Why this guide exists
Running multi-framework reporting as one program is materially cheaper and lower-risk than running CSRD, CDP, SBTi, and California as separate projects. A typical mid-cap multinational in 2026 carries between three and seven binding or quasi-binding obligations, with significant data overlap and meaningful methodological divergence between regimes. What follows is a working approach to that consolidation, plus the lookup material to support it.
Who it is for
Sustainability leads, controllers, and CFOs at mid-to-large enterprises with at least two reporting obligations who already understand one framework deeply.
Cover to cover takes 30 to 40 minutes. Readers at the start of a CSRD program should begin with Chapter 3. Readers blocked on Scope 3 should skip to Chapter 7. Readers needing a calendar or scope check should jump to Appendix A.
Contents
Part one. The argument
Chapter 1. The case for one reporting program *(4 min)*
Chapter 2. The five datapoint families that show up everywhere *(6 min)*
Part two. The frameworks
Chapter 3. CSRD as the spine *(7 min)*
Chapter 4. The US regulatory stack *(6 min)*
Chapter 5. Voluntary frameworks that still matter *(6 min)*
Part three. The hard parts
Chapter 6. Double materiality *(5 min)*
Chapter 7. Scope 3 is where most programs fail *(7 min)*
Chapter 8. Governance, controls, assurance *(6 min)*
Appendices
Appendix A. Frameworks reference
Appendix B. Cross-reference matrix
Appendix C. 12-month rollout calendar
Appendix D. Glossary
---
Also, try our multi-framework assessment tool to see where you currently stand as an organiszation.
---
Chapter 1. The case for one reporting program
Most large companies now report under several frameworks at once.
A French company with German subsidiaries and California operations now files CSRD, CA SB-253, CA SB-261, CDP, and an SBTi target, each on its own deadline, each pulling overlapping data through different methodological rules.
Three regimes drove the shift. CSRD bound EU companies starting FY2024. California SB-253 and SB-261 took effect in 2025 and 2026 after CARB rulemaking. The SEC's federal climate rule was effectively paused in March 2025, which moved the centre of gravity onto California, where thresholds are lower. CDP, SBTi, and ISSB have remained active alongside the new regulatory load.
Separate-project programs compound cost without reducing work
Treating each framework as its own project multiplies cost and audit risk without removing any underlying work. Four specific failure modes follow.
1. **Lineage drifts.** The same Scope 1 number appears differently in CDP, ESRS E1-6, and SB-253 because each analyst applies a different cut of the source data. Reasonable assurance is the threshold at which auditors stop tolerating the divergence.
2. **Suppliers receive duplicate requests.** Same data, different templates, four times a year. Response rates collapse.
3. **Cost compounds.** Overlapping software, duplicated assurance, multiple consultancies.
4. **The team reports instead of decarbonising.** Disclosure consumes the year rather than a quarter of it.
Build around the broadest framework you owe
Sustainability reporting should be run as one program built around the broadest framework in scope. That framework is almost always CSRD. ESRS covers approximately 70% of what CDP, SBTi, ISSB, and CA SB-253 also require, with cleaner methodological guidance than most. Companies collect once at CSRD-grade and render to each framework's format and timeline from the same source.
Render is the operative word. A single audit-ready dataset, with documented lineage, is shaped to each regime's filing requirements rather than rebuilt for each.
Consolidation shifts disclosure from year-round to quarterly
- **Lineage is consolidated.** Auditors trace numbers to source once. Reasonable assurance becomes feasible inside the CSRD timeline rather than a 2030 problem.
- **Supplier engagement consolidates.** A single annual cycle covers CDP supply chain, CSRD value-chain coverage, SBTi Category 1, and SB-253 Scope 3.
- **Internal capacity is restored.** Disclosure runs quarterly on a stable data layer, freeing time for operational decarbonisation.
How to read the rest
Eight chapters totalling approximately 40 minutes. Each ends with a CTA to the relevant MFRA module.
- Chapter 2: the five datapoint families that recur across frameworks.
- Chapter 3: why CSRD is the data-layer spine.
- Chapters 4 and 5: the binding US stack and the voluntary frameworks that drive procurement and investor activity.
- Chapters 6, 7, 8: the three areas where programs most often fail.
- Appendix A: lookup material for wave maps and framework details.
Summary
Companies that paused after the CSRD Omnibus delay are approximately eighteen months behind their peers. Companies that used the time to consolidate the data layer now run multi-framework programs at roughly the same headcount as their old single-framework CSRD prep. That gap compounds with each reporting cycle.
[Run the MFRA →](https://example.pulsora.com/mfra)
---
Chapter 2. The five datapoint families that show up everywhere
The same data recurs across every major framework.
Approximately 70% of any framework's quantitative requirements concentrate in five datapoint families. Building these well at the granularity the strictest framework demands removes most of the duplication across regimes.
1. GHG inventory
Required by every regime: CSRD ESRS E1-6, CA SB-253, ISSB IFRS S2 §29, CDP C6, SBTi target baselines.
Divergences:
- Organisational boundary: operational control, financial control, or equity share. CSRD requires consistency and disclosure. SBTi locks the chosen boundary across all targets.
- Scope 2 method: location-based and market-based. CSRD and CDP require both.
- Scope 3 categorisation: GHG Protocol's 15 categories versus SBTi's near-term boundary at 67%+ coverage (Criterion 5.1).
Common error: organisations select a boundary for CDP and inherit it into CSRD without verifying ESRS E1-6's value-chain coverage requirements. By Year 5, ESRS demands 95%+ coverage of material Scope 3.
2. Energy
Required by CSRD ESRS E1-5, CA SB-253 (as Scope 2 input), ISSB S2, CDP C8.
Granularity: total consumption, renewable share, non-renewable share, sourcing mix.
Divergence: how purchased renewables are counted. PPAs, EACs, on-site generation, and unbundled certificates apply differently in market-based versus location-based Scope 2.
Common error: company-procured electricity is straightforward; tenant-controlled facilities and supplier-embedded energy are not. Most data gaps reside there.
3. Water and waste
Required by CSRD ESRS E3 (water), E5 (resource use, waste), CDP Water (separate questionnaire), GRI 303, GRI 306.
Granularity: withdrawal, consumption, discharge by destination, water-stress sites, recycled volumes, waste by hazard class and treatment.
Divergence: water-stress methodology (WRI Aqueduct, WBCSD Water Tool, internal). Waste classification differs between EU Waste Framework Directive and US RCRA categories.
Common error: site-level data quality. Most organisations hold consolidated utility bills rather than metered withdrawal-by-source data.
4. Workforce
Required by CSRD ESRS S1, GRI 401-405, parts of CDP supply chain, ISSB S1 §27 (governance only).
Granularity: headcount by employment type, gender, age band, country, pay gap, training hours, incidents, turnover.
Divergence: gender taxonomy, contractor and temporary worker inclusion, country attribution rules.
Common error: HRIS fragmentation. Reconciliation across multiple regional HR systems is the substantive work.
5. Governance and risk
Required by CSRD ESRS G1 (business conduct) and ESRS 2 (general), ISSB S1 §27-31, TCFD, SB-261.
Content: board oversight of sustainability, management responsibility, risk management process, scenario analysis.
Divergence: scenario analysis depth. TCFD and ISSB require quantitative scenarios. CSRD ESRS guidance is lighter on this point.
Common error: legal owns disclosure language but does not sit in the data layer. Narrative drifts from underlying evidence.
Collect at the strictest framework, not the average
The strictest framework sets the collection bar. CSRD is almost always the strictest: site-level, monthly cadence, both Scope 2 methods, and 15 Scope 3 categories with at least spend-based coverage.
Summary
Site-level collection across these five families allows organisations to answer 70% of any framework with stratification. Consolidated entity-level collection caps that figure at about 30%, with the remainder rebuilt for every new framework. The Year 1 granularity decision is the highest-leverage call in the program.
[Run MFRA Module 3 →](https://example.pulsora.com/mfra/module-3)
---
Chapter 3. CSRD as the spine
ESRS is the broadest sustainability standard currently in force.
Because ESRS is broader than CDP, more rigorous than ISSB, and more demanding on lineage than CA SB-253, building to CSRD-grade allows almost every other obligation to be produced as a render exercise. For organisations entirely out of CSRD scope, ISSB IFRS S1/S2 plays the same role; the logic of this chapter applies with substitution.
ESRS covers ~70% of every other framework
Approximate quantitative overlap, framework by framework. Qualitative narrative overlap is roughly 50%.
- ESRS E1 covers ~95% of CDP Climate, all of CA SB-253 quantitative, all of SBTi baseline, all of ISSB IFRS S2.
- ESRS E2 covers EU ETS, REACH, most CDP supply-chain pollution.
- ESRS E3 covers most of CDP Water.
- ESRS E4 covers TNFD core, CDP Forests.
- ESRS S1-S4 covers GRI 4xx, UNGP, UK Modern Slavery Act.
- ESRS G1 covers TCFD governance, ISSB S1 §27-31.
ESRS E5 (circular economy) has no clean overlap; novel datapoints are required regardless of approach. Aggregate quantitative datapoint overlap with major voluntary frameworks: approximately 70%.
Five gaps that require framework-specific add-ons
Five distinct gaps require explicit planning rather than collection-layer work.
- SBTi target validation against a 1.5°C pathway.
- CDP scoring nuance, where compliance with ESRS E1 alone does not produce an A score.
- TCFD scenario depth, where ESRS guidance is lighter.
- SB-261's TCFD-aligned narrative format and NYDFS insurance disclosures.
- Sector-specific SASB metrics adopted by ISSB.
Build to ESRS once, then render to every other framework
1. Adopt ESRS as the data dictionary. Every datapoint defined, every boundary documented, every methodology recorded.
2. Collect at the site or entity granularity ESRS demands.
3. Establish lineage and audit trail to limited-assurance standard from day one.
4. Render to CDP, SBTi, SB-253, and ISSB from the same dataset.
5. Cover the 30% delta with framework-specific add-ons rather than duplicate collection.
Multi-framework programs run at single-framework headcount
Five collection cycles become one, with one assurance engagement (or two firms, never five), one supplier loop, one internal-controls program, and one platform decision. The principal saving is headcount: multi-framework programs run at the same headcount as single-framework CSRD prep once the spine is in place.
When CSRD is not the right spine
Three exceptions.
- No EU presence, no EU customer demands, no Wave 4 exposure: ISSB IFRS S1/S2.
- US-only, no California: a hybrid of CDP Climate and SBTi.
- Listed in Tokyo, Singapore, or Hong Kong with no EU or California exposure: the local ISSB-aligned standard.
Summary
For organisations inside CSRD scope, the choice is to run CSRD-grade or to rebuild the data layer twice within four years. The Omnibus delay does not change the underlying logic.
[Run MFRA Module 4 →](https://example.pulsora.com/mfra/module-4)
---
Chapter 4. The US regulatory stack
Mandatory US disclosure has moved to the states.
With the SEC rule dormant since March 2025, California is the binding floor and several states are drafting copies. The federal picture can shift with a future administration; planning around state law is the appropriate posture for now. Detailed thresholds and timelines for each regime live in Appendix A. This chapter focuses on what each adds beyond a CSRD or ISSB spine.
SB-253 is a CSRD render with extras
For organisations already CSRD-scoped, ESRS E1-6 covers all of SB-253 Scope 1+2 quantitative requirements and most of Scope 3. The SB-253 filing is a render exercise.
What requires separate attention:
- Lower revenue threshold ($1B worldwide) than typical CSRD scope, capturing US-centric organisations with no EU operations.
- CARB-maintained registry filing with separate methodology disclosure, distinct from ESEF.
- Scope 3 timeline is tighter than CSRD's value-chain coverage build, with limited assurance from 2030.
Statute: California Health and Safety Code §38532. CCR Title 17.
SB-261 wraps ESRS E1 in TCFD format
A separate regime with a lower threshold ($500M worldwide revenue) and a TCFD-aligned narrative format. Maps to ESRS E1 IRO disclosures plus a TCFD-aligned wrapper. Negligible incremental data work where the CSRD spine is in place.
First biennial report due January 1, 2026. Statute: California Health and Safety Code §38533.
NYDFS
NY-licensed insurers above asset thresholds. TCFD-aligned, annual, with proportionality provisions. Updated 2024.
State pipeline
Washington, Massachusetts, Illinois, and New York have introduced bills modelled on SB-253 and SB-261 across 2025 and 2026. None law at time of writing. Convergent pattern: $500M-$1B thresholds, Scope 1+2 first then Scope 3, TCFD or ISSB-aligned narrative, public posting. If California holds and additional states pass, the multi-state burden becomes meaningful: same data, different filing windows.
Federal tail risks
- **EPA GHGRP.** Facility-level emissions for ~8,000 large emitters. Predates the SEC rule, still in force.
- **FTC Green Guides.** Updated guidance expected. Affects marketing claims, not financial filings.
## For US-only organisations with no EU exposure
ISSB IFRS S2 serves as the spine. SB-253 covers most of S2 Scope 1+2. SB-261 is TCFD-format, fully covered by S2. CDP and SBTi as voluntary overlays.
Summary
California is the binding US regime. SB-253 is the data ask, SB-261 is the narrative ask. Both render from a CSRD-grade or ISSB-grade spine with little incremental work. Dedicated SB-253 programs separate from CSRD or ISSB are duplicated effort.
[Run MFRA Module 6 →](https://example.pulsora.com/mfra/module-6)
---
Chapter 5. Voluntary frameworks that still matter
Voluntary frameworks still drive procurement and investor decisions.
Voluntary in the regulatory sense does not mean optional in the commercial sense. Customers, investors, and procurement organisations treat CDP scores and SBTi validation as effective gates. The relevant question for each framework below: how does it render from the spine, and what is distinctive enough to require separate work.
SBTi
Renders from the same Scope 1+2+3 inventory used for CSRD. The validation work is the additional ask, not the data work.
What requires separate attention:
- Criterion 5.1: 67%+ Scope 3 coverage for near-term targets, higher than ESRS E1-6 value-chain coverage at most maturity stages.
- FLAG sector guidance for 20%+ land-related emissions, not covered by ESRS.
- Validation queue 12-18 months. Submission must be planned against the queue, not the target year.
Most CDP A-listed buyers expect their large suppliers to hold validated targets.
CDP
Renders the climate and water questionnaires from CSRD ESRS E1 and E3.
What requires separate attention:
- Scoring penalises spend-based methodology for material Scope 3 categories, where ESRS allows it with disclosure.
- C12 value chain engagement scoring rewards specific procurement behaviours not asked by ESRS.
- Supply chain module reaches suppliers regardless of the buyer's spine. Suppliers to CDP members cannot opt out.
B or above is a typical procurement-floor expectation.
ISSB IFRS S1 and S2
Renders for non-EU subsidiaries from the CSRD-grade dataset. The principal divergence is materiality: ISSB is enterprise-value only, CSRD is double.
Adoption status, mid-2026:
- UK SDS: endorsement scheduled 2026, mandatory FY2027
- Australia AASB S2: in force, Group 1 reporting FY2025
- Japan SSBJ: adopted March 2025, METI consultation on mandatory schedule
- Canada CSDS: voluntary
- Singapore SGX: phased mandatory 2025-2027
Where non-EU subsidiaries sit in adopting jurisdictions, ISSB binds the local entity while CSRD binds the EU side.
TCFD
Absorbed into ISSB S2. Still cited by name in SB-261 and UK premium-listing rules. No fresh work where ISSB S2 alignment is in place.
GRI
Largely superseded for EU companies by CSRD ESRS. The GRI/EFRAG interoperability map handles render where a non-EU customer requests it.
Render summary
- CDP: render from ESRS E1 and E3 plus supplier engagement data. Target B or above.
- SBTi: validate against the CSRD inventory. Near-term first, then net-zero. 6-9 months.
- ISSB: render IFRS S1 and S2 for non-EU subsidiaries from the CSRD-grade dataset.
- TCFD: covered by SB-261 narrative and CSRD ESRS E1.
- GRI: only on customer demand.
Summary
Voluntary frameworks function as reputational gates, not regulatory ones. They render from the same CSRD-grade data layer. Separate CDP, SBTi, and ISSB programs are duplicated work.
[Run MFRA Module 8 →](https://example.pulsora.com/mfra/module-8)
---
Chapter 6. Double materiality
Double materiality is a substantial shift from prior frameworks.
CSRD requires both impact materiality (the company's effect on people and planet) and financial materiality (sustainability's effect on the company). ISSB and TCFD require only the latter. CDP addresses both indirectly through scoring. For organisations whose disclosure muscle was built around TCFD or ISSB alone, the shift to assessing impact materiality is often the largest single change in approach.
The materiality assessment is now an audit artefact
1. **Stakeholder engagement becomes a datapoint.** Documented engagement with internal and external stakeholders, scored and traceable.
2. **Value-chain scope expands.** Impact assessment covers operations and the value chain.
3. **Both lenses are scored together.** A topic material on either axis triggers full ESRS topical disclosure.
4. **The materiality assessment is auditable.** A documented process with explicit methodology and recorded approvals, not a workshop output.
Either-axis materiality triggers full topical ESRS disclosure
**Statutory base:** ESRS 1 §3 requires a materiality assessment per topical standard.
**Threshold:** any impact, risk, or opportunity rated material on either axis triggers full disclosure of the corresponding ESRS topical standard.
**Frequency:** re-assessment at least every three years. Annual is recommended and increasingly the auditor expectation.
**Documentation:** stakeholder list, engagement methods (interviews, surveys, public consultation), scoring methodology, results, board approval.
Financial-materiality muscle memory blocks the impact axis
Decades of public-company practice trained finance functions to assess only one axis: whether a matter affects cash flows or valuation. Impact materiality asks a different question and requires sustainability domain expertise that typically lives outside finance. Most finance functions cannot run an impact assessment without sustainability-team support. TCFD reinforced single-axis thinking from 2017 onwards.
Defensible assessments are not workshops
A cross-functional team spanning sustainability, finance, legal, procurement, and HR, with one accountable owner.
A stakeholder list of 30 to 100 internal and external voices: investors, customers, employees, suppliers, NGOs, community representatives, and regulators where relevant. Engagement is documented, not assumed.
A heat map across both axes with a written scoring methodology. Severity, scale, and irremediability for impact. Probability, magnitude, and time horizon for financial.
Results that feed CSRD topic selection and strategic planning. A materiality assessment that does not influence operational decisions is a paperwork exercise.
A weak materiality assessment doubles disclosure workload
A weak materiality assessment roughly doubles disclosure workload and drives mid-cycle restatement. Auditors expand scope to all topical ESRS by default when the assessment is inadequate. Year 2 then surfaces topics that should have been material in Year 1, triggering restatement and variance work. Reputational risk follows when stakeholders read the published assessment and disagree publicly with conclusions that look thin.
Time and headcount
First cycle: 6-8 weeks of cross-functional work where a stakeholder list already exists; 12-16 weeks from scratch. Subsequent cycles: 3-4 weeks for refresh, longer if the business changes materially. Typical headcount commitment is 0.3-0.5 FTE during the active assessment, distributed across sustainability and finance.
Interaction with ISSB
ISSB's enterprise-value-only materiality is a subset of CSRD's. The financial axis built for ESRS satisfies ISSB. The impact axis is the additional work CSRD imposes. Organisations scoped only to ISSB perform half the work. Organisations scoped to both should build full double materiality and render the financial-only view for ISSB.
Summary
Double materiality is the largest mindset shift for organisations coming from a TCFD or ISSB-only program. Stakeholder engagement is consistently underestimated and frequently retrofitted as a workshop. Six to eight weeks of cross-functional work in the first cycle is a realistic budget, with the output treated as a strategic input rather than a compliance artefact.
[Run MFRA Module 9 →](https://example.pulsora.com/mfra/module-9)
---
Chapter 7. Scope 3 is where most programs fail
Scope 3 is the most common point of program failure.
The GHG Protocol defines 15 Scope 3 categories. Materiality varies widely by sector and business model, and for most organisations a small number of categories drive the bulk of the inventory while the rest contribute marginally. Ranking categories early, before any data collection begins, saves significant rework.
The 15 categories, ranked by typical materiality
The ranking below reflects a typical mid-cap manufacturer or B2B services firm. Sector-specific adjustment is required.
**Almost always material:**
1. Category 1. Purchased goods and services.
2. Category 11. Use of sold products. Particularly for energy-using products.
3. Category 4. Upstream transportation and distribution. Material for logistics-heavy businesses.
**Often material:**
4. Category 2. Capital goods. Manufacturers and real estate.
5. Category 10. Processing of sold products. B2B intermediates.
6. Category 9. Downstream transportation. B2C and marketplaces.
**Sometimes material:** Categories 5 (waste from operations), 12 (end-of-life of sold products), 8 (upstream leased assets).
**Rarely material:** Categories 6 (business travel), 7 (employee commuting), 3 (fuel and energy related), 13 (downstream leased assets), 14 (franchises).
**Sector-specific:** Category 15 (investments). Banks, insurers, and asset managers, where this can constitute the entire footprint.
Methodology, ranked by quality
- **Spend-based:** input-output coefficients applied to procurement spend. Fast and inexpensive. Lowest quality.
- **Activity-based with industry averages:** physical units (kg, km, kWh) multiplied by industry-average emission factors. Mid quality.
- **Activity-based with supplier-specific data:** physical units multiplied by the supplier's actual product carbon footprint. Highest quality.
- **Hybrid:** spend-based for tail spend, activity-based for top suppliers. Where most mature programs land.
Which methodology each framework accepts
- CSRD ESRS E1-6: prefers activity-based, allows hybrid; spend-based only with explicit disclosure of methodology limitations.
- CA SB-253: GHG Protocol-aligned; methodology must be disclosed. No hierarchy specified by CARB at time of writing.
- SBTi: spend-based acceptable for the baseline year. Demonstrating progress on near-term targets requires activity-based. Criterion 5.1 demands 67%+ Scope 3 coverage.
- CDP supply chain: encourages supplier-specific. Scoring penalises spend-based for material categories.
Procurement data and supplier engagement are where Scope 3 fails
Five common failure modes account for most program problems.
1. **Procurement data quality.** Spend categorisation errors propagate into Category 1 emissions.
2. **Supplier engagement response rates.** Year 1 typical: 20-40%. Year 3 with sustained engagement: 50-70%.
3. **Boundary confusion** between the company's value chain and its supplier's, particularly Category 1 versus Category 11 in B2B.
4. **Double counting**, common between Categories 1 and 11 when selling to a manufacturer who incorporates the product.
5. **Volatility.** Emission factor updates change prior-year numbers, requiring variance analysis.
CDP supply chain as a forcing function
Suppliers to CDP members receive CDP supply chain requests. This is the most common entry point to Scope 3 work for the mid-market. The request asks for product-level emissions, which forces activity-based methodology.
Four-year sequencing
- **Year 1:** spend-based across all categories. Identify top 3 by emissions. Methodology documented.
- **Year 2:** activity-based on top 3 categories. Begin supplier engagement on top 20 suppliers.
- **Year 3:** supplier-specific data on top 5 suppliers in top categories.
- **Year 4:** 67%+ activity-based coverage to satisfy SBTi Criterion 5.1. CSRD value-chain coverage at 95% of material datapoints.
Headcount and budget
A typical mid-cap Scope 3 program: 0.5-1.0 FTE program manager, 0.25-0.5 FTE on procurement data quality, 0.1-0.3 FTE on supplier engagement. External tooling: $50k-$150k per year, plus consultant hours for first-year setup.
Summary
High-quality Scope 3 across all 15 categories in Year 1 is not a realistic target. The two or three categories that materially drive the inventory should be developed in depth. Spend-based is acceptable as a starting point, and most auditors will accept it in Year 1.
[Run MFRA Module 11 →](https://example.pulsora.com/mfra/module-11)
---
Chapter 8. Governance, controls, assurance
Sustainability data is now subject to external audit.
CSRD limited assurance applied from FY2024. Reasonable assurance phases in by 2028. CA SB-253 phases assurance over 2027 to 2030. Audit creates demand for internal controls, which moves sustainability into finance's operational scope.
Limited versus reasonable assurance
The distinction is the audit standard.
**Limited assurance.** The auditor confirms nothing has come to attention that suggests material misstatement. A negative opinion. Sample-based.
**Reasonable assurance.** The auditor confirms the data is accurate. A positive opinion. The same standard as financial audit. Substantive procedures on every material datapoint.
The work to achieve reasonable assurance is approximately 3 to 5 times the work for limited.
What auditors test under limited assurance (FY2024 onwards)
Five sample-based procedures.
1. Materiality assessment process and documentation
2. Methodology consistency across reporting periods
3. Sample-based recalculation of key datapoints
4. Existence of internal controls (not yet operating effectiveness)
5. Reasonableness of assumptions (factor selection, organisational boundary, methodology)
What auditors will test under reasonable assurance (FY2027 onwards)
Substantively more.
1. Operating effectiveness of internal controls over sustainability reporting (ICSR)
2. Detailed substantive procedures on every material datapoint
3. End-to-end lineage from source system to disclosure
4. Segregation of duties between data preparation and review
5. Management certification analogous to SOX 302/404
ICSR. The controls a sustainability program needs
A direct analogue of ICFR for financial reporting, built from Year 1 even where assurance is two years out.
- Documented data dictionary: every datapoint defined, source system specified, boundary documented, methodology recorded.
- Change management: methodology decisions logged with rationale and approver.
- Approvals for emission factor changes, boundary changes, and methodology changes.
- Reconciliation: year-on-year variance analysis, with explanation for any variance above 5%.
- Segregation of data preparation and data review.
- Management certification of disclosed numbers before publication.
Board oversight (ESRS 2 GOV-1)
Five mandatory disclosure items.
- The board committee with sustainability oversight
- Frequency of review (typically quarterly)
- Sustainability KPIs in board reporting
- Linkage to executive remuneration where applicable
- Sustainability-relevant skills and experience of board members
ISSB IFRS S1 §27-31 requires similar but less prescriptive disclosure.
Sustainability data now meets the financial audit standard
Audit-grade evidence on sustainability data now meets the same standard as financial data, and producing it requires controls discipline that sustainability teams typically do not own. ICSR mirrors ICFR. Most existing sustainability tooling cannot produce audit-grade lineage, which moves tooling decisions into the CFO's remit.
Practical implications for 2026 and 2027
Five priorities.
1. Select an auditor early. Limited and reasonable assurance can be performed by different teams or different firms.
2. Document methodology decisions in writing, including approvals.
3. Build the variance-analysis discipline. The first Year 1 to Year 2 reconciliation is the first meaningful test of data layer stability.
4. Treat sustainability software as in scope for ICSR controls testing.
5. Plan for management certification. Identify the signatory and the evidence needed for them to sign with confidence.
Lineage replaces spreadsheets at audit time
Audit-grade lineage is the differentiator. A platform that can produce a click-through trail from any disclosed number to its source system, with documented methodology and approval history, will pass audit. A spreadsheet-and-PDF stack will not. Changing tooling at the FY2027 reasonable-assurance threshold is significantly more expensive than changing it now.
Summary
Assurance pulls sustainability into finance. Organisations treating sustainability as an isolated function will struggle with the FY2027 reasonable assurance threshold. The trajectory is set. The organisations acting now are the ones the auditors will trust two years from now.
[Run MFRA Module 13 →](https://example.pulsora.com/mfra/module-13)
---
Appendix A. Frameworks reference
Wave maps, scope thresholds, key clauses, and one-pagers for every framework referenced in this guide. Last updated 2026-05-03.
## Part 1. Wave maps and scope thresholds
The reporting map has shifted three times in eighteen months. CSRD timelines moved under the EU Omnibus simplification package. The SEC climate rule was effectively abandoned in early 2025. California's SB-253 and SB-261 went live on schedules that surprised most legal teams.
EU. CSRD after the Omnibus
The Stop-the-Clock directive (Directive (EU) 2025/794, adopted April 2025) delayed CSRD Waves 2 and 3 by two years and Wave 4 by one year. The substantive Omnibus content directive raised thresholds. Both moved through the Council and Parliament during 2025.
- **Wave 1.** Large public-interest entities already under NFRD with more than 500 employees. FY2024 reports filed in 2025. Already complete.
- **Wave 2.** Large EU companies meeting two of three thresholds (€50M turnover, €25M assets, 250 employees). Originally FY2025/2026, now FY2027/2028.
- **Wave 3.** Listed SMEs on EU regulated markets. Originally FY2026, now FY2028/2029.
- **Wave 4.** Non-EU parents with €150M+ EU turnover and an EU subsidiary or branch above thresholds. Originally FY2028/2029, now FY2029/2030.
The Omnibus also raised the employee threshold to 1,000 in the substantive proposal, still in trilogue. Treat 1,000 as the planning number, 250 as the fallback.
ESRS as adopted by Delegated Regulation (EU) 2023/2772, with sector-specific standards still pending. Filing format is digital tagging via ESEF taxonomy from Wave 2 onwards.
United States
California sets the binding floor. SEC dormant since March 2025. State pipeline (Washington, Massachusetts, Illinois, New York) under consideration but not yet law.
| Regime | Threshold | Timeline | Statute |
|---|---|---|---|
| CA SB-253 | $1B+ worldwide revenue | Scope 1+2 due 2026; Scope 3 due 2027 | §38532 |
| CA SB-261 | $500M+ worldwide revenue | First biennial report Jan 1, 2026 | §38533 |
| NYDFS | NY-licensed insurers | Annual, TCFD-aligned | NYDFS guidance, updated 2024 |
United Kingdom
UK SDS based on IFRS S1 and S2 scheduled for endorsement in 2026, mandatory FY2027. TCFD already mandatory for listed companies. SDS will absorb TCFD obligations once endorsed.
Australia
AASB S2 mandatory in three groups. Group 1 (500+ employees, $1B+ revenue, $500M+ assets): FY2025 reports filed 2026. Group 2: FY2026. Group 3: FY2027.
Other jurisdictions
- **Japan.** SSBJ standards adopted March 2025. METI consultation on mandatory schedule.
- **Canada.** CSDS-1/CSDS-2 voluntary as of 2025, mandatory adoption pending.
- **Singapore.** SGX climate disclosure mandatory for listed companies, phased 2025-2027.
Quick scope test
Three questions cover most obligations.
1. Does any group entity have €50M+ EU turnover and either €25M EU assets or 250 EU employees? If yes: CSRD Wave 2, or Wave 4 for non-EU parents.
2. Does the consolidated group have $1B+ worldwide revenue and any operations in California? If yes: CA SB-253. Scope 1+2 due 2026.
3. Does the consolidated group have $500M+ worldwide revenue and any operations in California? If yes: CA SB-261. First report due Jan 1, 2026.
Two or three "yes" answers indicates a multi-framework program.
---
Part 2. Framework one-pagers
CSRD (Corporate Sustainability Reporting Directive)
**Governing body:** European Commission, EFRAG (technical), competent national authorities (enforcement).
**Scope:** EU companies above thresholds, plus non-EU parents with significant EU presence (Wave 4).
**Threshold (post-Omnibus):** 1,000 employees and either €50M turnover or €25M assets, group consolidated. Threshold under trilogue, fallback 250 employees.
**Timeline:** Wave 1 already filed. Wave 2 FY2027/2028. Wave 3 FY2028. Wave 4 FY2029.
**Key clauses:** ESRS 1 §3 (materiality), ESRS 2 GOV-1 (board oversight), ESRS E1-6 (Scope 1, 2, 3 emissions), ESRS S1-S4 (social), ESRS G1 (governance).
**Assurance:** limited from FY2024, reasonable approximately FY2028 (phased per Member State).
**Format:** Sustainability Statement integrated with management report; ESEF digital tagging via XBRL.
**Citation:** Directive (EU) 2022/2464; Delegated Regulation (EU) 2023/2772.
CA SB-253 (Climate Corporate Data Accountability Act)
**Governing body:** California Air Resources Board (CARB).
**Threshold:** $1B+ worldwide revenue, doing business in California.
**Timeline:** Scope 1+2 due 2026 (FY2025); Scope 3 due 2027 (FY2026).
**Assurance:** Limited Scope 1+2 from 2027. Reasonable Scope 1+2 from 2030. Limited Scope 3 from 2030.
**Format:** Public disclosure to a CARB-maintained registry, with methodology disclosure required.
**Citation:** California Health and Safety Code §38532. CCR Title 17.
CA SB-261 (Climate-Related Financial Risk Act)
**Governing body:** CARB.
**Threshold:** $500M+ worldwide revenue, doing business in California.
**Timeline:** First biennial report due January 1, 2026.
**Format:** TCFD framework or ISSB IFRS S2 substitute. Posted on company website, indexed by CARB.
**Citation:** California Health and Safety Code §38533.
SEC Climate Disclosure Rule
**Governing body:** US Securities and Exchange Commission.
**Status:** Adopted March 2024, stayed days later, defence ended March 2025. Treat as dormant.
**Citation:** 17 CFR Parts 210, 229, 232, 239, 249.
ISSB IFRS S1 and S2
**Governing body:** International Sustainability Standards Board, under IFRS Foundation.
**Scope:** Set by jurisdictional adoption.
**Adoption (mid-2026):** UK SDS endorsement scheduled 2026 (mandatory FY2027). Australia AASB S2 in force, Group 1 FY2025. Japan SSBJ adopted March 2025. Canada CSDS voluntary. Singapore SGX phased 2025-2027.
**Key clauses:** S1 §27-31 (governance), S1 §33-35 (strategy), S2 §22 (financial effects), S2 §29-30 (metrics).
**Citation:** IFRS S1, IFRS S2 (issued June 2023).
TCFD
**Governing body:** Originally Financial Stability Board, disbanded 2024. Stewardship transferred to ISSB.
**Status:** Absorbed into ISSB IFRS S2. Still cited by CA SB-261 and UK premium-listing rules.
**Pillars:** Governance, Strategy, Risk Management, Metrics & Targets. 11 recommended disclosures.
**Citation:** Final TCFD Recommendations (June 2017), updated 2021.
SBTi
**Governing body:** SBTi (independent body, joint initiative of CDP, UNGC, WRI, WWF).
**Standards:** Corporate Net-Zero Standard v1.2. Sector guidance for FLAG, financial institutions, oil and gas, cement.
**Key criteria:** Criterion 5.1 (Scope 3 67%+ near-term coverage), Criterion C12 (FLAG for 20%+ land-related sectors).
**Validation queue:** 12-18 months.
CDP
**Governing body:** CDP, UK-registered charity.
**Questionnaires:** Climate, Water, Forests. Annual.
**Scoring:** D, D-, C, C-, B, B-, A-, A. F for non-disclosure.
**Supply chain module:** Member companies cascade requests to suppliers.
**Key questions:** C6.5 (Scope 1), C6.7 (Scope 2 location/market), C12 (value chain).
UK SDS
**Governing body:** Department for Business and Trade / FCA.
**Standards:** UK SDS S1 and S2, based on IFRS S1 and S2 with UK amendments.
**Timeline:** Endorsement scheduled 2026, mandatory FY2027.
Australia AASB S2
**Governing body:** AASB, ASIC enforcement.
**Timeline:** Group 1 FY2025/2026; Group 2 FY2026; Group 3 FY2027.
**Standard:** AASB S2 based on IFRS S2 with Australian-specific climate context.
GRI
**Governing body:** Global Sustainability Standards Board (GSSB).
**Standards:** GRI Universal Standards (101, 102, 103) and Topic Standards (200s economic, 300s environmental, 400s social).
**Status:** Largely superseded for EU companies by CSRD ESRS. Interoperability guidance maps GRI to ESRS.
NYDFS Insurance Climate Guidance
**Governing body:** New York Department of Financial Services.
**Scope:** NY-licensed insurers above asset thresholds.
**Format:** TCFD-aligned, with proportionality.
**Timeline:** Annual disclosure since 2022, revised 2024.
[Run MFRA Module 1 →](https://example.pulsora.com/mfra/module-1)
---
Appendix B. Cross-reference matrix
The same datapoint, where it lands across eight frameworks. Last updated 2026-05-03.
This appendix maps approximately 80 datapoints across the major frameworks. The full filterable version lives in the Webflow CMS as the `Datapoint Cross-Reference` collection. The structured sample below is the source.
Each row is a single datapoint. Columns show the corresponding clause or question reference per framework. Empty cells indicate the datapoint is either not asked or asked at a higher level of abstraction.
GHG inventory family
| Datapoint | CSRD | CA SB-253 | ISSB | CDP | SBTi | GRI | TCFD |
|---|---|---|---|---|---|---|---|
| Scope 1 emissionaps, tCO2e | ESRS E1-6 §44 | §38532(c)(1)(A) | S2 §29(a)(i) | C6.1 | Required | 305-1 | Metrics |
| Scope 2 location-based, tCO2e | ESRS E1-6 §44 | §38532(c)(1)(B) | S2 §29(a)(ii) | C6.3 | Required | 305-2 | Metrics |
| Scope 2 market-based, tCO2e | ESRS E1-6 §44 | (allowed) | S2 §29(a)(ii) | C6.3 | Required | 305-2 | Metrics |
| Scope 3 Cat 1 (purchased goods) | ESRS E1-6 §51 | §38532(c)(1)(C) | S2 §29(a)(iii) | C6.5 | If material | 305-3 | Metrics |
| Scope 3 Cat 11 (use of sold products) | ESRS E1-6 §51 | §38532(c)(1)(C) | S2 §29(a)(iii) | C6.5 | If material | 305-3 | Metrics |
| GHG removal projects | ESRS E1-7 | not asked | S2 §36 | C11.2 | Restricted | not asked | Metrics |
| Carbon credits used to offset | ESRS E1-7 §59 | not asked | S2 §36(c) | C11.1 | Restricted | not asked | not asked |
| Internal carbon pricing | ESRS E1-8 | not asked | S2 §29(f) | C11.3 | not asked | not asked | not asked |
Energy family
| Datapoint | CSRD | CA SB-253 | ISSB | CDP | GRI | TCFD |
|---|---|---|---|---|---|---|
| Total energy consumption, MWh | ESRS E1-5 §38 | (Scope 2 input) | (S2 derived) | C8.2 | 302-1 | not asked |
| Renewable energy share, % | ESRS E1-5 §39 | (disclosed if PPA) | (S2 derived) | C8.2 | 302-1 | not asked |
| Energy from non-renewable sources | ESRS E1-5 §38 | not asked | not asked | C8.2 | 302-1 | not asked |
| PPAs and EAC volumes, MWh | ESRS E1-5 §40 | (methodology disclosure) | not asked | C8.2 | not asked | not asked |
Water and waste family
| Datapoint | CSRD | ISSB | CDP Water | GRI |
|---|---|---|---|---|
| Total water withdrawal, ML | ESRS E3-4 §28 | not asked | W1.2a | 303-3 |
| Water withdrawal in stress areas | ESRS E3-4 §29 | not asked | W1.2b | 303-3 |
| Water consumption, ML | ESRS E3-4 §28 | not asked | W1.2 | 303-5 |
| Water discharge by destination | ESRS E3-4 §28 | not asked | W1.2c | 303-4 |
| Total waste generated, t | ESRS E5-5 §37 | not asked | not asked | 306-3 |
| Hazardous waste, t | ESRS E5-5 §37 | not asked | not asked | 306-3 |
| Waste diverted from disposal | ESRS E5-5 §37 | not asked | not asked | 306-4 |
Workforce family
| Datapoint | CSRD | ISSB | CDP | GRI |
|---|---|---|---|---|
| Total headcount, FTE | ESRS S1-6 §50 | not asked | not asked | 2-7 |
| Headcount by gender | ESRS S1-6 §50 | not asked | not asked | 2-7 |
| Headcount by country | ESRS S1-6 §50 | not asked | not asked | 2-7 |
| Pay gap, % | ESRS S1-16 §97 | not asked | not asked | 405-2 |
| Training hours per employee | ESRS S1-13 §83 | not asked | not asked | 404-1 |
| Recordable work-related injuries | ESRS S1-14 §88 | not asked | not asked | 403-9 |
| Turnover rate, % | ESRS S1-6 §50 | not asked | not asked | 401-1 |
Governance family
| Datapoint | CSRD | ISSB | CDP | TCFD |
|---|---|---|---|---|
| Board oversight of sustainability | ESRS 2 GOV-1 | S1 §27 | C1.1 | Governance a |
| Management responsibility | ESRS 2 GOV-1 | S1 §28 | C1.2 | Governance b |
| Sustainability KPIs in remuneration | ESRS 2 GOV-3 | S1 §29 | C1.3 | not explicit |
| Risk management process | ESRS 2 IRO-1 | S1 §44 | C2.1 | Risk Mgmt a |
| Scenario analysis | ESRS E1-9 §65 | S2 §22 | C3.2 | Strategy c |
Materiality and strategy family
| Datapoint | CSRD | ISSB | CDP |
|---|---|---|---|
| Materiality assessment process | ESRS 1 §3 | S1 §17-19 | C2.2 |
| Stakeholder engagement methods | ESRS 2 SBM-2 | S1 §17 | C12.1 |
| Climate transition plan | ESRS E1-1 §16 | S2 §14 | C3.3 |
| Targets, near-term | ESRS E1-4 §34 | S2 §33 | C4.1 |
| Targets, net-zero | ESRS E1-4 §34 | S2 §33 | C4.2 |
Caveats
- "Required" or "If material" reflects each framework's scoping logic. CSRD's double materiality and ISSB's enterprise-value materiality produce different in-or-out decisions.
- Clause references reflect standards as published to mid-2026. Updates may renumber paragraphs.
- "Not asked" is shorthand for "not asked at this granularity." Some frameworks request the same information at higher aggregation levels.
- The full CMS-backed version includes additional fields: source recommendations, typical methodology, common pitfalls, supplier engagement notes.
How to use this appendix
Three workflows.
1. **Datapoint-up.** Pick a datapoint already collected. Read across to see which frameworks need it.
2. **Framework-down.** Pick the framework being audited. Read down to see which datapoints are required.
3. **Render mapping.** When generating a CDP submission from CSRD data, confirm every CDP question maps to an ESRS clause. Flag any that do not.
[Run MFRA Module 5 →](https://example.pulsora.com/mfra/module-5)
---
Appendix C. 12-month rollout calendar
CSRD Wave 2 example. FY2027 reporting in 2028. Last updated 2026-05-03.
This calendar assumes a Wave 2 reporter starting from a partial baseline. Adjust the entry point for organisations further along.
| Month | Work | Owner | Artefact |
|---|---|---|---|
| 0 (T-12) | Confirm scope. Run MFRA. Identify gap to CSRD-grade. Engage limited-assurance auditor. | CSO / sustainability lead | Gap assessment, auditor engagement letter, project charter |
| 1 (T-11) | Materiality assessment kickoff. Stakeholder list. Cross-functional kickoff. | Sustainability lead with finance co-lead | Stakeholder list, methodology document |
| 2 (T-10) | Stakeholder engagement: 30-100 internal and external voices. | Sustainability lead | Engagement evidence pack |
| 3 (T-9) | Materiality scoring. Heat map across both axes. Leadership review. | Sustainability lead, board sustainability committee | Materiality assessment v1 |
| 4 (T-8) | Data dictionary: every material datapoint, source system, boundary, methodology. | Sustainability lead with finance | ESRS-compliant data dictionary v1 |
| 5 (T-7) | Source system mapping. Confirm granularity. Plan remediation. | Finance and IT | Source system inventory with gap list |
| 6 (T-6) | Tooling decision. Procurement, security, vendor due diligence. | CFO / CDO with sustainability lead | Vendor selection memo, signed contract |
| 7 (T-5) | Implementation begins. Configure platform. Load historical data. Year-on-year reconciliation. | Sustainability lead with vendor | Platform configured, baseline year loaded |
| 8 (T-4) | Supplier engagement on Scope 3 material categories. | Procurement with sustainability | Supplier response tracker |
| 9 (T-3) | Internal controls build. Approval workflows. Segregation. Variance procedure. | Finance | ICSR control matrix, signed approvals |
| 10 (T-2) | Pre-audit dry run. Auditor walkthrough. Remediation. | Sustainability lead with auditor | Draft sustainability statement, auditor management letter |
| 11 (T-1) | Final disclosure preparation. Lock numbers. Variance analysis. Management certification. ESEF tagging. Board review. | Finance, sustainability, board | Final draft sustainability statement, board approval |
| 12 (T-0) | Audit completion. ESEF-tagged statement filed with management report. Public disclosure. | Finance | Filed sustainability statement, audit report |
Assumptions
Auditor engaged at month 0. Partial baseline already exists (CDP or voluntary CSR report). 0.5-1.0 FTE sustainability lead and 0.25-0.5 FTE finance co-lead. Vendor budget secured by month 6. Board sustainability committee meeting at least quarterly.
Common slippage
- Materiality assessment runs long because stakeholder engagement is underestimated. Add 4-6 weeks where no prior engagement program exists.
- Source system gaps not identified until month 7-8 instead of month 5.
- Vendor selection compounded by procurement and security review; start at month 5 rather than 6.
- Year 1 supplier response rates of 20-40% require partial Scope 3 coverage with disclosed limitations.
Compressed variant (8 months)
Materiality drops to 2 months. Data dictionary and source mapping run in parallel. Vendor selection at month 3. Pre-audit dry run shrinks to 4 weeks. Feasible but pressured.
[Run MFRA Module 14 →](https://example.pulsora.com/mfra/module-14)
---
Appendix D. Glossary
Plain-English definitions matched to controller usage. Last updated 2026-05-03.
**AASB S2.** Australian Sustainability Reporting Standard for climate disclosures, based on IFRS S2 with Australian-specific provisions.
**Activity-based methodology.** Calculating Scope 3 emissions by multiplying physical units by emission factors. Higher quality than spend-based.
**Assurance, limited.** Auditor confirms nothing has come to attention suggesting material misstatement. Sample-based. Negative opinion.
**Assurance, reasonable.** Auditor confirms data is accurate. Substantive procedures on every material item. Positive opinion. Same standard as financial audit.
**Boundary, organisational.** The set of entities included in a sustainability inventory. Operational control, financial control, or equity share. Required to be consistent and disclosed.
**CARB.** California Air Resources Board. Administers SB-253 and SB-261.
**CDP.** Carbon Disclosure Project. UK-registered charity running annual climate, water, and forests questionnaires.
**CDP supply chain module.** Mechanism by which CDP member companies cascade data requests to suppliers.
**CSDS-1, CSDS-2.** Canadian Sustainability Disclosure Standards. Voluntary as of 2025, mandatory adoption pending.
**CSRD.** Corporate Sustainability Reporting Directive. EU directive (2022/2464) mandating sustainability reporting per ESRS.
**Double materiality.** The CSRD requirement to assess both impact materiality and financial materiality.
**EAC.** Energy Attribute Certificate. Used to claim renewable energy in market-based Scope 2.
**ESEF.** European Single Electronic Format. The XBRL-based digital tagging required for CSRD disclosures.
**ESRS.** European Sustainability Reporting Standards. Published as Delegated Regulation (EU) 2023/2772.
**FLAG.** Forest, Land, and Agriculture. SBTi sector guidance for companies with 20%+ land-related emissions.
**FTE-week.** Full-time-equivalent week. Effort unit used in this guide.
**GHG Protocol.** The Greenhouse Gas Protocol. The methodological foundation for almost every framework's emissions accounting.
**GRI.** Global Reporting Initiative. Stewarded by GSSB. Largely superseded for EU companies by CSRD.
**Hybrid methodology.** Spend-based for tail Scope 3 categories, activity-based for material categories.
**ICSR.** Internal Controls over Sustainability Reporting. The sustainability analogue of ICFR.
**IFRS S1, S2.** ISSB's general (S1) and climate-specific (S2) standards.
**Impact materiality.** The CSRD lens that asks how the company affects people and the planet, regardless of financial consequence.
**ISSB.** International Sustainability Standards Board, under IFRS Foundation.
**Lineage.** The traceable path from a disclosed number back to its source system, including methodology and approval history.
**Location-based Scope 2.** Emissions calculated using grid-average emission factors.
**Market-based Scope 2.** Emissions calculated using contractual instruments (PPAs, EACs, supplier-specific factors).
**Materiality assessment.** Documented process of identifying which sustainability topics are material. Required by ESRS 1 §3.
**Near-term target.** SBTi target with a 5-10 year horizon, validated against sectoral pathways.
**Net-zero target.** SBTi target reaching net-zero by 2050 or sooner, with a near-term target as a precondition.
**NYDFS.** New York Department of Financial Services.
**Omnibus.** EU regulatory simplification package adopted across 2025, delaying CSRD waves and raising thresholds.
**Operational control.** GHG Protocol organisational boundary. Includes operations the company controls regardless of ownership.
**PPA.** Power Purchase Agreement.
**Render.** In this guide, producing a framework-specific disclosure from a single underlying audit-ready dataset.
**SB-253.** California Climate Corporate Data Accountability Act. Mandatory Scope 1, 2, 3 disclosure for $1B+ revenue companies doing business in California.
**SB-261.** California Climate-Related Financial Risk Act. Mandatory biennial climate-related financial risk disclosure for $500M+ revenue companies doing business in California.
**SBTi.** Science Based Targets initiative.
**Scope 1.** Direct GHG emissions from owned or controlled sources.
**Scope 2.** Indirect GHG emissions from purchased electricity, steam, heat, and cooling.
**Scope 3.** Indirect GHG emissions across the value chain. 15 categories per GHG Protocol.
**SDS.** UK Sustainability Disclosure Standards. ISSB-based with UK amendments.
**SEC climate rule.** Federal US climate disclosure rule. Adopted March 2024, dormant since March 2025.
**Spend-based methodology.** Calculating Scope 3 by multiplying procurement spend by input-output coefficients. Lowest quality.
**SSBJ.** Sustainability Standards Board of Japan.
**Stop-the-Clock.** Directive (EU) 2025/794, adopted April 2025. Delayed CSRD Waves 2, 3, 4.
**TCFD.** Task Force on Climate-Related Financial Disclosures. Absorbed into ISSB S2. Still cited by CA SB-261 and UK premium-listing rules.
**Value chain.** All upstream and downstream entities and activities associated with a company's products or services.
**Variance analysis.** Year-on-year comparison of disclosed numbers, with explanation of variances above a threshold.
**Wave 1, 2, 3, 4.** CSRD reporting cohorts, sequenced by entity size and listing status.
**WRI Aqueduct.** World Resources Institute's water-stress mapping tool.
**XBRL.** eXtensible Business Reporting Language. Underlying technology for ESEF digital tagging.
