CSRD Readiness Assessment: What It Is, When to Run One, and What You Get

The engagement most companies should buy first is the one they usually skip. A CSRD readiness assessment is a short, focused diagnostic — two to six weeks — that answers three questions before you commit to a nine-month implementation project: which wave are you actually in, how far off the ESRS bar you are today across every relevant dimension, and what the realistic path to a filed report looks like in months and euros.

It is not the report. It is not the double materiality assessment. It is not the data collection gap analysis. It is the piece of work that tells you which of those you need, when, and roughly what they cost.

Skipping it is how you end up buying a €150,000 implementation from the first consultant who returned your email, then discovering in month four that the scope missed three subsidiaries, the finance team was never consulted about the reporting boundary, and the auditor won't sign the assurance opinion on the controls the consultant designed.

This guide sets out what a serious CSRD readiness assessment covers, what deliverables you should demand, how long it should take, what it costs, and how to tell a diagnostic apart from a sales pitch dressed up as one.

What a CSRD Readiness Assessment Actually Is

A readiness assessment is a structured diagnostic across the full CSRD programme, ending in a written report and a costed plan for the work that follows.

It borrows the shape of a financial-audit planning exercise — walkthroughs, interviews, document review, a maturity scoring against an explicit framework — and applies it to a company that has not yet run its first CSRD reporting cycle. The consultant is not doing the work; they are looking at the company hard enough to tell you what the work will be.

Three properties separate an assessment from a proposal or a workshop:

1. It is scoped as a paid engagement in its own right, with its own contract, deliverables, and acceptance criteria. If a firm is offering to do it "for free as part of the sales process", you are getting a sales presentation, not an assessment.
2. It covers every dimension of the programme, not only the ones that fit the consultant's offering. A firm that only does materiality workshops will produce a "readiness assessment" that surfaces materiality problems and misses the controls layer entirely.
3. The output is a plan you could hand to another firm to execute. If the deliverable only makes sense if the same consultant does the implementation, it is a sales artefact.

The CSRD implementation roadmap describes the five phases every programme goes through — mobilisation, materiality, gap analysis and data design, drafting, assurance and publication. The readiness assessment is what tells you where you currently sit against phase one, and what each of the next four will cost you.

When to Run a Readiness Assessment

Most companies benefit from a readiness assessment in one of three moments.

1. Before scoping the full implementation

This is the textbook case. You know you are in scope, you know your first report is one or two financial years away, and you have not yet issued an RFP or engaged an implementation partner. Running the assessment first means the RFP you write reflects your actual gaps, not the generic scope every bidder assumes. It also gives you an independent baseline to compare proposals against.

Timing rule of thumb: run the assessment 12 to 18 months before your first reporting year begins, so there is real runway to act on it.

2. When an existing programme feels off-track

You started the CSRD project six months ago. Materiality is stuck in a second round of workshops. Data owners are pushing back on timelines. The finance team is asking whether Scope 3 is really in the audit perimeter. A tightly scoped readiness assessment — sometimes labelled a "reset" or "health check" — done by a different firm to the one running the programme is a cheap way to find out whether the plan is recoverable, needs re-scoping, or needs the consultant replaced.

3. After a scope change

The Omnibus package removed roughly 80% of previously in-scope companies from mandatory reporting and pushed Wave 2 out to FY 2027. If you were scoping for the pre-Omnibus timeline, an assessment now tells you which parts of the work you had already commissioned still make sense, which should be paused, and whether the VSME voluntary standard is a better target than mandatory CSRD.

A change of company perimeter — an acquisition, a divestiture, a group restructure — is a similar trigger. Your old scoping is stale the day the transaction closes.

What the Assessment Should Cover

A serious assessment scores you across seven dimensions. If a proposal only lists three or four, it is either narrower than "readiness" implies, or the consultant is only checking the dimensions they are equipped to fix.

1. Scope and boundary

• Which entities in the group consolidate up into the CSRD report?
• Which wave are you actually in after the Omnibus, using the current thresholds and dates?
• What is the interaction with parent-company or subsidiary reporting under the artificial-person and consolidated-reporting rules?
• If you are a non-EU group, does the €150M EU net-turnover Wave 4 test apply, and from when?

2. Governance

• Where does the sustainability report sit in the corporate governance stack — board committee, audit committee, disclosure committee?
• Is there a written owner for the report and for each ESRS standard?
• Which existing management-report processes will the sustainability section have to integrate with?

3. Materiality inputs

• What impact and financial materiality work already exists, in any form?
• Which stakeholder groups have been engaged, on what topics, when?
• Is there a defensible starting long-list of IROs (impacts, risks, opportunities), or does the double materiality assessment start from zero?

4. Data landscape

• Which of the ESRS quantitative data points can be sourced from an existing system today?
• Which live in spreadsheets, and how many owners do those spreadsheets have between them?
• Where does Scope 3 fall on the "we measure it" / "we estimate it" / "we don't have it" axis?
• Are supplier data pipelines in place at all?

5. Controls and assurance-readiness

This is the dimension most under-covered in weak assessments, and the one your auditor will insist on later. The assessment should look at:

• Segregation of duties in the sustainability data flow
• Evidence trails: source-to-report traceability for the data points the auditor will sample
• Management review controls over narrative disclosures
• The delta between limited assurance (in force now) and reasonable assurance (coming)

6. Systems and technology

• Is the current ESG data infrastructure a spreadsheet, a purpose-built tool, an ERP module, or nothing at all?
• Is XBRL/iXBRL digital tagging already handled by the existing financial-reporting stack, or does it need a new tool?
• What integration constraints will limit the choices when it is time to buy or build?

7. Timeline, budget and resourcing

• What is the honest gap between today and a filed, assured report — in months and in FTE-equivalent effort?
• Does the internal team have the seniority to run the project, or is interim or fractional support needed alongside the consultant?
• Is the budget the board has already approved plausible for the plan the assessment recommends?

Each dimension should carry a maturity score (typically 1–5 or "red / amber / green") against a stated rubric — not a narrative paragraph. Scores let you track progress on a re-assessment and let the board see the whole picture on one page.

Deliverables You Should Demand

If the engagement letter does not name these deliverables, ask for them written into the scope before signing.

1. A written readiness report (30–60 pages typical) with the maturity scoring, dimension-by-dimension findings, evidence cited from the interviews and document review, and a management summary the executive sponsor can take to the board.
2. A costed implementation plan, phase by phase, with duration ranges, effort estimates in person-days, internal versus external split, and dependency mapping. The plan should read like something you could put out to tender.
3. A prioritised backlog of no-regret actions — the three to seven things the company should start on regardless of which implementation partner they eventually pick.
4. A stakeholder-interview log — who was interviewed, when, what was covered. This is what protects the assessment from later "we were never asked" objections.
5. A document-review index — every policy, procedure, prior report and system extract that was reviewed. Auditors will ask for this trail during the eventual assurance engagement; building the habit early pays for itself.
6. A board-ready one-pager — the maturity scores across the seven dimensions, the recommended plan on a page, the total cost range, and the recommended decision.

The deliverable that most assessments quietly drop is number 2 — the costed plan. A plan without numbers is a discussion document. Insist on ranges, and insist that the ranges are anchored to the assessment's own findings rather than to generic industry benchmarks.

How Long It Takes and What It Costs

Duration

• Single-entity SME — 2 weeks of elapsed time, ~5–8 consultant-days of effort
• Mid-market group (€50M–€500M revenue) — 3–4 weeks, ~10–20 consultant-days
• Large enterprise or multi-entity group — 4–6 weeks, ~25–50 consultant-days

Elapsed time is dominated by scheduling interviews across departments, not by the consultant's own work. Booking the six or seven interviews up front, before day one, is the single biggest lever you have on the duration.

Fees

Ranges consistent with the broader CSRD consultant costs benchmark:

• Single-entity SME — €5,000–€15,000
• Mid-market group — €15,000–€40,000
• Large enterprise or multi-entity group — €40,000–€100,000+

Two commercial questions to settle before you sign:

• Credit against implementation. If the same firm does the follow-on implementation, is the assessment fee credited (in full, or a stated percentage) against the implementation fee? This is normal and reasonable. If they refuse, ask why.
• Independence. If the firm also sells a CSRD reporting software product, or is on the approved auditor list for your assurance engagement, the assessment findings are conflicted. Neither is disqualifying, but both should be disclosed in the engagement letter.

How the Readiness Assessment Fits with Other CSRD Work

The three engagements companies most often confuse:

Engagement	Duration	Question it answers	Output
Readiness assessment	2–6 weeks	How far are we, across every dimension?	Maturity report + costed plan
Double materiality assessment	8–12 weeks	Which ESRS topics do we have to report?	List of material IROs + stakeholder record
Data gap analysis	4–8 weeks	Which specific data points can we measure today?	Data-point inventory + collection plan

A readiness assessment often recommends commissioning the double materiality and the data gap analysis as follow-on workstreams, and pre-scopes both. It does not replace them.

The reverse is also true: if a consultant is proposing a materiality assessment as your first engagement without having done a readiness scan first, you are potentially paying for stakeholder workshops on a scope that is wrong.

How to Prepare for a Readiness Assessment

The single biggest determinant of assessment quality is whether the consultant has the right documents to review before the interviews. A well-prepared data pack turns a 4-week engagement into a 2-week one and improves the depth of every finding.

Assemble in advance:

• Latest annual report and management report — for scope, structure and existing disclosure baseline
• Group structure chart with legal entities, ownership percentages and consolidation status
• Any prior NFRD, GRI, TCFD or CDP disclosures — even old ones
• Sustainability policies — climate, human rights, supplier code of conduct, whistleblowing
• Materiality outputs from any prior year, however informal
• Emissions inventory — Scope 1, 2 and any Scope 3 categories already covered
• HR data schema — what fields are captured centrally versus by entity
• Systems list — ERP, HRIS, EHS, procurement, any dedicated ESG tool
• Auditor's most recent management letter — the internal-control observations often flag exactly the gaps the CSRD assessment will re-surface

Nominate one internal coordinator whose full-time job for the duration is to answer the consultant's questions, chase documents, and book interviews. Assessments that stall usually stall on scheduling, not analysis.

What to Do with the Output

The value of the assessment is realised in what you do with the report, not in commissioning it. Four decisions in the two weeks after the final report:

1. Take the board decision on scope. The report will name a recommended reporting perimeter and a recommended target (mandatory CSRD, voluntary VSME, or wait). This is a board-level decision, not a sustainability-team decision, and the readiness report is the artefact that lets the board make it on evidence.
2. Commission the no-regret actions immediately. These do not require choosing an implementation partner. Nominating a report owner, appointing the disclosure committee, starting the scope-3 supplier data pipeline — begin them the week the report lands.
3. Take the costed plan to procurement. The RFP you write should be a lightly edited version of the assessment's plan. Bidders now respond to your scope, not the one they invent from your website.
4. Book the re-assessment. A six-month follow-up assessment against the same maturity framework tells the board whether the programme is on track. It costs a fraction of the first one because the scoping work is already done.

Red Flags: Signs the Assessment Is Thin

Seven patterns that turn up repeatedly in weak assessments:

1. No maturity scoring rubric. The report contains adjectives ("developing", "emerging") but no framework you could re-apply next quarter.
2. Findings that could apply to any company. "You should establish a disclosure committee" without saying whether your current governance stack already has one that could take the role.
3. No document-review index. The consultant tells you what they concluded but not what they looked at to conclude it. This will collapse in front of an auditor.
4. The costed plan is a single number. Real plans have phase-by-phase ranges, with the drivers behind each range stated.
5. The plan requires the same consultant to execute. Recommended tools are all their own; recommended follow-on phases are all in their capability list; the plan cannot be tendered.
6. No coverage of controls or assurance-readiness. These are the two dimensions where NFRD reporters have the largest gap, and the two most often skipped by materiality-first firms.
7. Interviews only with the sustainability team. The finance, HR, IT and internal-audit interviews are the ones that surface the gaps the sustainability team does not know about.

If the assessment you receive shows two or more of these, treat the report as a first draft and negotiate the missing sections in before you accept it.

Where a CSRD Readiness Assessment Fits in the Search for a Consultant

A serious CSRD consultant will offer a readiness assessment as a stand-alone engagement, price it explicitly, and be comfortable with you using the output to run an RFP that they may lose. That posture — "our diagnostic is worth paying for even if you take the plan elsewhere" — is a stronger signal of quality than any credential list.

If you are still at the "which consultant should we even talk to" stage, shortlist three firms for readiness-assessment proposals from the directory — start with gap analysis expertise, consultants in Germany (including Berlin), and manufacturing-sector specialists. Compare proposals on scope depth (does it cover all seven dimensions?), on deliverables (are the six deliverables above named?), and on independence (any software or assurance conflicts?), not on price alone.

The €10,000–€40,000 you spend on a proper assessment is the single highest-ROI cheque in the entire CSRD programme. It is the one that stops you spending ten times as much on the wrong thing.