creating governance, assessing materiality, defining metrics, building evidence, redesigning group instructions, preparing narrative and quantitative information, and learning what the assurance provider will need. Treating that work as a three-month drafting project creates predictable failure: late scope changes, unstable calculations, unapproved estimates, inconsistent subsidiary data and a board asked to approve conclusions it has not previously seen.

The 15-month model below is an LRA implementation plan, not a timetable prescribed by ESRS. It assumes that the company begins before the reporting year-end and can overlap workstreams. A complex group, weak data environment, acquisition programme or late legal-scope decision may need more time. A smaller and well-controlled entity may compress the plan, but it should not remove the critical decision and evidence gates.

Figure 4. Illustrative 15-month first-cycle programme and critical-path gates.

Some tasks can be delayed without stopping publication; others cannot. The critical path is the sequence of decisions whose delay pushes the final release date or forces uncontrolled shortcuts.

R = Responsible; A = Accountable; C = Consulted; I = Informed. The allocation must be adapted to the undertaking’s governance and national law. Preparation and independent challenge should remain separated even where individuals hold several roles.

Issue one controlled group reporting manual with definitions, boundaries, units, evidence expectations, cut-off and escalation rules.

Classify reporting units by material activity and data risk rather than giving every subsidiary an identical workload.

Require local management sign-off and central review, with targeted deep dives for high-risk topics, estimates or unusual movements.

Reconcile legal-entity population, acquisitions and disposals with the financial consolidation process.

Prevent local changes to formulas or classifications without central method approval.

Provide a translation and terminology protocol where submissions or evidence are multilingual.

Maintain a group exception log and quantify the effect of unresolved gaps on the sustainability statement.

Months 1-4. The group confirms scope and version, maps the business model and relationships, and performs a top-down DMA with focused assessment for high-risk water, workforce and supply-chain issues. The board committee approves the methodology and material conclusions.

Months 4-9. The disclosure matrix identifies required and entity-specific information. The group reuses the controlled GHG process, but creates new definitions and evidence rules for non-employee workers, supplier incidents and water-stress sites. A dry run in month 8 finds that three entities use different worker classifications and two sites cannot reproduce recycled-water data.

Months 9-13. The group fixes classifications, introduces a proxy with transparent limitation for one water population, performs a pre-assurance evidence review and drafts the statement. Finance reconciles capital-allocation and anticipated-financial-effect language with budgets and impairment papers.

Months 13-15. Period-end controls are completed, open issues are escalated, the assurance provider performs agreed procedures, management signs representations and the board approves the statement. The archive records final figures, source extracts, method versions, review evidence and publication files.

Starting the DMA before legal scope, group boundary and business-model evidence are sufficiently clear.

Collecting every datapoint before material IROs and disclosure objectives are mapped.

Allowing the project plan to show tasks but not controlled outputs, approvers or evidence gates.

Leaving finance, legal, IT, internal control or subsidiaries outside the design phase.

Designing methods during final collection and changing them after local submissions arrive.

Using the assurance provider as the process owner or expecting assurance to repair management evidence.

Scheduling the board only for final approval, with no earlier methodology or materiality challenge.

Publishing the report while the website, policies, targets, investor deck or financial statements use inconsistent claims.

Legal scope, reporting boundary, applicable ESRS edition and national requirements are documented.

Programme governance, RACI, budget, board calendar and escalation are approved.

DMA, disclosure matrix, data dictionary and evidence register have named owners and deadlines.

Metric methods and group instructions are approved before main collection.

Dry runs test source access, calculations, estimates, review evidence and consolidation.

Finance, legal, control and assurance milestones are integrated into the plan.

Material limitations and open issues have decision dates and governance owners.

The final publication, digital output, assurance report and archive are controlled as one release package.

1. Which unresolved decision would move the publication date if it slipped by four weeks?

2. Are metric methods approved before subsidiaries and data owners begin the main collection?

3. Does each programme milestone produce evidence and an approval, or only a meeting and a status update?

Source check completed on 2 August 2026. This article is an educational publication draft. It does not provide legal, assurance or organisation-specific advice. Confirm the applicable ESRS edition, the final Official Journal text, national implementation and the undertaking’s facts before public use.

Changes to national CSRD scope, filing, digital-tagging or assurance deadlines.

Publication and effective date of revised ESRS or further transition reliefs.

New assurance standards, CEAOB guidance or national assurance pronouncements.

Material changes to the group, acquisitions, disposals, reporting period or ERP/data environment.

Label all resourcing figures and timing assumptions as LRA planning estimates, not ESRS requirements.

Adapt the timeline to statutory filing dates, board calendars and assurance availability.

Do not postpone materiality, methodology or boundary decisions until final drafting.

Separate management responsibility from assurance-provider procedures and advice.

Rule

KNOWLEDGE CARD PACKAGE

<p>Public practitioner article followed by an editor and publisher pack with SEO, requirement mapping, update triggers and release controls.</p>

Rule

ESRS-IMP-002

<p>First ESRS Reporting Cycle: A 15-Month Project Plan for Companies and Groups A critical-path programme covering legal scope, governance, DMA, data design, calculations, drafting, controls, assurance and publication</p>

In practice

Type

Type Tier Audience — Current context
First-cycle implementation and resource planning guide Tier 3 · Deep Project Guide Project sponsors, CFOs, sustainability leads, group reporting, legal, risk, internal control, internal audit and assurance teams — Commission-adopted revised ESRS 2026 and first-cycle implementation considerations checked to 2 August 2026

Rule

2026 VERSION GATE

<p>The European Commission adopted revised ESRS on 3 July 2026. At the source-check date, the delegated act was not yet in force because publication in the Official Journal follows scrutiny. This article therefore uses the Commission-adopted 2026 text as forward-looking implementation guidance and keeps the 2023 ESRS as the current legal baseline. The adopted act provides for mandatory use from financial year 2027 and optional use for financial year 2026 once the act is in force. Confirm the final Official Journal text, national law and reporting period before publication.</p>

Quick orientation

Quick orientation

Applies to
First-time ESRS reporters and groups rebuilding a reporting cycle after a material scope, standard or systems change.
Primary decision
What must be decided early, which workstreams can overlap, and which dependencies sit on the critical path?
Key sources
Accounting Directive/national law; revised ESRS 1 and ESRS 2; applicable assurance requirements and engagement terms.
Common confusion
Writing the sustainability statement is the project; data and assurance can be added later.

In practice

Months

Months Workstream and core actions Controlled output / gate
M1-M2 Confirm legal scope, reporting period, individual or consolidated basis, applicable ESRS version, national requirements, filing location, assurance requirement and governance. Appoint sponsor, programme lead, workstream owners and technical reviewer. Approved scope memo, version decision, governance charter, RACI, budget, board calendar and issue escalation route.
M2-M4 Map strategy, business model, legal entities, activities, sectors, products, geographies, upstream/downstream relationships, existing due diligence, stakeholder processes, risk registers and public commitments. Controlled business-model/value-chain map, evidence inventory, source register and population of potential IRO signals.
M3-M6 Design and perform the DMA. Identify and assess impacts, risks and opportunities; use stakeholder and expert evidence; set thresholds; challenge severe-impact coverage; validate and approve conclusions. Approved methodology, IRO register, evidence register, material topics/sub-topics and governance minutes.
M4-M8 Create the disclosure architecture. Map material IROs to ESRS 2, topical DRs/ARs, GDR-P/A/M/T and entity-specific needs. Assign owners and define narrative and metric outputs. Disclosure matrix, data-request catalogue, content plan, source anchors and information-materiality decision log.
M5-M9 Design metrics and data controls. Fix definition, unit, boundary, calculation, source, estimates, value-chain method, evidence, comparatives, change control and review. Issue group instructions. Approved data dictionary, methodology files, control matrix, evidence standard, consolidation instructions and dry-run template.
M7-M11 Collect dry-run and in-period data; perform calculations and estimates; reconcile entity submissions; investigate exceptions; draft policies, actions, metrics, targets and financial-effect narratives. Dry-run pack, unresolved-gap log, calculation files, review evidence, first full narrative draft and financial connectivity map.
M10-M13 Operate controls and prepare for assurance. Freeze key methods, test populations and access, review evidence, challenge estimates, run disclosure and consistency reviews, prepare assurance requests and remediation. Assurance-ready evidence index, control results, corrected exceptions, management review pack and near-final statement.
M13-M15 Complete period-end data, comparatives and events after reporting period; finalise digital output and management report; obtain committee/board approvals; sign management representations; publish and archive. Approved sustainability statement, assurance report, digital/tagged output as applicable, publication record, archive and next-cycle improvement plan.

In practice

Critical dependency

Critical dependency Why it blocks later work Early control
Legal scope and standard version Determines entity population, basis of preparation, group instructions, assurance and public statement. Written legal/accounting scope decision, explicit assumptions and trigger for reassessment.
Reporting boundary and value-chain map Metric population and IRO identification cannot be stabilised without knowing what operations and relationships are relevant. Reconcile to financial consolidation, legal entities, operations and significant business relationships.
DMA conclusions Disclosure matrix, data requests and narrative cannot be finalised if material IROs and sub-topics remain open. Time-box evidence collection, establish challenge gates and escalate unresolved severe impacts.
Metric definitions and methods Late method changes create inconsistent subsidiary submissions, restatements and assurance gaps. Approve methods before the main collection cycle and run a dry calculation.
Data-owner capacity and system access A theoretically sound method fails when the population cannot be extracted, reviewed or evidenced. Name deputies, test access, sample source records and agree cut-off rules.
Financial effects and connected information Sustainability and financial narratives can contradict each other if finance joins late. Create a joint finance-sustainability issue list and reconciliation control.
Assurance access and remediation time Late evidence requests can expose gaps after the board timetable is fixed. Agree scope, evidence protocol and milestone reviews early while preserving management responsibility.
Governance approval The statement cannot be responsibly released if material judgements and limitations were not escalated. Schedule methodology, materiality and final publication gates in the board calendar from M1.

Rule

LRA PLANNING ESTIMATES

<p>The ranges below are implementation assumptions for planning, not ESRS requirements and not market benchmarks. Actual needs depend on group size, data maturity, number of material topics, value-chain complexity, language, systems, national law and assurance scope.</p>

In practice

Role / resource

Role / resource Illustrative first-cycle assumption Comments
Executive sponsor 0.05-0.10 FTE over the programme Removes blockers and owns major governance decisions; not the day-to-day project manager.
Programme lead / reporting owner 0.8-1.0 FTE during design and close; 0.5-0.8 between peaks Controls scope, plan, issue log, statement and approvals.
Technical ESRS lead 0.5-1.0 FTE depending on complexity Maintains source set, methodology, requirement mapping and technical review.
DMA workstream 2-5 core contributors over M2-M6 plus subject experts Sustainability, risk, legal, operations, HR, procurement, finance and stakeholder expertise.
Data and controls team 1-4 FTE equivalent plus distributed data owners Depends heavily on number of metrics, systems and group entities.
Finance and financial effects 0.3-1.0 FTE equivalent across FP&A, accounting and treasury Needed for connectivity, financial effects, CapEx/OpEx and consistency.
Legal / compliance 0.2-0.6 FTE equivalent plus targeted specialist review Scope, claims, omissions, due diligence, contracts and sensitive information.
Group / subsidiary coordinators Typically 0.1-0.4 FTE per significant reporting unit during collection peaks Local collection, evidence, validation, explanation and sign-off.
Internal control / internal audit Targeted design review and pre-assurance testing Should challenge control design without taking management ownership.
External specialist support Flexible, concentrated on technical gaps and surge periods Useful for DMA facilitation, GHG, scenario analysis, nature, human rights, data models or technical review.

In practice

Decision / output

Decision / output Board or committee CFO / sponsor — Reporting lead — Functional owner — Legal / control / assurance
Legal scope and version I / oversight A — R — C — C / legal advice
DMA methodology and conclusions A / oversight C — R — C — C / challenge
Metric definitions and methods I A — R — R — C / control review
Data submission and evidence I C — A — R — C / test
Narrative and financial connectivity C A — R — R — C
Reliefs, omissions and significant limitations A for significant matters C — R — C — C / legal-assurance review
Final statement and publication claim A R — R — C — C; assurance concludes only within engagement scope

Hypothetical scenario

ILLUSTRATIVE SCENARIO

<p>A listed manufacturing group has 18 reporting entities in nine countries, no previous ESRS statement, a mature GHG inventory, uneven workforce and supplier data, and a December year-end. It begins the programme in October of the preceding year.</p>

Illustrative only. It shows how the decision is made, not wording that can be copied or relied on.

Myth

“The first ESRS cycle can be completed after year-end because most information already exists somewhere in the business.”

Reality

Existing information is rarely defined, bounded, controlled and evidenced in the form required for a sustainability statement. The first cycle must establish methods, ownership, materiality decisions, governance and assurance-ready records before the close. Year-end should complete the process, not invent it.

In practice

Source

Source Role in this article Official link
European Commission, Commission Delegated Regulation C(2026) 5010 and annexes, 3 July 2026 Commission-adopted revised ESRS text, explanatory memorandum, application and transition context Open source
Commission Delegated Regulation (EU) 2023/2772 Current ESRS legal baseline at the source-check date Open source
European Commission adoption announcement, 3 July 2026 Adoption and scrutiny status of revised ESRS Open source
Commission-adopted revised ESRS annex, 3 July 2026 Primary requirements for materiality, boundaries, preparation, presentation and general disclosures Open source
CEAOB guidelines on limited assurance, 30 September 2024 Transitional high-level assurance context; subject to national rules and engagement terms Open source
Accounting Directive, consolidated 18 March 2026 EU legal framework for sustainability reporting and assurance Open source

Rule

INTERNAL PRODUCTION NOTE

<p>This section is for editorial, CMS, AI and technical-review workflows. It is not intended to be published as part of the public article body.</p>

Rule

PUBLICATION GATE

<p>Confirm the applicable legal text and reporting period, review all normative claims against the final Official Journal text, adapt examples to the undertaking, and obtain technical, legal, assurance and editorial sign-off before release.</p>

In practice

Instrument / requirement

Instrument / requirement Relationship Role and limitation
Accounting Directive and national law Legal context Scope, management-report location, governance and assurance requirements.
Revised ESRS 1 Direct Boundary, double materiality, information materiality, presentation, comparatives and reliefs.
Revised ESRS 2 BP, GOV, SBM and IRO Direct Basis, governance, strategy, materiality process and disclosure architecture.
Revised ESRS 2 GDR-P/A/M/T Implementation Policies, actions, metrics and targets workstreams.
CEAOB limited-assurance guidelines / national pronouncements Assurance context Risk-based preparation; not a substitute for engagement terms or national rules.

Take it with you

The checklists as a working spreadsheet

Every checklist and table on this page, with empty status, owner and evidence columns for your team to fill in and keep.

Download .xlsx

✓ LRA AI Assistant · Human-in-the-loop

Ask about this guide

It answers from this page, and reaches into the linked disclosure cards when your question is about the standard itself. Your first two answers are free without signing in.

Try
2 free answers Automated · the LRA team is one click away

Go deeper · ESRS

ESRS and CSRD training

Double materiality, datapoints and the sustainability statement, with a mentor on your own report.

Available as Guided Flex, Live Cohort, 1:1 Expert Mentorship or Corporate Programme.

See course formats
/en/knowledge-hub/disclosure-guides/esrs/esrs-reporting-cycle-and-controls/first-esrs-reporting-cycle-a-15-month-project-plan-for-companies-and-g/