Skip to content
9 min read

How to Create a Comprehensive Sustainability Report: Key Steps and Standards

Featured Image

A sustainability report is not just a legal obligation for companies, it’s also a tool to create transparency and strengthen market position. Here you’ll find the key steps and requirements:

Under EU law the document has a name and a place: it is the sustainability statement, and it sits inside the management report. This guide follows one path from scoping to sign-off, and covers what the statement must contain, which standard applies to your company, and the questions that come up most often when sustainability reports are drafted for the first time.

What a sustainability statement contains

Under the ESRS the report is not a standalone brochure. It is a clearly identifiable section of the management report, and the official term is the sustainability statement. That distinction matters in practice: it sets the filing location, the assurance scope and the digital tagging obligation, and it is the reason a designed PDF alone no longer satisfies the requirement.

The contents follow a fixed spine. Two standards apply to everyone in scope, and the topical standards attach only where your double materiality assessment says they do.

BlockWhat goes in itApplies to
ESRS 1, general requirementsReporting boundary, value chain treatment, time horizons, how estimates and comparatives are handledEveryone in scope
ESRS 2, general disclosuresBasis for preparation, governance, strategy and business model, and the impact, risk and opportunity processEveryone in scope
E1 to E5, environmentClimate, pollution, water and marine resources, biodiversity, circular economyWhere material
S1 to S4, socialOwn workforce, workers in the value chain, affected communities, consumers and end usersWhere material
G1, governanceBusiness conduct, corruption, payment practices, political influenceWhere material

Within each material topic the structure repeats: the policy you have, the actions you are taking, the targets you have set, and the metrics that show movement. A topic where you have a metric but no target, or a target but no action, reads as incomplete to an assurance provider, and that pattern is the single most common finding in first-year statements.

One asymmetry to plan for. Reporting that a topic is not material still requires you to say so and to show how you concluded it. Companies routinely budget for the material topics and forget that the negative conclusions need the same evidence trail.

Have this ready before you start drafting:

  • Company profile: business model, locations, number of employees.
  • Sustainability strategy: goals, timeline, responsibilities.
  • The double materiality assessment and the documented reasoning behind every topic you keep and every topic you drop.
  • Policy, actions, targets and metrics for each material topic.
  • Key figures: CO₂ emissions (t), energy consumption (kWh), water consumption (m³), waste generated (t), employee turnover (%).

If you are a smaller company reporting because a customer or a bank asked, not because the law requires it, the structure above is more than you need. The voluntary standard for non-listed SMEs is the proportionate route, and the VSME guide sets out what it asks for instead.

How to write a sustainability report: six steps from scoping to sign-off

Six steps, and the order saves the most time. Assemble a team from various departments familiar with your company’s sustainability strategy. This team selects the reporting standard and sets the strategic direction.

  1. Fix the scope: which entities, which sites, which reporting year.
  2. Decide the standard before collecting anything, because it determines the data model.
  3. Run the materiality step to cut the topic list to what actually matters: context analysis, identification of material impacts, stakeholder engagement through surveys or workshops, then the assessment itself.
  4. Collect against a metric dictionary that fixes definition, unit, boundary and owner per figure.
  5. Draft around the decisions the data supports, not around the standard’s table of contents.
  6. Review for claims that outrun the evidence, then have the statement reviewed internally and externally before sign-off.

Most delays come from starting at step four. Plan the collection order around what is actually available rather than around the standard’s sequence: energy and fleet data arrive first, because someone in the company already invoices them, while Scope 3 categories and workforce breakdowns arrive last and are what decide your timeline.

One position on the shortcut everyone asks about. An AI-generated materiality analysis is a starting point, not an audit-proof result. It can propose a topic list, but it cannot show an assurance provider how you concluded that a topic is not material, and that is the part that gets tested. For the assessment step itself, the materiality assessment guide covers the method, and the core ESG metrics shows which figures carry weight once the topics are fixed.

Which standard applies to your company

The choice is not a matter of preference. It follows from your legal scope, and only where no obligation applies do you get to pick.

StandardWho it is forWhat you get
ESRSCompanies inside the CSRD scope in the EUMandatory, machine-readable, part of the management report, externally assured
VSMENon-listed SMEs reporting voluntarily or because a customer or bank askedProportionate European route, no assurance obligation
GRIOrganisations reporting internationally, inside or outside EU scopeGlobal recognition, economic, environmental and social aspects
DNKGerman companies reporting voluntarilyNational platform, with VSME as the content standard

The ESRS were developed specifically for the EU and are mandatory for large companies under the CSRD. It asks for double materiality, covering both financial risks and impacts on the environment and society. The size thresholds and first reporting years were revised in 2026, so check the current directive text before you assume you are in or out of scope.

The German Sustainability Code (DNK) is a national framework long used by German companies reporting voluntarily. Its role has shifted: since 2 March 2026 the DNK offers a VSME module, and existing users are migrating onto the voluntary European standard rather than maintaining a separate national format. If you are choosing a route today, treat the DNK as the platform and VSME as the content standard.

FAQ on Sustainability Reporting

1. What should a company sustainability report contain?

Five blocks carry most standards: governance (who is responsible and how it is overseen), material topics with the reasoning behind the selection, targets and the progress against them, the quantitative KPIs with their methodology, and the risks and opportunities the company sees. Beyond that, the differentiator is not completeness but traceability: every figure should be walkable back to its source, because that is what an assurance provider and a sceptical reader both test first.

2. What is the difference between CSRD, ESRS, and GRI?

CSRD defines reporting obligations, ESRS specifies EU-wide standards, and GRI is a global standard used internationally for ESG reporting.

3. What are the benefits of external auditing for sustainability reports?

External audits enhance credibility, ensure compliance, and identify areas for improvement. Under CSRD, they are mandatory.

4. How often should a sustainability report be published?

Typically, reports are published annually, aligned with the financial reporting cycle.

5. What is “double materiality” and why is it important?

It means reporting on both how sustainability affects the company and how the company affects the environment and society.

6. How can SMEs approach sustainability reporting?

SMEs can start with simplified frameworks, prioritise material topics, and use digital tools to reduce effort and cost.

Johannes Fiegenbaum

Johannes Fiegenbaum

ESG and sustainability consultant based in Hamburg, specialised in VSME reporting and climate risk analysis. Has supported 300+ projects for companies and financial institutions, from mid-sized manufacturers to major banks and insurers.

More about