CSRD Preparation Checklist: A Practical Guide for Mid-Market Companies

Understanding CSRD and Why It Matters for Mid-Market Companies

The Corporate Sustainability Reporting Directive (CSRD) represents the most significant expansion of mandatory sustainability disclosure in European history. While initial coverage focuses on large public interest entities, the directive's scope will expand progressively — and its effects are already rippling through supply chains, affecting mid-market companies far beyond the initial in-scope population.

If your company does business in Europe, sells to European customers, or is part of a value chain that touches European entities, CSRD preparation should already be on your agenda. Here's a practical guide to getting ready.

Who Needs to Comply and When

Direct Reporting Obligations

CSRD applies in phases based on company size and type:

• FY2024 (reports due 2025): Large EU public-interest enterprises already subject to NFRD
• FY2025 (reports due 2026): All other large EU companies (250+ employees, €50M+ revenue, €25M+ assets)
• FY2026 (reports due 2027): Listed SMEs and other qualifying small entities
• FY2028 (reports due 2029): Third-country companies with significant EU presence (€150M+ EU net turnover, at least one branch or subsidiary in the EU meeting specified thresholds)

That last category is where many mid-market companies get caught. If you're a US, UK, or Asian-headquartered mid-market firm with meaningful European operations, you may face CSRD obligations sooner than you think.

Indirect Pressure: Value Chain Cascading

Even if you fall outside direct reporting requirements, your customers probably don't. Under CSRD's double materiality principle, reporting companies must disclose information about their value chain impacts — which means they'll be asking you for detailed environmental, social, and governance data that you may not currently collect or track.

Your CSRD Preparation Checklist

Phase 1: Assess Your Position (Start 12+ Months Before Deadline)

☐ Determine applicability: Are you in-scope directly? Do you have significant EU operations that might trigger third-country provisions? Consult with legal counsel if uncertain.

☐ Map reporting boundaries: Which entities, facilities, and operations would fall within your reporting boundary? Understand the organizational boundary choices available and their implications.

☐ Conduct a gap analysis: Compare your current data collection and reporting capabilities against ESRS (European Sustainability Reporting Standards) disclosure requirements. Identify the largest gaps.

☐ Inventory existing data sources: What ESG data do you already collect? Where does it live? How reliable is it? Who owns it?

Phase 2: Build Capabilities (Start 9+ Months Before Deadline)

☐ Establish double materiality processes: CSRD requires assessing both how sustainability issues affect your financial performance (financial materiality) and how your activities affect people and environment (impact materiality). Document your methodology.

☐ Implement data collection systems: For each material topic, establish systematic data collection processes. This often means new tools, modified workflows, or both.

☐ Define controls and documentation: CSRD reports must be subject to limited assurance initially, moving to reasonable assurance over time. Build audit-ready documentation practices from day one.

☐ Train relevant teams: Finance, operations, legal, HR, and sustainability staff all need to understand their roles in the CSRD compliance process.

Phase 3: Prepare the Report (Start 6+ Months Before Deadline)

☐ Draft disclosures by standard: Work through each applicable ESRS disclosure requirement systematically. Don't leave anything for the last minute.

☐ Conduct internal review: Cross-check data consistency. Verify calculations. Ensure narrative explanations align with quantitative data.

☐ Engage assurance provider: Select and brief your independent assurance provider. Allow adequate time for their procedures.

☐ Prepare digital tagging: CSRD requires reports to be tagged using XBRL taxonomy. Understand the technical requirements early.

Phase 4: Publish and Improve (Ongoing)

☐ File in appropriate system: Reports must be filed in the European Single Access Point once available. Monitor development of filing mechanisms.

☐ Communicate internally and externally: Don't treat your CSRD report as a compliance document only. Use it as a foundation for stakeholder communication.

☐ Establish continuous improvement: Each reporting cycle should be better than the last. Document lessons learned and implement improvements.

Common Pitfalls to Avoid

Treating CSRD as a reporting project: It's not. CSRD requires fundamental changes to how you identify, measure, manage, and disclose sustainability information. Companies that treat it as a year-end reporting exercise will struggle.

Underestimating the data challenge: Most mid-market companies significantly underestimate the effort required to collect CSRD-quality data, especially for Scope 3 emissions and social topics.

Ignoring governance implications: CSRD requires management bodies to certify certain disclosures. Your leadership team needs to understand what they're signing off on.

Going it alone: The standards are complex, interpretations are evolving, and the stakes are high. Expert guidance can prevent costly missteps.

How Cedar Can Help

We've guided dozens of mid-market companies through CSRD readiness assessments, gap analyses, and implementation planning. Our approach is pragmatic — we meet you where you are and help you build sustainable compliance capabilities, not just check-the-box exercises.

Contact us for a confidential discussion of your CSRD position and timeline.