Level 2 · Decision guide·ESRS · Disclosure guides
First ESRS Reporting Cycle: A 15-Month Project Plan for Companies and Groups
A critical-path programme covering legal scope, governance, DMA, data design, calculations, drafting, controls, assurance and publication
Published passport
Current as at 10 August 2026
Reviewed by
Dr Ross KurinkoLinkedIn
Strategic ESG Advisor · IFRS S1 & S2 / GRI / ESRS expert
GRI Certified Global Trainer · PhD, University of Cambridge · ESG-AI expert
15+ years on FTSE 100 & Fortune Global 500 disclosures
Canary Wharf, London
LRA educational guidance · Not issued or endorsed by European Commission
Edition written against
ESRS 2023 legal baseline and Commission-adopted revised ESRS 2026, with explicit version gate
Published
10 Aug 2026
Knowledge Hub guide
Last reviewed
10 Aug 2026
Short answer
The answer, before the reasoning
A first ESRS cycle should be run as a 15-month controlled reporting programme, not as a year-end writing exercise. The critical path normally starts with legal scope, reporting boundary, governance and standard-version decisions; moves through business-model and value-chain mapping, the double materiality assessment and disclosure architecture; then fixes metric definitions, data ownership, calculation methods, evidence and controls before the reporting period closes.
Drafting, financial-statement connectivity, dry runs, assurance readiness, board approval and publication follow. Several workstreams overlap, but unresolved scope, late DMA conclusions, unstable metric methods, incomplete group instructions or delayed assurance access can stop the entire programme.
A mature annual reporting process can run on an established calendar, known definitions and recurring controls. A first ESRS cycle cannot. The organisation is simultaneously interpreting scope, creating governance, assessing materiality, defining metrics, building evidence, redesigning group instructions, preparing narrative and quantitative information, and learning what the assurance provider will need. Treating that work as a three-month drafting project creates predictable failure: late scope changes, unstable calculations, unapproved estimates, inconsistent subsidiary data and a board asked to approve conclusions it has not previously seen.
The 15-month model below is an LRA implementation plan, not a timetable prescribed by ESRS. It assumes that the company begins before the reporting year-end and can overlap workstreams. A complex group, weak data environment, acquisition programme or late legal-scope decision may need more time. A smaller and well-controlled entity may compress the plan, but it should not remove the critical decision and evidence gates.
Figure 4. Illustrative 15-month first-cycle programme and critical-path gates.
Some tasks can be delayed without stopping publication; others cannot. The critical path is the sequence of decisions whose delay pushes the final release date or forces uncontrolled shortcuts.
R = Responsible; A = Accountable; C = Consulted; I = Informed. The allocation must be adapted to the undertaking’s governance and national law. Preparation and independent challenge should remain separated even where individuals hold several roles.
Issue one controlled group reporting manual with definitions, boundaries, units, evidence expectations, cut-off and escalation rules.
Classify reporting units by material activity and data risk rather than giving every subsidiary an identical workload.
Require local management sign-off and central review, with targeted deep dives for high-risk topics, estimates or unusual movements.
Reconcile legal-entity population, acquisitions and disposals with the financial consolidation process.
Prevent local changes to formulas or classifications without central method approval.
Provide a translation and terminology protocol where submissions or evidence are multilingual.
Maintain a group exception log and quantify the effect of unresolved gaps on the sustainability statement.
Months 1-4. The group confirms scope and version, maps the business model and relationships, and performs a top-down DMA with focused assessment for high-risk water, workforce and supply-chain issues. The board committee approves the methodology and material conclusions.
Months 4-9. The disclosure matrix identifies required and entity-specific information. The group reuses the controlled GHG process, but creates new definitions and evidence rules for non-employee workers, supplier incidents and water-stress sites. A dry run in month 8 finds that three entities use different worker classifications and two sites cannot reproduce recycled-water data.
Months 9-13. The group fixes classifications, introduces a proxy with transparent limitation for one water population, performs a pre-assurance evidence review and drafts the statement. Finance reconciles capital-allocation and anticipated-financial-effect language with budgets and impairment papers.
Months 13-15. Period-end controls are completed, open issues are escalated, the assurance provider performs agreed procedures, management signs representations and the board approves the statement. The archive records final figures, source extracts, method versions, review evidence and publication files.
Starting the DMA before legal scope, group boundary and business-model evidence are sufficiently clear.
Collecting every datapoint before material IROs and disclosure objectives are mapped.
Allowing the project plan to show tasks but not controlled outputs, approvers or evidence gates.
Leaving finance, legal, IT, internal control or subsidiaries outside the design phase.
Designing methods during final collection and changing them after local submissions arrive.
Using the assurance provider as the process owner or expecting assurance to repair management evidence.
Scheduling the board only for final approval, with no earlier methodology or materiality challenge.
Publishing the report while the website, policies, targets, investor deck or financial statements use inconsistent claims.
Legal scope, reporting boundary, applicable ESRS edition and national requirements are documented.
Programme governance, RACI, budget, board calendar and escalation are approved.
DMA, disclosure matrix, data dictionary and evidence register have named owners and deadlines.
Metric methods and group instructions are approved before main collection.
Dry runs test source access, calculations, estimates, review evidence and consolidation.
Finance, legal, control and assurance milestones are integrated into the plan.
Material limitations and open issues have decision dates and governance owners.
The final publication, digital output, assurance report and archive are controlled as one release package.
1. Which unresolved decision would move the publication date if it slipped by four weeks?
2. Are metric methods approved before subsidiaries and data owners begin the main collection?
3. Does each programme milestone produce evidence and an approval, or only a meeting and a status update?
Source check completed on 2 August 2026. This article is an educational publication draft. It does not provide legal, assurance or organisation-specific advice. Confirm the applicable ESRS edition, the final Official Journal text, national implementation and the undertaking’s facts before public use.
Changes to national CSRD scope, filing, digital-tagging or assurance deadlines.
Publication and effective date of revised ESRS or further transition reliefs.
New assurance standards, CEAOB guidance or national assurance pronouncements.
Material changes to the group, acquisitions, disposals, reporting period or ERP/data environment.
Label all resourcing figures and timing assumptions as LRA planning estimates, not ESRS requirements.
Adapt the timeline to statutory filing dates, board calendars and assurance availability.
Do not postpone materiality, methodology or boundary decisions until final drafting.
Separate management responsibility from assurance-provider procedures and advice.
Rule
KNOWLEDGE CARD PACKAGE
<p>Public practitioner article followed by an editor and publisher pack with SEO, requirement mapping, update triggers and release controls.</p>
Rule
ESRS-IMP-002
<p>First ESRS Reporting Cycle: A 15-Month Project Plan for Companies and Groups A critical-path programme covering legal scope, governance, DMA, data design, calculations, drafting, controls, assurance and publication</p>
In practice
Type
| Type | Tier | Audience — Current context |
|---|---|---|
| First-cycle implementation and resource planning guide | Tier 3 · Deep Project Guide | Project sponsors, CFOs, sustainability leads, group reporting, legal, risk, internal control, internal audit and assurance teams — Commission-adopted revised ESRS 2026 and first-cycle implementation considerations checked to 2 August 2026 |
Rule
2026 VERSION GATE
<p>The European Commission adopted revised ESRS on 3 July 2026. At the source-check date, the delegated act was not yet in force because publication in the Official Journal follows scrutiny. This article therefore uses the Commission-adopted 2026 text as forward-looking implementation guidance and keeps the 2023 ESRS as the current legal baseline. The adopted act provides for mandatory use from financial year 2027 and optional use for financial year 2026 once the act is in force. Confirm the final Official Journal text, national law and reporting period before publication.</p>
Quick orientation
Quick orientation
- Applies to
- First-time ESRS reporters and groups rebuilding a reporting cycle after a material scope, standard or systems change.
- Primary decision
- What must be decided early, which workstreams can overlap, and which dependencies sit on the critical path?
- Key sources
- Accounting Directive/national law; revised ESRS 1 and ESRS 2; applicable assurance requirements and engagement terms.
- Common confusion
- Writing the sustainability statement is the project; data and assurance can be added later.
In practice
Months
| Months | Workstream and core actions | Controlled output / gate |
|---|---|---|
| M1-M2 | Confirm legal scope, reporting period, individual or consolidated basis, applicable ESRS version, national requirements, filing location, assurance requirement and governance. Appoint sponsor, programme lead, workstream owners and technical reviewer. | Approved scope memo, version decision, governance charter, RACI, budget, board calendar and issue escalation route. |
| M2-M4 | Map strategy, business model, legal entities, activities, sectors, products, geographies, upstream/downstream relationships, existing due diligence, stakeholder processes, risk registers and public commitments. | Controlled business-model/value-chain map, evidence inventory, source register and population of potential IRO signals. |
| M3-M6 | Design and perform the DMA. Identify and assess impacts, risks and opportunities; use stakeholder and expert evidence; set thresholds; challenge severe-impact coverage; validate and approve conclusions. | Approved methodology, IRO register, evidence register, material topics/sub-topics and governance minutes. |
| M4-M8 | Create the disclosure architecture. Map material IROs to ESRS 2, topical DRs/ARs, GDR-P/A/M/T and entity-specific needs. Assign owners and define narrative and metric outputs. | Disclosure matrix, data-request catalogue, content plan, source anchors and information-materiality decision log. |
| M5-M9 | Design metrics and data controls. Fix definition, unit, boundary, calculation, source, estimates, value-chain method, evidence, comparatives, change control and review. Issue group instructions. | Approved data dictionary, methodology files, control matrix, evidence standard, consolidation instructions and dry-run template. |
| M7-M11 | Collect dry-run and in-period data; perform calculations and estimates; reconcile entity submissions; investigate exceptions; draft policies, actions, metrics, targets and financial-effect narratives. | Dry-run pack, unresolved-gap log, calculation files, review evidence, first full narrative draft and financial connectivity map. |
| M10-M13 | Operate controls and prepare for assurance. Freeze key methods, test populations and access, review evidence, challenge estimates, run disclosure and consistency reviews, prepare assurance requests and remediation. | Assurance-ready evidence index, control results, corrected exceptions, management review pack and near-final statement. |
| M13-M15 | Complete period-end data, comparatives and events after reporting period; finalise digital output and management report; obtain committee/board approvals; sign management representations; publish and archive. | Approved sustainability statement, assurance report, digital/tagged output as applicable, publication record, archive and next-cycle improvement plan. |
In practice
Critical dependency
| Critical dependency | Why it blocks later work | Early control |
|---|---|---|
| Legal scope and standard version | Determines entity population, basis of preparation, group instructions, assurance and public statement. | Written legal/accounting scope decision, explicit assumptions and trigger for reassessment. |
| Reporting boundary and value-chain map | Metric population and IRO identification cannot be stabilised without knowing what operations and relationships are relevant. | Reconcile to financial consolidation, legal entities, operations and significant business relationships. |
| DMA conclusions | Disclosure matrix, data requests and narrative cannot be finalised if material IROs and sub-topics remain open. | Time-box evidence collection, establish challenge gates and escalate unresolved severe impacts. |
| Metric definitions and methods | Late method changes create inconsistent subsidiary submissions, restatements and assurance gaps. | Approve methods before the main collection cycle and run a dry calculation. |
| Data-owner capacity and system access | A theoretically sound method fails when the population cannot be extracted, reviewed or evidenced. | Name deputies, test access, sample source records and agree cut-off rules. |
| Financial effects and connected information | Sustainability and financial narratives can contradict each other if finance joins late. | Create a joint finance-sustainability issue list and reconciliation control. |
| Assurance access and remediation time | Late evidence requests can expose gaps after the board timetable is fixed. | Agree scope, evidence protocol and milestone reviews early while preserving management responsibility. |
| Governance approval | The statement cannot be responsibly released if material judgements and limitations were not escalated. | Schedule methodology, materiality and final publication gates in the board calendar from M1. |
Rule
LRA PLANNING ESTIMATES
<p>The ranges below are implementation assumptions for planning, not ESRS requirements and not market benchmarks. Actual needs depend on group size, data maturity, number of material topics, value-chain complexity, language, systems, national law and assurance scope.</p>
In practice
Role / resource
| Role / resource | Illustrative first-cycle assumption | Comments |
|---|---|---|
| Executive sponsor | 0.05-0.10 FTE over the programme | Removes blockers and owns major governance decisions; not the day-to-day project manager. |
| Programme lead / reporting owner | 0.8-1.0 FTE during design and close; 0.5-0.8 between peaks | Controls scope, plan, issue log, statement and approvals. |
| Technical ESRS lead | 0.5-1.0 FTE depending on complexity | Maintains source set, methodology, requirement mapping and technical review. |
| DMA workstream | 2-5 core contributors over M2-M6 plus subject experts | Sustainability, risk, legal, operations, HR, procurement, finance and stakeholder expertise. |
| Data and controls team | 1-4 FTE equivalent plus distributed data owners | Depends heavily on number of metrics, systems and group entities. |
| Finance and financial effects | 0.3-1.0 FTE equivalent across FP&A, accounting and treasury | Needed for connectivity, financial effects, CapEx/OpEx and consistency. |
| Legal / compliance | 0.2-0.6 FTE equivalent plus targeted specialist review | Scope, claims, omissions, due diligence, contracts and sensitive information. |
| Group / subsidiary coordinators | Typically 0.1-0.4 FTE per significant reporting unit during collection peaks | Local collection, evidence, validation, explanation and sign-off. |
| Internal control / internal audit | Targeted design review and pre-assurance testing | Should challenge control design without taking management ownership. |
| External specialist support | Flexible, concentrated on technical gaps and surge periods | Useful for DMA facilitation, GHG, scenario analysis, nature, human rights, data models or technical review. |
In practice
Decision / output
| Decision / output | Board or committee | CFO / sponsor — Reporting lead — Functional owner — Legal / control / assurance |
|---|---|---|
| Legal scope and version | I / oversight | A — R — C — C / legal advice |
| DMA methodology and conclusions | A / oversight | C — R — C — C / challenge |
| Metric definitions and methods | I | A — R — R — C / control review |
| Data submission and evidence | I | C — A — R — C / test |
| Narrative and financial connectivity | C | A — R — R — C |
| Reliefs, omissions and significant limitations | A for significant matters | C — R — C — C / legal-assurance review |
| Final statement and publication claim | A | R — R — C — C; assurance concludes only within engagement scope |
Hypothetical scenario
ILLUSTRATIVE SCENARIO
<p>A listed manufacturing group has 18 reporting entities in nine countries, no previous ESRS statement, a mature GHG inventory, uneven workforce and supplier data, and a December year-end. It begins the programme in October of the preceding year.</p>
Illustrative only. It shows how the decision is made, not wording that can be copied or relied on.
Myth
“The first ESRS cycle can be completed after year-end because most information already exists somewhere in the business.”
Reality
Existing information is rarely defined, bounded, controlled and evidenced in the form required for a sustainability statement. The first cycle must establish methods, ownership, materiality decisions, governance and assurance-ready records before the close. Year-end should complete the process, not invent it.
In practice
Source
| Source | Role in this article | Official link |
|---|---|---|
| European Commission, Commission Delegated Regulation C(2026) 5010 and annexes, 3 July 2026 | Commission-adopted revised ESRS text, explanatory memorandum, application and transition context | Open source |
| Commission Delegated Regulation (EU) 2023/2772 | Current ESRS legal baseline at the source-check date | Open source |
| European Commission adoption announcement, 3 July 2026 | Adoption and scrutiny status of revised ESRS | Open source |
| Commission-adopted revised ESRS annex, 3 July 2026 | Primary requirements for materiality, boundaries, preparation, presentation and general disclosures | Open source |
| CEAOB guidelines on limited assurance, 30 September 2024 | Transitional high-level assurance context; subject to national rules and engagement terms | Open source |
| Accounting Directive, consolidated 18 March 2026 | EU legal framework for sustainability reporting and assurance | Open source |
Rule
INTERNAL PRODUCTION NOTE
<p>This section is for editorial, CMS, AI and technical-review workflows. It is not intended to be published as part of the public article body.</p>
Rule
PUBLICATION GATE
<p>Confirm the applicable legal text and reporting period, review all normative claims against the final Official Journal text, adapt examples to the undertaking, and obtain technical, legal, assurance and editorial sign-off before release.</p>
In practice
Instrument / requirement
| Instrument / requirement | Relationship | Role and limitation |
|---|---|---|
| Accounting Directive and national law | Legal context | Scope, management-report location, governance and assurance requirements. |
| Revised ESRS 1 | Direct | Boundary, double materiality, information materiality, presentation, comparatives and reliefs. |
| Revised ESRS 2 BP, GOV, SBM and IRO | Direct | Basis, governance, strategy, materiality process and disclosure architecture. |
| Revised ESRS 2 GDR-P/A/M/T | Implementation | Policies, actions, metrics and targets workstreams. |
| CEAOB limited-assurance guidelines / national pronouncements | Assurance context | Risk-based preparation; not a substitute for engagement terms or national rules. |
Take it with you
The checklists as a working spreadsheet
Every checklist and table on this page, with empty status, owner and evidence columns for your team to fill in and keep.
✓ LRA AI Assistant · Human-in-the-loop
Ask about this guide
It answers from this page, and reaches into the linked disclosure cards when your question is about the standard itself. Your first two answers are free without signing in.
Go deeper · ESRS
ESRS and CSRD training
Double materiality, datapoints and the sustainability statement, with a mentor on your own report.
Available as Guided Flex, Live Cohort, 1:1 Expert Mentorship or Corporate Programme.