bmad-plus 0.4.4 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (197) hide show
  1. package/CHANGELOG.md +54 -0
  2. package/README.md +5 -3
  3. package/package.json +1 -1
  4. package/readme-international/README.de.md +2 -2
  5. package/readme-international/README.es.md +2 -2
  6. package/readme-international/README.fr.md +2 -2
  7. package/src/bmad-plus/module.yaml +76 -12
  8. package/src/bmad-plus/packs/pack-dev-studio/README.md +162 -0
  9. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/analyst-agent.md +74 -0
  10. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/document-project.md +62 -0
  11. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/domain-research.md +96 -0
  12. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/market-research.md +96 -0
  13. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/prfaq.md +135 -0
  14. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/product-brief.md +81 -0
  15. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/tech-writer-agent.md +74 -0
  16. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/technical-research.md +96 -0
  17. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/architect-agent.md +74 -0
  18. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/create-architecture.md +74 -0
  19. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/create-epics-stories.md +93 -0
  20. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/generate-project-context.md +81 -0
  21. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/implementation-readiness.md +91 -0
  22. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-01-init.md +153 -0
  23. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-01b-continue.md +173 -0
  24. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-02-context.md +224 -0
  25. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-03-starter.md +329 -0
  26. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-04-decisions.md +318 -0
  27. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-05-patterns.md +359 -0
  28. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-06-structure.md +379 -0
  29. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-07-validation.md +361 -0
  30. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-08-complete.md +82 -0
  31. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/checkpoint-preview.md +68 -0
  32. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-01-gather-context.md +85 -0
  33. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-02-review.md +35 -0
  34. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-03-triage.md +49 -0
  35. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-04-present.md +132 -0
  36. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review.md +90 -0
  37. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/correct-course.md +301 -0
  38. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/create-story.md +429 -0
  39. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-agent.md +74 -0
  40. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-story-checklist.md +80 -0
  41. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-story.md +485 -0
  42. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/investigate.md +194 -0
  43. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/qa-e2e-tests.md +176 -0
  44. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/quick-dev.md +111 -0
  45. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/retrospective.md +1512 -0
  46. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/sprint-planning.md +299 -0
  47. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/sprint-status.md +297 -0
  48. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/create-prd.md +30 -0
  49. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/create-ux-design.md +75 -0
  50. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/edit-prd.md +30 -0
  51. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/pm-agent.md +74 -0
  52. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/prd.md +90 -0
  53. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/ux-designer-agent.md +74 -0
  54. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/validate-prd.md +30 -0
  55. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/advanced-elicitation.md +142 -0
  56. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/adversarial-review.md +37 -0
  57. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/bmad-help.md +75 -0
  58. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/brainstorming.md +6 -0
  59. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/customize.md +111 -0
  60. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/distillator.md +177 -0
  61. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/edge-case-hunter.md +67 -0
  62. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/editorial-review-prose.md +86 -0
  63. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/editorial-review-structure.md +179 -0
  64. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/index-docs.md +66 -0
  65. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/party-mode.md +128 -0
  66. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/shard-doc.md +105 -0
  67. package/src/bmad-plus/packs/pack-dev-studio/dev-studio-orchestrator.md +120 -0
  68. package/src/bmad-plus/packs/pack-dev-studio/shared/architecture-decision-template.md +12 -0
  69. package/src/bmad-plus/packs/pack-dev-studio/shared/bwml-spec.md +328 -0
  70. package/src/bmad-plus/packs/pack-dev-studio/shared/module-help.csv +32 -0
  71. package/src/bmad-plus/packs/pack-dev-studio/upstream-sync.yaml +81 -0
  72. package/src/bmad-plus/packs/pack-shield/README.md +110 -0
  73. package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/csrd-agent.md +262 -0
  74. package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/section508-agent.md +179 -0
  75. package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/wcag-agent.md +201 -0
  76. package/src/bmad-plus/packs/pack-shield/categories/ai-governance/eu-ai-act-agent.md +97 -0
  77. package/src/bmad-plus/packs/pack-shield/categories/ai-governance/iso42001-agent.md +251 -0
  78. package/src/bmad-plus/packs/pack-shield/categories/ai-governance/nist-ai-rmf-agent.md +133 -0
  79. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/cis-controls-agent.md +221 -0
  80. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/ism-agent.md +150 -0
  81. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/iso27001-agent.md +167 -0
  82. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nis2-agent.md +83 -0
  83. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nist-800-53-agent.md +250 -0
  84. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nist-csf-agent.md +218 -0
  85. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/ccpa-agent.md +94 -0
  86. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/dpdpa-agent.md +136 -0
  87. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/gdpr-agent.md +296 -0
  88. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/iso27701-agent.md +134 -0
  89. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/lgpd-agent.md +129 -0
  90. package/src/bmad-plus/packs/pack-shield/categories/defense-export/cmmc-agent.md +127 -0
  91. package/src/bmad-plus/packs/pack-shield/categories/defense-export/ear-agent.md +272 -0
  92. package/src/bmad-plus/packs/pack-shield/categories/defense-export/itar-agent.md +202 -0
  93. package/src/bmad-plus/packs/pack-shield/categories/defense-export/tsa-agent.md +367 -0
  94. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/dora-agent.md +510 -0
  95. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/fedramp-agent.md +247 -0
  96. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/hipaa-agent.md +173 -0
  97. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/pci-dss-agent.md +239 -0
  98. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/soc2-agent.md +266 -0
  99. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/swift-csp-agent.md +164 -0
  100. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-classifier.md +131 -0
  101. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-fria.md +155 -0
  102. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-incidents.md +187 -0
  103. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-roles.md +113 -0
  104. package/src/bmad-plus/packs/pack-shield/categories/workflows/breach-sentinel.md +197 -0
  105. package/src/bmad-plus/packs/pack-shield/categories/workflows/cookie-policy-gen.md +180 -0
  106. package/src/bmad-plus/packs/pack-shield/categories/workflows/dpia-sentinel.md +235 -0
  107. package/src/bmad-plus/packs/pack-shield/categories/workflows/legitimate-interest.md +159 -0
  108. package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-advisor.md +133 -0
  109. package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-notice-gen.md +160 -0
  110. package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-policy-gen.md +135 -0
  111. package/src/bmad-plus/packs/pack-shield/references/ccpa/ccpa-gdpr-comparison.md +117 -0
  112. package/src/bmad-plus/packs/pack-shield/references/ccpa/consumer-rights-workflows.md +177 -0
  113. package/src/bmad-plus/packs/pack-shield/references/cis-controls/framework-mappings.md +162 -0
  114. package/src/bmad-plus/packs/pack-shield/references/cis-controls/implementation-guidance.md +235 -0
  115. package/src/bmad-plus/packs/pack-shield/references/cis-controls/safeguards-detail.md +252 -0
  116. package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-assessment.md +170 -0
  117. package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-levels.md +113 -0
  118. package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-practices.md +211 -0
  119. package/src/bmad-plus/packs/pack-shield/references/csrd/compliance-program.md +281 -0
  120. package/src/bmad-plus/packs/pack-shield/references/csrd/double-materiality.md +253 -0
  121. package/src/bmad-plus/packs/pack-shield/references/csrd/esrs-standards.md +401 -0
  122. package/src/bmad-plus/packs/pack-shield/references/dora/article-reference.md +441 -0
  123. package/src/bmad-plus/packs/pack-shield/references/dora/incident-classification.md +297 -0
  124. package/src/bmad-plus/packs/pack-shield/references/dora/rts-its-guide.md +306 -0
  125. package/src/bmad-plus/packs/pack-shield/references/dora/third-party-risk.md +349 -0
  126. package/src/bmad-plus/packs/pack-shield/references/dpdpa/gdpr-comparison.md +173 -0
  127. package/src/bmad-plus/packs/pack-shield/references/dpdpa/rights-and-obligations.md +426 -0
  128. package/src/bmad-plus/packs/pack-shield/references/dpdpa/rules-2025.md +599 -0
  129. package/src/bmad-plus/packs/pack-shield/references/dpdpa/sections-reference.md +319 -0
  130. package/src/bmad-plus/packs/pack-shield/references/ear/ccl-eccn-guide.md +250 -0
  131. package/src/bmad-plus/packs/pack-shield/references/ear/compliance-program.md +280 -0
  132. package/src/bmad-plus/packs/pack-shield/references/ear/license-exceptions.md +207 -0
  133. package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/gpai-governance.md +267 -0
  134. package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/obligations-high-risk.md +287 -0
  135. package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/risk-classification.md +182 -0
  136. package/src/bmad-plus/packs/pack-shield/references/fedramp/appendices-guide.md +209 -0
  137. package/src/bmad-plus/packs/pack-shield/references/fedramp/control-families.md +281 -0
  138. package/src/bmad-plus/packs/pack-shield/references/fedramp/poam-guide.md +93 -0
  139. package/src/bmad-plus/packs/pack-shield/references/fedramp/readiness-checklist.md +134 -0
  140. package/src/bmad-plus/packs/pack-shield/references/fedramp/sap-sar-guide.md +86 -0
  141. package/src/bmad-plus/packs/pack-shield/references/fedramp/ssp-guide.md +129 -0
  142. package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/documents.md +192 -0
  143. package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/dpa-template.md +121 -0
  144. package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/privacy-notice.md +87 -0
  145. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/breach-notification.md +293 -0
  146. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/privacy-rule.md +276 -0
  147. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/security-rule.md +299 -0
  148. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/templates.md +568 -0
  149. package/src/bmad-plus/packs/pack-shield/references/ism/control-applicability.md +181 -0
  150. package/src/bmad-plus/packs/pack-shield/references/ism/guidelines-overview.md +183 -0
  151. package/src/bmad-plus/packs/pack-shield/references/iso27001/annex-a-2013.md +203 -0
  152. package/src/bmad-plus/packs/pack-shield/references/iso27001/annex-a-2022.md +132 -0
  153. package/src/bmad-plus/packs/pack-shield/references/iso27001/control-mapping.md +153 -0
  154. package/src/bmad-plus/packs/pack-shield/references/iso27701/annex-a-controls.md +195 -0
  155. package/src/bmad-plus/packs/pack-shield/references/iso27701/regulatory-mapping.md +229 -0
  156. package/src/bmad-plus/packs/pack-shield/references/iso27701/transition-guide.md +219 -0
  157. package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-ai-risk-assessment.md +258 -0
  158. package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-clauses-requirements.md +279 -0
  159. package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-controls-annex-a.md +155 -0
  160. package/src/bmad-plus/packs/pack-shield/references/itar/compliance-program.md +174 -0
  161. package/src/bmad-plus/packs/pack-shield/references/itar/licensing-guide.md +146 -0
  162. package/src/bmad-plus/packs/pack-shield/references/itar/usml-categories.md +93 -0
  163. package/src/bmad-plus/packs/pack-shield/references/lgpd/anpd-enforcement.md +147 -0
  164. package/src/bmad-plus/packs/pack-shield/references/lgpd/compliance-program.md +272 -0
  165. package/src/bmad-plus/packs/pack-shield/references/lgpd/lgpd-articles.md +271 -0
  166. package/src/bmad-plus/packs/pack-shield/references/nis2/article-21-measures.md +153 -0
  167. package/src/bmad-plus/packs/pack-shield/references/nis2/iso27001-nis2-mapping.md +68 -0
  168. package/src/bmad-plus/packs/pack-shield/references/nist-800-53/assessment-rmf.md +349 -0
  169. package/src/bmad-plus/packs/pack-shield/references/nist-800-53/baselines-tailoring.md +277 -0
  170. package/src/bmad-plus/packs/pack-shield/references/nist-800-53/control-families.md +450 -0
  171. package/src/bmad-plus/packs/pack-shield/references/nist-ai-rmf/rmf-core.md +361 -0
  172. package/src/bmad-plus/packs/pack-shield/references/nist-ai-rmf/rmf-profiles.md +192 -0
  173. package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-10-to-20-mapping.md +143 -0
  174. package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-20-functions-categories.md +278 -0
  175. package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-implementation-tiers.md +135 -0
  176. package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-requirements.md +366 -0
  177. package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-saq-guide.md +217 -0
  178. package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-v4-changes.md +190 -0
  179. package/src/bmad-plus/packs/pack-shield/references/section-508/wcag-mapping.md +160 -0
  180. package/src/bmad-plus/packs/pack-shield/references/soc2/controls.md +241 -0
  181. package/src/bmad-plus/packs/pack-shield/references/soc2/evidence.md +236 -0
  182. package/src/bmad-plus/packs/pack-shield/references/soc2/policies.md +254 -0
  183. package/src/bmad-plus/packs/pack-shield/references/soc2/vendor.md +276 -0
  184. package/src/bmad-plus/packs/pack-shield/references/swift-csp/swift-assessment.md +202 -0
  185. package/src/bmad-plus/packs/pack-shield/references/swift-csp/swift-controls.md +545 -0
  186. package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-crmp-requirements.md +359 -0
  187. package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-directives-overview.md +187 -0
  188. package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-incident-reporting.md +187 -0
  189. package/src/bmad-plus/packs/pack-shield/references/wcag/criteria-detail.md +510 -0
  190. package/src/bmad-plus/packs/pack-shield/shared/audit-report-template.md +103 -0
  191. package/src/bmad-plus/packs/pack-shield/shared/cross-framework-mapper.md +103 -0
  192. package/src/bmad-plus/packs/pack-shield/shared/gap-analysis-template.md +83 -0
  193. package/src/bmad-plus/packs/pack-shield/shield-orchestrator.md +229 -0
  194. package/src/bmad-plus/packs/pack-shield/upstream-sync.yaml +68 -0
  195. package/tools/cli/commands/install.js +31 -9
  196. package/tools/cli/commands/update.js +4 -2
  197. package/tools/cli/i18n.js +50 -10
@@ -0,0 +1,253 @@
1
+ # Double Materiality Assessment (DMA) — Methodology and Templates
2
+
3
+ ## Overview
4
+
5
+ The Double Materiality Assessment is the mandatory first step in CSRD compliance (ESRS 1, paras. 19–56). Every in-scope company must complete a DMA before deciding which ESRS topical standards to report on. The DMA determines what is reported; it cannot be completed retrospectively.
6
+
7
+ ---
8
+
9
+ ## Two Perspectives Explained
10
+
11
+ ### 1. Impact Materiality (Inside-Out)
12
+ *Does the company have actual or potential impacts on people or the environment?*
13
+
14
+ **Scope:** Own operations + upstream and downstream value chain
15
+
16
+ **Actual impacts:** Currently occurring
17
+ **Potential impacts:** Could occur in the future (assess likelihood)
18
+
19
+ **Positive impacts:** Benefits to people or environment (e.g., jobs created, carbon sequestration)
20
+ **Negative impacts:** Harm to people or environment (e.g., pollution, unsafe working conditions)
21
+
22
+ **Significance assessment formula:**
23
+ - *Negative actual impacts:* Scale × Scope × Irremediability
24
+ - *Negative potential impacts:* Scale × Scope × Irremediability × Likelihood
25
+ - *Positive actual impacts:* Scale × Scope
26
+ - *Positive potential impacts:* Scale × Scope × Likelihood
27
+
28
+ **Definitions:**
29
+ | Criterion | Definition |
30
+ |-----------|-----------|
31
+ | Scale | Severity of the impact on people or environment |
32
+ | Scope | How widespread (number of people affected / geographic area) |
33
+ | Irremediability | Difficulty of restoring pre-impact state |
34
+ | Likelihood | Probability of potential impact occurring |
35
+
36
+ ### 2. Financial Materiality (Outside-In)
37
+ *Does the sustainability matter create risks or opportunities affecting the company's finances?*
38
+
39
+ **Financial effects include:** Revenue, costs, assets, liabilities, cash flows, access to finance, cost of capital
40
+
41
+ **Time horizons:** Short-term (<1 year), medium-term (1–5 years), long-term (>5 years)
42
+
43
+ **Assessment criteria:**
44
+ - Magnitude: How large could the financial effect be? (quantify where possible)
45
+ - Likelihood: How probable is the financial effect?
46
+
47
+ **Sources of financial risks and opportunities:**
48
+ - Physical risks (acute: extreme weather; chronic: temperature, sea-level)
49
+ - Transition risks (policy/regulation, technology, market, reputational)
50
+ - Opportunities (energy efficiency, new markets, brand value, talent attraction)
51
+
52
+ ### The Materiality Threshold
53
+ A topic is **material** if it meets EITHER the impact materiality threshold OR the financial materiality threshold (or both).
54
+
55
+ There is no prescribed numerical threshold — companies set their own thresholds, which must be justified and disclosed (ESRS 2 IRO-1).
56
+
57
+ ---
58
+
59
+ ## DMA Process — Step by Step
60
+
61
+ ### Step 1: Understand the Context (ESRS 1, para. 45)
62
+
63
+ **Activities:**
64
+ 1. Map the business model: products/services, markets, geographies
65
+ 2. Map the value chain: key suppliers (tier 1 and beyond), distribution, customers, end-users
66
+ 3. Identify the company's key activities, assets, and relationships
67
+ 4. Identify sector-specific sustainability risks using industry references (ESRS sector standards when published, SASB, GRI sector standards)
68
+
69
+ **Output:** Business context document / value chain map
70
+
71
+ ---
72
+
73
+ ### Step 2: Identify Actual and Potential Impacts (ESRS 1, paras. 46–48)
74
+
75
+ **Sources of impact identification:**
76
+ - Internal: operations review, incident data, management interviews
77
+ - External: stakeholder engagement, industry benchmarks, peer analysis, ESG ratings
78
+
79
+ **Stakeholder engagement (ESRS 1, para. 22):**
80
+ ESRS requires meaningful engagement with affected stakeholders and users of sustainability reporting. Stakeholders to engage:
81
+ - Workers (own and value chain)
82
+ - Local communities
83
+ - Customers / consumers
84
+ - NGOs and civil society
85
+ - Investors and financial institutions
86
+ - Regulators
87
+
88
+ **Output:** Long list of potential impacts per ESRS topic area
89
+
90
+ ---
91
+
92
+ ### Step 3: Assess Significance of Impacts
93
+
94
+ Rate each identified impact on each criterion using a 1–5 scale (or equivalent):
95
+
96
+ **Impact Scoring Matrix:**
97
+
98
+ | Score | Scale | Scope | Irremediability | Likelihood |
99
+ |-------|-------|-------|----------------|-----------|
100
+ | 1 | Minimal | Very local / few individuals | Easily remediable | Very unlikely (<5%) |
101
+ | 2 | Low | Local / small group | Mostly remediable | Unlikely (5–25%) |
102
+ | 3 | Moderate | Regional / significant group | Partially remediable | Possible (25–50%) |
103
+ | 4 | High | National / large group | Mostly irreversible | Likely (50–75%) |
104
+ | 5 | Severe | International / systemic | Irreversible | Very likely (>75%) |
105
+
106
+ **Severity score (negative actual):** Scale × Scope × Irremediability (max 125)
107
+ **Severity score (negative potential):** Scale × Scope × Irremediability × Likelihood (max 625)
108
+
109
+ **Materiality threshold:** Company-defined (example: severity ≥ 27 for actual impacts; ≥ 50 for potential impacts)
110
+
111
+ ---
112
+
113
+ ### Step 4: Identify Financial Risks and Opportunities
114
+
115
+ For each ESRS topic, assess whether there are associated financial risks or opportunities.
116
+
117
+ **Financial Risk/Opportunity Identification Template:**
118
+
119
+ | ESRS Topic | Risk/Opportunity Type | Description | Time Horizon | Potential Financial Effect |
120
+ |-----------|----------------------|-------------|-------------|--------------------------|
121
+ | Climate (E1) | Physical risk (acute) | Flooding of key manufacturing site | Short-term | Asset damage, business interruption |
122
+ | Climate (E1) | Transition risk | Carbon pricing increases operating costs | Medium-term | Higher fuel/energy costs |
123
+ | Water (E3) | Physical risk (chronic) | Water scarcity in production region | Long-term | Supply disruption, increased costs |
124
+ | Workforce (S1) | Opportunity | Employer brand attracts talent | Short-term | Lower recruitment costs, retention |
125
+
126
+ ---
127
+
128
+ ### Step 5: Assess Financial Significance
129
+
130
+ Rate identified risks/opportunities:
131
+
132
+ | Rating | Magnitude | Likelihood |
133
+ |--------|-----------|-----------|
134
+ | Low | <1% of EBITDA | <25% |
135
+ | Medium | 1–5% of EBITDA | 25–75% |
136
+ | High | >5% of EBITDA | >75% |
137
+
138
+ **Financial materiality score:** Magnitude × Likelihood → topic is financially material if score exceeds threshold.
139
+
140
+ ---
141
+
142
+ ### Step 6: Determine Materiality — Topic by Topic
143
+
144
+ Apply the materiality determination matrix:
145
+
146
+ | ESRS Topic | Impact Material? | Financially Material? | Overall Materiality | Report? |
147
+ |-----------|-----------------|----------------------|-------------------|---------|
148
+ | E1 Climate | Yes (Scope 3 GHG) | Yes (carbon pricing risk) | **MATERIAL** | Full ESRS E1 |
149
+ | E2 Pollution | No | No | Non-material | Omit (brief statement) |
150
+ | E3 Water | Yes (operations in water-stressed area) | No | **MATERIAL** | Full ESRS E3 |
151
+ | S1 Own Workforce | Yes | No | **MATERIAL** | Full ESRS S1 |
152
+ | G1 Business Conduct | No | Yes (compliance risk) | **MATERIAL** | Full ESRS G1 |
153
+
154
+ ---
155
+
156
+ ### Step 7: Document the DMA (ESRS 2 SBM-3 + IRO-1)
157
+
158
+ **Mandatory disclosures about the DMA process:**
159
+
160
+ *ESRS 2 IRO-1 — Description of the process to identify and assess material IROs:*
161
+ - Scope of assessment (own operations / value chain depth)
162
+ - Methodology and criteria used
163
+ - How stakeholders were engaged
164
+ - Timeline and frequency of DMA
165
+ - How the results inform strategy and reporting
166
+
167
+ *ESRS 2 SBM-3 — Material impacts, risks and opportunities:*
168
+ - Complete list of material topics identified
169
+ - How material IROs interact with business model and strategy
170
+ - Current and anticipated financial effects
171
+
172
+ **Materiality Statement:** Brief explanation for each ESRS topic found non-material (why it was excluded).
173
+
174
+ ---
175
+
176
+ ### Step 8: Validate and Update
177
+
178
+ - DMA must be updated at least annually
179
+ - Trigger for mid-period review: significant business change, new regulation, emerging risk, stakeholder concern
180
+ - Changes to materiality conclusions must be disclosed
181
+
182
+ ---
183
+
184
+ ## Sector-Specific Guidance
185
+
186
+ ### High-Likelihood Material Topics by Sector
187
+
188
+ | Sector | Typically Material |
189
+ |--------|-------------------|
190
+ | Energy / Utilities | E1 (Climate), E2 (Pollution), E3 (Water), G1 (Business Conduct) |
191
+ | Financial Services | E1 (financed emissions), G1 (Business Conduct), S4 (Consumers) |
192
+ | Manufacturing | E1 (GHG), E2 (Pollution), E5 (Circular Economy), S1 (Workforce), S2 (Value Chain) |
193
+ | Retail / Consumer Goods | E1, E5 (packaging/waste), S2 (supply chain labour), S4 (consumers) |
194
+ | Agriculture / Food | E3 (Water), E4 (Biodiversity), E2 (Pollution), S2 (Value Chain) |
195
+ | Construction / Real Estate | E1 (building emissions), E5 (materials), E4 (land use), S3 (communities) |
196
+ | Technology | S1 (Workforce), S4 (data protection/consumers), G1 (Business Conduct) |
197
+ | Mining / Extractives | E1, E2, E3, E4, S3 (communities), G1 |
198
+ | Healthcare / Pharma | S4 (consumers), S1 (workforce), G1 (business conduct), E1 |
199
+
200
+ ---
201
+
202
+ ## DMA Documentation Templates
203
+
204
+ ### Impact Register Template
205
+
206
+ | ID | ESRS Topic | Impact Description | Direction | Scope | Time Horizon | Scale (1-5) | Scope (1-5) | Irremediability (1-5) | Likelihood (1-5) | Severity Score | Material? |
207
+ |----|-----------|-------------------|-----------|-------|-------------|------------|------------|----------------------|----------------|---------------|-----------|
208
+ | I-001 | E1 | Scope 3 GHG emissions from product use | Negative | Downstream | Long-term | 5 | 5 | 4 | 5 | 500 | YES |
209
+ | I-002 | S1 | Gender pay inequity among employees | Negative | Own ops | Short-term | 3 | 3 | 3 | 4 | 108 | YES |
210
+ | I-003 | E4 | No operations near biodiversity areas | n/a | — | — | 1 | 1 | 1 | 1 | 1 | NO |
211
+
212
+ ### Financial Risk/Opportunity Register Template
213
+
214
+ | ID | ESRS Topic | Type | Description | Time Horizon | Magnitude | Likelihood | Financial Score | Material? |
215
+ |----|-----------|------|-------------|-------------|-----------|-----------|----------------|-----------|
216
+ | F-001 | E1 | Transition risk | EU ETS carbon costs increase | Short-medium | High | High | HIGH | YES |
217
+ | F-002 | E3 | Physical risk | Water scarcity affects key plant | Long-term | Medium | Medium | MEDIUM | YES |
218
+ | F-003 | S1 | Opportunity | ESG leader attracts talent | Short-term | Low | Medium | LOW | NO |
219
+
220
+ ### DMA Summary Table
221
+
222
+ | ESRS Standard | Topic | Impact Materiality | Financial Materiality | Overall Material | First Reporting Year |
223
+ |--------------|-------|-------------------|----------------------|-----------------|---------------------|
224
+ | E1 | Climate Change | ✓ | ✓ | ✓ | FY 2025 |
225
+ | E2 | Pollution | ✗ | ✗ | ✗ | — |
226
+ | E3 | Water & Marine | ✓ | ✓ | ✓ | FY 2025 |
227
+ | E4 | Biodiversity | ✗ | ✗ | ✗ | — |
228
+ | E5 | Circular Economy | ✓ | ✗ | ✓ | FY 2025 |
229
+ | S1 | Own Workforce | ✓ | ✗ | ✓ | FY 2025 |
230
+ | S2 | Value Chain Workers | ✓ | ✗ | ✓ | FY 2025 |
231
+ | S3 | Communities | ✗ | ✗ | ✗ | — |
232
+ | S4 | Consumers | ✗ | ✓ | ✓ | FY 2025 |
233
+ | G1 | Business Conduct | ✓ | ✓ | ✓ | FY 2025 |
234
+
235
+ ---
236
+
237
+ ## Common DMA Pitfalls
238
+
239
+ **1. Scope too narrow:** Limiting the DMA to own operations only; ESRS requires value chain consideration where material.
240
+
241
+ **2. Stakeholder engagement inadequate:** Consulting only investors; ESRS requires engagement with affected stakeholders (workers, communities).
242
+
243
+ **3. Financial materiality neglected:** Conducting only impact assessment; financial risks/opportunities must be assessed separately.
244
+
245
+ **4. Thresholds not justified:** Setting arbitrary thresholds without documenting the rationale; thresholds must be disclosed in IRO-1.
246
+
247
+ **5. DMA done retrospectively:** Completing the DMA after deciding what to report; the DMA must drive reporting decisions.
248
+
249
+ **6. Over-exclusion:** Excluding topics from reporting without adequate justification; ESRS requires a brief explanation for excluded topics.
250
+
251
+ **7. Static DMA:** Treating DMA as a one-time exercise; it must be reviewed at least annually.
252
+
253
+ **8. Climate auto-excluded:** Climate change (E1) is presumed material for most companies; requires robust justification and strong evidence to exclude.
@@ -0,0 +1,401 @@
1
+ # ESRS Standards — Detailed Reference
2
+
3
+ ## Cross-Cutting Standards (Mandatory for All In-Scope Companies)
4
+
5
+ ---
6
+
7
+ ### ESRS 1 — General Requirements
8
+
9
+ **Purpose:** Sets the foundations for CSRD reporting — principles, structure, and the double materiality concept.
10
+
11
+ **Key Requirements:**
12
+
13
+ **Reporting Principles (paras. 1–18)**
14
+ - Relevance, faithful representation, comparability, verifiability, understandability
15
+ - Materiality-based reporting — only report what is material after DMA
16
+ - Connected information — sustainability information must connect to financial statements
17
+
18
+ **Double Materiality (paras. 19–44)**
19
+ - Two perspectives: impact materiality + financial materiality
20
+ - Both lenses must be applied; a topic is material if it meets EITHER criterion
21
+ - DMA must cover own operations AND value chain
22
+
23
+ **Value Chain (paras. 62–68)**
24
+ - Must consider upstream (suppliers) and downstream (customers, end-users) value chain
25
+ - Depth of value chain assessment scales with material impacts/risks
26
+ - Where direct data unavailable, use proxy data / sector averages (disclose methodology)
27
+
28
+ **Time Horizons (para. 72)**
29
+ - Short-term: up to 1 year
30
+ - Medium-term: 1–5 years
31
+ - Long-term: beyond 5 years
32
+
33
+ **Comparative Information (para. 86)**
34
+ - Prior-year comparative data required for all quantitative disclosures
35
+
36
+ **Transition Relief (paras. 118–134)**
37
+ - Phase-in for Scope 3, ESRS S1 pay gap, some biodiversity datapoints
38
+ - Listed SMEs may use simplified ESRS (voluntary standard pending)
39
+
40
+ ---
41
+
42
+ ### ESRS 2 — General Disclosures
43
+
44
+ **Purpose:** Mandatory disclosures on governance, strategy, and risk management applicable to all in-scope companies regardless of DMA outcome.
45
+
46
+ **Status:** Fully mandatory — cannot be omitted even if all topical standards are found non-material.
47
+
48
+ #### GOV — Governance
49
+
50
+ **GOV-1: Role of the administrative, management and supervisory bodies**
51
+ - Composition and diversity of governance bodies related to sustainability
52
+ - Sustainability expertise of governance members
53
+ - How governance bodies oversee sustainability strategy and IROs
54
+ - Integration of sustainability in board agendas and reporting lines
55
+
56
+ **GOV-2: Information provided to and sustainability matters addressed by the undertaking's administrative, management and supervisory bodies**
57
+ - Frequency and nature of sustainability information provided to governing bodies
58
+ - How governing bodies consider sustainability risks and opportunities in decision-making
59
+
60
+ **GOV-3: Integration of sustainability-related performance in incentive schemes**
61
+ - Whether and how ESG performance is integrated in executive/management remuneration
62
+ - Proportion of remuneration linked to sustainability targets
63
+
64
+ **GOV-4: Statement on due diligence**
65
+ - Whether the company has a due diligence process aligned with international standards (UN Guiding Principles, OECD Guidelines)
66
+ - How human rights and environmental due diligence is embedded in operations
67
+
68
+ **GOV-5: Risk management and internal controls over sustainability reporting**
69
+ - Internal control framework for sustainability reporting
70
+ - How risks of material misstatement in sustainability data are managed
71
+
72
+ #### SBM — Strategy and Business Model
73
+
74
+ **SBM-1: Strategy, business model, and value chain**
75
+ - Business model overview and key value drivers
76
+ - How sustainability matters are integrated into strategy
77
+ - Full value chain description (upstream, operations, downstream)
78
+ - Significant products, services, markets, and geographies
79
+
80
+ **SBM-2: Interests and views of stakeholders**
81
+ - Stakeholder engagement process and which stakeholders were consulted
82
+ - How stakeholder views influenced strategy and reporting
83
+ - Linkage between stakeholder input and material IROs identified
84
+
85
+ **SBM-3: Material impacts, risks and opportunities and their interaction with strategy and business model**
86
+ - Output of the DMA: list of material topics
87
+ - How material IROs interact with the business model and strategy
88
+ - Financial effects: current financial effects and anticipated financial effects of material IROs
89
+ - Resilience of strategy under different scenarios
90
+
91
+ #### IRO — Impacts, Risks and Opportunities
92
+
93
+ **IRO-1: Description of the processes to identify and assess material impacts, risks and opportunities**
94
+ - DMA methodology: scope, process, tools, assessment criteria
95
+ - How impact significance is assessed (scale, scope, irremediability, likelihood)
96
+ - How financial risks/opportunities are identified and assessed
97
+ - Stakeholders consulted and how their input was used
98
+ - Any sector-specific guidance applied
99
+
100
+ ---
101
+
102
+ ## Environmental Standards
103
+
104
+ ### ESRS E1 — Climate Change
105
+
106
+ **Applicability:** Apply if material after DMA. Climate is presumed material for most large companies — requires compelling justification to omit.
107
+
108
+ **Mandatory Datapoints Regardless of Materiality:**
109
+ - E1-1: Transition plan for climate change mitigation (Art. 19a(2)(a) — legally required even if topic found non-material)
110
+ - Energy consumption from fossil fuels (ESRS E1-5, para. 40)
111
+
112
+ **Key Disclosures:**
113
+
114
+ **E1-1: Transition plan for climate change mitigation**
115
+ - Decarbonisation targets: 2030, 2040, 2050 aligned with 1.5°C
116
+ - Planned actions and enablers
117
+ - Financial resources allocated (capex, opex, R&D)
118
+ - Role of carbon offsets (must distinguish from own-emission reductions)
119
+ - Locked-in GHG assets and stranded asset risk
120
+ - EU Taxonomy alignment targets
121
+
122
+ **E1-2: Policies related to climate change mitigation and adaptation**
123
+ - Scope of policies (own operations / value chain)
124
+ - Climate risk management policies
125
+ - Net-zero ambition and pathway description
126
+
127
+ **E1-3: Actions and resources in relation to climate change policies**
128
+ - Decarbonisation action plan with timelines
129
+ - Resources committed (financial, human, technical)
130
+ - Actions relating to key GHG sources in own operations and value chain
131
+
132
+ **E1-4: Targets related to climate change mitigation and adaptation**
133
+ - GHG reduction targets (scope 1, 2, 3 separately)
134
+ - Alignment with Paris Agreement (1.5°C pathway)
135
+ - Energy efficiency and renewable energy targets
136
+ - Physical and transition risk mitigation targets
137
+
138
+ **E1-5: Energy consumption and mix**
139
+ - Total energy consumption (MWh)
140
+ - Breakdown: fossil fuels / renewables / nuclear
141
+ - Energy intensity (per net revenue or other denominator)
142
+ - Renewable energy share
143
+
144
+ **E1-6: Gross Scopes 1, 2, 3 and Total GHG emissions**
145
+ - Scope 1: direct GHG emissions (tCO2e)
146
+ - Scope 2: location-based AND market-based (tCO2e)
147
+ - Scope 3: all 15 GHG Protocol categories (tCO2e)
148
+ - Total GHG emissions (Scope 1 + 2 + 3)
149
+ - GHG intensity (tCO2e per € net revenue)
150
+ - Methodology: GHG Protocol, emission factors, exclusions
151
+
152
+ **E1-7: GHG removals and climate project finance**
153
+ - GHG removals from own operations
154
+ - Carbon credits purchased (volume, type, standard)
155
+ - Distinction between removals and credits in net-zero claims
156
+
157
+ **E1-8: Internal carbon pricing**
158
+ - Whether internal carbon price is used in decision-making
159
+ - Price per tCO2e and application scope
160
+
161
+ **E1-9: Anticipated financial effects from material physical and transition risks and potential climate-related opportunities**
162
+ - Financial effects of physical risks (acute: flood, storm; chronic: temperature rise, sea-level)
163
+ - Financial effects of transition risks (policy, technology, market, reputational)
164
+ - Climate opportunities and anticipated financial benefits
165
+ - Climate scenario analysis (at minimum 1.5°C and >2°C scenarios recommended)
166
+
167
+ ---
168
+
169
+ ### ESRS E2 — Pollution
170
+
171
+ **Applicability:** Apply if material — manufacturing, chemicals, mining, agriculture sectors most likely.
172
+
173
+ **Key Disclosures:**
174
+ - **E2-1:** Policies related to pollution
175
+ - **E2-2:** Actions and resources to prevent/control pollution
176
+ - **E2-3:** Targets related to pollution
177
+ - **E2-4:** Pollution of air, water, soil — by pollutant type and medium
178
+ - Substances of Very High Concern (SVHC) under REACH Regulation
179
+ - Persistent Organic Pollutants (POPs)
180
+ - NOx, SOx, PM2.5 emissions
181
+ - Wastewater discharges by type and receiving body
182
+ - **E2-5:** Substances of concern — use, release, incidents
183
+ - **E2-6:** Anticipated financial effects from pollution-related risks and opportunities
184
+
185
+ ---
186
+
187
+ ### ESRS E3 — Water and Marine Resources
188
+
189
+ **Applicability:** Apply if material — agriculture, food & beverage, mining, textiles, electronics most likely.
190
+
191
+ **Key Disclosures:**
192
+ - **E3-1:** Policies related to water and marine resources
193
+ - **E3-2:** Actions and resources to manage water and marine resources
194
+ - **E3-3:** Targets for water and marine resources
195
+ - **E3-4:** Water consumption and withdrawal
196
+ - Total water withdrawal (megalitres) by source (surface, groundwater, third-party)
197
+ - Total water consumption (megalitres)
198
+ - Water intensity
199
+ - Withdrawal in water-stressed areas (WRI Aqueduct or equivalent)
200
+ - **E3-5:** Anticipated financial effects from water and marine resource risks
201
+
202
+ ---
203
+
204
+ ### ESRS E4 — Biodiversity and Ecosystems
205
+
206
+ **Applicability:** Apply if material — sites in or adjacent to biodiversity-sensitive areas, land use change, supply chains impacting biodiversity.
207
+
208
+ **Key Disclosures:**
209
+ - **E4-1:** Transition plan and consideration of biodiversity and ecosystems in strategy and business model
210
+ - **E4-2:** Policies related to biodiversity and ecosystems
211
+ - **E4-3:** Actions and resources related to biodiversity and ecosystems
212
+ - **E4-4:** Targets related to biodiversity and ecosystems
213
+ - **E4-5:** Impact metrics related to biodiversity and ecosystems change — land use, ecosystem fragmentation, invasive species
214
+ - **E4-6:** Anticipated financial effects from biodiversity and ecosystem-related risks
215
+
216
+ **Key metric:** Sites owned, leased, or managed in or near protected areas / key biodiversity areas.
217
+
218
+ ---
219
+
220
+ ### ESRS E5 — Resource Use and Circular Economy
221
+
222
+ **Applicability:** Apply if material — manufacturing, retail, packaging, construction, electronics most likely.
223
+
224
+ **Key Disclosures:**
225
+ - **E5-1:** Policies related to resource use and circular economy
226
+ - **E5-2:** Actions and resources related to resource use and circular economy
227
+ - **E5-3:** Targets related to resource use and circular economy
228
+ - **E5-4:** Resource inflows — material consumption, virgin materials, renewable vs. non-renewable
229
+ - **E5-5:** Resource outflows — waste by type (hazardous/non-hazardous) and disposal method (recycling, landfill, incineration); by-products and secondary raw materials
230
+ - **E5-6:** Anticipated financial effects from resource use and circular economy transition risks/opportunities
231
+
232
+ ---
233
+
234
+ ## Social Standards
235
+
236
+ ### ESRS S1 — Own Workforce
237
+
238
+ **Applicability:** Apply if material — workforce impacts are typically material for most large companies.
239
+
240
+ **Phase-in:** Gender pay gap and some workforce metrics have phase-in provisions for first-year reporters.
241
+
242
+ **Key Disclosures:**
243
+
244
+ **S1-1:** Policies related to own workforce (working conditions, equal treatment, health & safety)
245
+ **S1-2:** Processes for engaging with own workers and workers' representatives
246
+ **S1-3:** Processes to remediate negative impacts and channels for own workers to raise concerns
247
+
248
+ **S1-4:** Taking action on material impacts on own workers, and approaches to managing material risks and pursuing material opportunities related to own workforce, and effectiveness of those actions
249
+
250
+ **S1-5:** Targets related to managing material negative impacts, advancing positive impacts, and managing material risks and opportunities
251
+
252
+ **S1-6:** Characteristics of the undertaking's employees
253
+ - Total number of employees
254
+ - Breakdown: by gender, by country (for companies ≥1,000 employees in a country — if applicable), by employment type (permanent/temporary), by employment regime (full-time/part-time)
255
+ - Number of non-employee workers (contractors, agency staff)
256
+
257
+ **S1-7:** Characteristics of non-employees in the undertaking's own workforce
258
+
259
+ **S1-8:** Collective bargaining coverage and social dialogue
260
+ - % of own employees covered by collective bargaining agreements
261
+ - Countries where collective bargaining coverage applies
262
+
263
+ **S1-9:** Diversity metrics
264
+ - % female employees (total workforce + management levels)
265
+ - % employees by age group (<30, 30-50, >50)
266
+
267
+ **S1-10:** Adequate wages — alignment with living wage benchmarks
268
+
269
+ **S1-11:** Social protection coverage
270
+
271
+ **S1-12:** Persons with disabilities in the workforce
272
+
273
+ **S1-13:** Training and skills development
274
+ - Average training hours per employee per year
275
+ - % employees receiving regular performance reviews
276
+ - Transition assistance programs
277
+
278
+ **S1-14:** Health and safety
279
+ - % employees covered by health & safety management system (ISO 45001 or equivalent)
280
+ - Number of work-related fatalities (employees and non-employees)
281
+ - Lost Time Injury Frequency Rate (LTIFR) — per 1 million hours worked
282
+ - Number of recordable work-related accidents
283
+ - Work-related ill health cases
284
+
285
+ **S1-15:** Work-life balance — parental leave uptake rates by gender
286
+
287
+ **S1-16:** Compensation metrics
288
+ - CEO pay ratio (CEO total remuneration / median employee total remuneration)
289
+ - Gender pay gap (median remuneration women vs. men, %)
290
+
291
+ ---
292
+
293
+ ### ESRS S2 — Workers in the Value Chain
294
+
295
+ **Applicability:** Apply if material — companies with complex supply chains in high-risk sectors (garments, electronics, agriculture) most likely material.
296
+
297
+ **Key Disclosures:**
298
+ - **S2-1:** Policies related to workers in the value chain
299
+ - **S2-2:** Processes for engaging with workers in the value chain about impacts
300
+ - **S2-3:** Processes to remediate negative impacts on value chain workers
301
+ - **S2-4:** Actions taken, and approaches to managing risks related to value chain workers
302
+ - **S2-5:** Targets related to managing material impacts on workers in the value chain
303
+
304
+ **Key metrics:** Number of value chain workers potentially affected by adverse impacts; coverage of due diligence by supply chain tier.
305
+
306
+ ---
307
+
308
+ ### ESRS S3 — Affected Communities
309
+
310
+ **Applicability:** Apply if material — extractives, infrastructure, large land users, operations in indigenous territories.
311
+
312
+ **Key Disclosures:**
313
+ - **S3-1:** Policies related to affected communities
314
+ - **S3-2:** Processes for engaging with affected communities about impacts
315
+ - **S3-3:** Processes to remediate negative impacts on affected communities
316
+ - **S3-4:** Actions and approaches to managing community-related risks
317
+ - **S3-5:** Targets related to managing impacts on affected communities
318
+
319
+ **Topics covered:** Access to land/water/food, community health, indigenous peoples' rights (FPIC), economic displacement, cultural heritage.
320
+
321
+ ---
322
+
323
+ ### ESRS S4 — Consumers and End-Users
324
+
325
+ **Applicability:** Apply if material — B2C companies, healthcare, financial services, digital platforms, food/beverage most likely.
326
+
327
+ **Key Disclosures:**
328
+ - **S4-1:** Policies related to consumers and end-users
329
+ - **S4-2:** Processes for engaging with consumers and end-users about impacts
330
+ - **S4-3:** Processes to remediate negative impacts on consumers and end-users
331
+ - **S4-4:** Actions and approaches to managing consumer-related risks and opportunities
332
+ - **S4-5:** Targets related to managing material impacts on consumers and end-users
333
+
334
+ **Topics covered:** Product safety, data protection, accessibility, responsible marketing, non-discrimination, right to privacy, financial inclusion.
335
+
336
+ ---
337
+
338
+ ## Governance Standards
339
+
340
+ ### ESRS G1 — Business Conduct
341
+
342
+ **Applicability:** Apply if material — typically material for most large companies given breadth of topics.
343
+
344
+ **Key Disclosures:**
345
+
346
+ **G1-1:** Corporate culture and business conduct policies
347
+ - Code of conduct / code of ethics
348
+ - Anti-corruption and anti-bribery policies
349
+ - Lobbying and political engagement policies
350
+ - Payment practices policies (prompt payment)
351
+
352
+ **G1-2:** Management of relationships with suppliers
353
+ - Responsible procurement policies
354
+ - Fair dealing with suppliers (payment terms, supplier codes)
355
+ - Tier-1 supplier coverage of due diligence
356
+
357
+ **G1-3:** Prevention and detection of corruption and bribery
358
+ - Risk assessment methodology
359
+ - Training coverage for anti-corruption
360
+ - Incidents of corruption confirmed during the reporting period
361
+
362
+ **G1-4:** Incidents of corruption or bribery
363
+ - Number of convictions for corruption
364
+ - Total monetary value of fines for corruption
365
+ - Actions taken in response to confirmed incidents
366
+
367
+ **G1-5:** Political influence and lobbying activities
368
+ - Total financial or in-kind contributions to political parties
369
+ - List of significant lobbying activities and positions taken
370
+
371
+ **G1-6:** Payment practices
372
+ - Average payment period (days) to suppliers
373
+ - % of payments made beyond contractual terms
374
+ - Complaints from suppliers about payment practices
375
+
376
+ ---
377
+
378
+ ## Interoperability Notes
379
+
380
+ ### GRI Alignment (ESRS 1, Appendix C)
381
+ EFRAG published an interoperability mapping between ESRS and GRI Standards. Key mappings:
382
+ - ESRS E1 ↔ GRI 305 (Emissions), GRI 302 (Energy)
383
+ - ESRS S1 ↔ GRI 401 (Employment), GRI 403 (OHS), GRI 405 (Diversity)
384
+ - ESRS G1 ↔ GRI 205 (Anti-corruption), GRI 206 (Anti-competitive behaviour)
385
+
386
+ Companies with GRI reports should conduct gap analysis against ESRS rather than starting fresh.
387
+
388
+ ### TCFD Alignment
389
+ ESRS E1 incorporates TCFD framework recommendations:
390
+ - Governance → ESRS 2 GOV disclosures
391
+ - Strategy → ESRS 2 SBM disclosures + E1-9 financial effects
392
+ - Risk management → ESRS 2 IRO-1
393
+ - Metrics & targets → ESRS E1-4, E1-6
394
+
395
+ TCFD reporters have a strong foundation but must add: Scope 3 (all 15 categories), transition plan (E1-1), and EU Taxonomy alignment.
396
+
397
+ ### SASB Alignment
398
+ EFRAG published ESRS-SASB interoperability guidance. Sector-specific SASB metrics may provide useful proxies for ESRS datapoints in the same domain.
399
+
400
+ ### CDP Alignment
401
+ CDP questionnaire responses (Climate, Water, Forests) provide significant data that maps to ESRS E1, E3, E4. CDP reporters can reuse much of their data collection infrastructure.