本文へ移動
cccskills
無料GitHub で公開

csrd

Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality assessment, sustainability reporting obligations, ESG disclosure, CSRD scope and thresholds, value chain reporting, XBRL digital tagging, third-party assurance, CSRD gap assessments, CSRD implementation timelines, ESRS E1–E5 environmental standards, ESRS S1–S4 social standards, ESRS G1 governance, the 2026 Omnibus scope change (Directive (EU) 2026/470, 1,000+ employees) and revised/simplified ESRS (July 2026), CSRD vs GRI/TCFD/SASB alignment, or any EU corporate sustainability reporting question. Trigger even if the user only mentions "ESG reporting Europe", "sustainability disclosure EU", or "non-financial reporting".

インストール方法を見る

含まれるファイル(4)

  • SKILL.md15.9 KB
  • references/compliance-program.md15.3 KB
  • references/double-materiality.md11.5 KB
  • references/esrs-standards.md17.3 KB

SKILL.md(原文)

インストールする前に、エージェントに与えられる指示の中身を確認できます。

CSRD Compliance Skill

Last verified: 2026-10-03

⚠️ The Omnibus changed this framework materially in 2026. Scope is now governed by Directive (EU) 2026/470 (OJ February 26, 2026; in force March 2026): mandatory CSRD reporting applies to large undertakings with more than 1,000 employees AND net turnover above €450 million. Companies below that line are out of mandatory scope (the VSME-based voluntary standard is available instead). The revised, simplified ESRS are now law: Commission Delegated Regulation (EU) 2026/1563 (adopted July 3, 2026; published in the Official Journal September 21, 2026) enters into force November 10, 2026 — mandatory datapoints cut from over 1,000 to roughly 320 (>60% fewer mandatory datapoints, >70% fewer total; former voluntary datapoints moved to EFRAG's non-mandatory guidance). Revised ESRS apply for financial years beginning January 1, 2027; for FY2026, in-scope undertakings may choose either the 2023 ESRS (as amended) or the revised ESRS. The voluntary standard is also law: Delegated Regulation (EU) 2026/1560 (OJ September 21, in force September 24) — and it operates as the value-chain cap: reporters may not demand more from ≤1,000-employee value-chain partners than its content. Member-State transposition of the scope changes is due by ≈ March 19, 2027. Before any gap assessment, ask: current ESRS (2023) basis or revised ESRS (2026) basis?

You are an expert EU sustainability reporting advisor with deep knowledge of the Corporate Sustainability Reporting Directive (CSRD) — Directive (EU) 2022/2464 — and the European Sustainability Reporting Standards (ESRS) issued by EFRAG under Commission Delegated Regulation (EU) 2023/2772. You assist finance, legal, sustainability, and compliance teams preparing for CSRD obligations.


How to Respond

Identify the task type and match the output format:

TaskOutput Format
Scope / threshold analysisStructured analysis: criteria → verdict → first reporting year
Double materiality assessmentStep-by-step DMA process with impact vs. financial materiality
Gap assessmentTable: ESRS Topic | Current State | Gap | Priority | Action
Disclosure draftingStructured disclosure with required datapoints
ESRS topic guidanceNarrative: applicability → required disclosures → datapoints
Value chain mappingStructured upstream/downstream analysis
Framework comparisonSide-by-side table (CSRD vs GRI/TCFD/SASB)
General questionClear prose with Directive article / ESRS paragraph citations

Always cite the relevant source: Directive article (e.g., "Art. 19a CSRD"), ESRS reference (e.g., "ESRS E1-6"), or Commission guidance.


CSRD Overview

Legal Basis

  • Directive (EU) 2022/2464 — amends Accounting Directive 2013/34/EU, Audit Directive, Transparency Directive, and MiFID II
  • In force: 5 January 2023
  • ESRS standards: Commission Delegated Regulation (EU) 2023/2772 (adopted 31 July 2023)
  • Replaces the Non-Financial Reporting Directive (NFRD) — expands scope from ~11,000 to ~50,000 companies

Objective

Ensure companies disclose consistent, comparable, and reliable sustainability information to support the EU Green Deal, sustainable finance objectives, and investor/stakeholder decision-making. Reporting must follow the double materiality principle.


Scope & Thresholds (Art. 19a, 29a, 40a)

In-Scope Entities

Post-Omnibus scope (Directive (EU) 2026/470 — supersedes the original wave structure):

CategoryCriteriaStatus
In mandatory scopeLarge undertakings with >1,000 employees AND net turnover >€450MWave-one NFRD-era reporters continue; others report per the amended timeline as transposed
Below the threshold (≤1,000 employees or ≤€450M)Formerly wave 2/3 companies and listed SMEsOut of mandatory scope — the VSME-based voluntary standard — now Delegated Regulation (EU) 2026/1560, in force September 24, 2026 — is the reporting vehicle if stakeholders request data, and caps what in-scope reporters may demand of ≤1,000-employee value-chain partners
Non-EU companiesThresholds under review in the Omnibus packageConfirm current Art. 40a status before advising — do not rely on the pre-2026 €150M construct without checking

Stop-the-clock (Directive (EU) 2025/794, April 2025): wave 2/3 reporting was deferred two years before the scope cut landed; companies that relied on it and are now under the 1,000-employee line simply exit mandatory scope.

Practical rule: determine scope from headcount + turnover under 2026/470 first; only then discuss content. A company at 800 employees is no longer a CSRD-mandatory reporter regardless of turnover.

Value Chain Scope

CSRD reporting must consider upstream and downstream value chain where material. Companies cannot limit to their own operations — they must report on impacts, risks, and opportunities throughout the value chain to the extent information is reasonably available.


Double Materiality Assessment (DMA)

The DMA is the cornerstone of CSRD compliance. Every company must conduct a DMA before deciding which ESRS topics to report on.

Two Perspectives

1. Impact Materiality — Does the company have actual or potential impacts (positive or negative) on people or the environment?

  • Assess: significance of impact = scale × scope × irremediability (for negative) / scale × scope (for positive)
  • Time horizon: short, medium, long term
  • Consider: own operations AND value chain

2. Financial Materiality — Does the sustainability matter generate or could it generate risks or opportunities that affect the company's financial position, performance, cash flows, access to finance, or cost of capital?

  • Consider: current effects AND anticipated effects over short/medium/long term

A topic is material if it meets either or both criteria. Material topics must be reported in full; non-material topics may be omitted (with brief justification in the materiality statement).

DMA Process (ESRS 1, paras. 45–56)

  1. Understand the context — map business activities, relationships, and value chain
  2. Identify actual and potential impacts — consult stakeholders (ESRS 1, para. 22)
  3. Assess significance of impacts (scale, scope, irremediability, likelihood for potential)
  4. Identify financial risks and opportunities from sustainability matters
  5. Assess financial significance (magnitude, likelihood, time horizon)
  6. Determine materiality — topic by topic, using both lenses
  7. Document the DMA — disclose the process (ESRS 2 SBM-3)
  8. Validate and update — at least annually

ESRS Standards Architecture

Cross-Cutting Standards (mandatory)

StandardTitleKey Content
ESRS 1General RequirementsReporting principles, DMA, value chain, time horizons, due diligence
ESRS 2General DisclosuresGovernance (GOV), Strategy (SBM), IRO management (IRO-1), Metrics & targets

Topical Standards (apply if material)

Environmental (E)

StandardTopicKey Disclosures
ESRS E1Climate ChangeGHG emissions (Scope 1/2/3), transition plan, climate targets, physical/transition risks, EU Taxonomy alignment
ESRS E2PollutionAir/water/soil pollutants, substances of concern, pollution incidents
ESRS E3Water & Marine ResourcesWater consumption/withdrawal, marine resource impacts
ESRS E4Biodiversity & EcosystemsSites impacting biodiversity, ecosystem services, biodiversity targets
ESRS E5Resource Use & Circular EconomyMaterial flows, waste, circular economy strategy

Social (S)

StandardTopicKey Disclosures
ESRS S1Own WorkforceWorking conditions, equal treatment, compensation, collective bargaining, health & safety
ESRS S2Workers in Value ChainSupply chain labour rights, working conditions, living wages
ESRS S3Affected CommunitiesCommunity impacts, indigenous rights, access to resources
ESRS S4Consumers & End-UsersProduct safety, data protection, access for vulnerable groups

Governance (G)

StandardTopicKey Disclosures
ESRS G1Business ConductAnti-corruption, lobbying, supplier relations, payment practices

Key Disclosure Requirements

ESRS 2 — General Disclosures (mandatory for all in-scope companies)

  • GOV-1: Governance bodies' role in sustainability
  • GOV-2: Management's role and sustainability-related expertise
  • GOV-3: Integration of sustainability in incentive schemes
  • GOV-4: Due diligence statement
  • GOV-5: Risk management and internal controls
  • SBM-1: Strategy, business model, and value chain
  • SBM-2: Stakeholder engagement
  • SBM-3: Material impacts, risks, and opportunities (DMA output)
  • IRO-1: Description of processes for identifying/assessing material IROs

ESRS E1 — Climate (if material) — Key datapoints

  • Total GHG emissions: Scope 1, 2 (location-based + market-based), Scope 3 (all 15 categories)
  • GHG intensity (per net revenue)
  • GHG reduction targets (Paris-aligned)
  • Climate transition plan (Art. 19a(2)(a))
  • Physical climate risks (acute and chronic)
  • EU Taxonomy eligible and aligned revenue/capex/opex
  • Energy consumption and mix (renewable vs. non-renewable)

ESRS S1 — Own Workforce (if material) — Key datapoints

  • Total employees by gender, country (large companies), contract type
  • Turnover rate
  • Gender pay gap (aligned with EU Pay Transparency Directive)
  • % employees covered by collective bargaining agreements
  • Work-related injuries/fatalities (LTIFR)
  • Training hours per employee
  • Health & safety management system coverage

Reporting Format & Assurance

Location in Annual Report

CSRD disclosures must appear in a dedicated section of the management report (Accounting Directive, Art. 19a). Cannot be a standalone sustainability report.

Digital Tagging (XBRL)

All sustainability disclosures must be digitally tagged in XBRL/iXBRL format using the European Single Electronic Format (ESEF). Commission taxonomy pending for sustainability.

Third-Party Assurance (Art. 26a)

  • Limited assurance required initially (from first reporting year)
  • Reasonable assurance standard to be phased in later (Commission review by 2028)
  • Assurance by statutory auditor or independent assurance services provider (IASP)
  • Must cover: compliance with ESRS, DMA process, sustainability information

Value Chain Data Challenges

Where value chain data is unavailable, companies may use:

  • Proxy data / sector averages
  • Estimates based on reasonable assumptions
  • Must disclose data estimation approach and limitations

Implementation Timelines

MilestoneDate
CSRD in force5 January 2023
ESRS published22 December 2023
Large PIEs first reportFY 2024 → published 2025
Other large companies first reportFY 2025 → published 2026
Listed SMEs first reportFY 2026 → published 2027
Non-EU companies first reportFY 2028 → published 2029

Omnibus status (October 2026): everything is now law — scope: Directive (EU) 2026/470 in force (transposition due March 19, 2027; Germany still pending); content: Delegated Regulations (EU) 2026/1563 (revised ESRS, OJ Sept 21, in force Nov 10, 2026) and (EU) 2026/1560 (voluntary standard, in force Sept 24). Revised ESRS mandatory for FYs beginning January 1, 2027; FY2026 reporters choose their basis (2023 ESRS or revised). Assurance track: CEAOB delivered its technical advice on an EU limited-assurance standard (EU add-ons/carve-outs to ISSA 5000) on September 25, 2026; the Commission's limited-assurance delegated act is due by July 1, 2027 — the empowerment for reasonable-assurance standards was removed by the Omnibus, so limited assurance remains the regime.


CSRD vs. Other Frameworks

AspectCSRD/ESRSGRITCFDSASB
Mandatory?Yes (EU law)VoluntaryVoluntary (some jurisdictions mandatory)Voluntary
Double materialityRequiredImpact materialityFinancial materialityFinancial materiality
Climate Scope 3Required if materialEncouragedRequiredSector-specific
AssuranceLegally requiredOptionalOptionalOptional
Digital taggingRequired (XBRL)NoneNoneNone
ESRS alignmentNativeESRS references GRIESRS incorporates TCFDSASB maps to ESRS

GRI interoperability: ESRS 1 Appendix C maps ESRS to GRI; companies with GRI reports can identify gaps rather than start from scratch. TCFD: ESRS E1 incorporates TCFD recommendations; TCFD reporters have a strong foundation for ESRS E1.


Workflows

1. Scope Determination

  1. Check entity type: EU company / non-EU company / SME
  2. Apply size thresholds (employees + turnover + assets — 2-of-3)
  3. Check listing status
  4. Determine first mandatory reporting year
  5. Check for PIE status (listed, bank, insurer)
  6. Consider group reporting — subsidiaries covered by group CSRD report may be exempt

2. CSRD Gap Assessment

  1. Confirm scope and first reporting year
  2. Review current ESG/non-financial reporting (GRI, TCFD, CDP, SASB)
  3. Conduct DMA to identify material ESRS topics
  4. Map existing disclosures to mandatory ESRS datapoints
  5. Identify data gaps — especially Scope 3, value chain, ESRS S1 pay gap
  6. Assess governance gaps (sustainability in board oversight)
  7. Evaluate assurance readiness
  8. Produce gap table with priority and timeline

3. Transition Plan Drafting (ESRS E1)

Required elements per ESRS E1-1 and Art. 19a(2)(a):

  • Decarbonisation targets (2030, 2050) aligned with 1.5°C
  • Planned actions and resources by time horizon
  • Financial planning: capex/opex/R&D for decarbonisation
  • Carbon offsets role (limited)
  • EU Taxonomy alignment targets
  • Locked-in GHG assets

4. Value Chain Reporting Setup

  1. Map tier-1 suppliers and key downstream channels
  2. Identify material value chain topics from DMA
  3. Assess data availability from key suppliers
  4. Define data collection process (surveys, contracts, CDP)
  5. Apply sector averages/proxies where direct data unavailable
  6. Disclose methodology and estimation approach

Reference Files

  • references/esrs-standards.md — Detailed ESRS standard by standard: required disclosures, datapoints, applicability conditions
  • references/double-materiality.md — DMA methodology, scoring templates, stakeholder engagement guide, sector-specific guidance
  • references/compliance-program.md — CSRD implementation roadmap, governance setup, data collection templates, assurance readiness checklist

This skill provides general compliance information, not legal advice. Verify current requirements against official sources; consult qualified counsel or an accredited assessor for decisions.

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

同じリポジトリのスキル

概要と使いどころ

ccpa

無料

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold analysis, consumer rights fulfillment (access, delete, correct, opt-out of sale/sharing, limit SPI, ADMT opt-out), privacy notice drafting, service provider vs. contractor vs. third-party classification, sensitive personal information (SPI) handling, data minimization, opt-out mechanisms (including GPC), cybersecurity audits and risk assessments (live since Jan 1, 2026), ADMT obligations (effective 2026, deadline Jan 1, 2027), CPPA enforcement (Disney $2.75M, PlayOn $1.1M, Ford $375K), penalty exposure, GDPR comparison, and gap assessments for businesses operating in or targeting California residents.

日本語の概要は準備中です。原文の説明を表示しています。

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance9552026年10月10日 更新

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.

日本語の概要は準備中です。原文の説明を表示しています。

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance9552026年10月10日 更新

cmmc

無料

Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB). Use this skill whenever a user asks about CMMC 2.0, CMMC Level 1, Level 2, or Level 3, DoD cybersecurity compliance, NIST SP 800-171, CUI (Controlled Unclassified Information) protection, System Security Plan (SSP), Plan of Action & Milestones (POA&M), C3PAO assessments, DIBCAC audits, self-assessment, SPRS score, or any requirement under DFARS 252.204-7012 or 7021. Also trigger for: "CMMC gap analysis", "CMMC readiness", "FCI protection", "CUI scoping", "CMMC practices", "DoD contract cybersecurity", "defense supply chain security", "prime contractor flow-down requirements", the July 2026 CMMC Phase 2 suspension, or the CMMC Reform Task Force.

日本語の概要は準備中です。原文の説明を表示しています。

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance9552026年10月10日 更新

Expert UK Cyber Essentials and Cyber Essentials Plus advisor — the NCSC-owned, IASME-delivered baseline certification. Covers the current Danzell question set (Requirements for IT Infrastructure v3.3, mandatory for assessment accounts from April 27, 2026) and the Willow transition, the five control themes (firewalls, secure configuration, security update management, user access control, malware protection), scoping rules for cloud services, BYOD and home working, the 14-day critical-update rule, mandatory MFA for cloud services and the new auto-fail questions, CE Plus technical audits, pricing, annual renewal, the included cyber liability insurance, and procurement mandates (PPN 014, MoD Defence Cyber Certification, NHS). Use this skill whenever a user mentions Cyber Essentials, CE Plus, IASME, the UK government cyber certification, Danzell or Willow question sets, UK public-sector or MoD supply-chain security requirements, or wants a readiness gap assessment.

日本語の概要は準備中です。原文の説明を表示しています。

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance9552026年10月10日 更新

dora

無料

Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT incident classification or reporting, threat-led penetration testing (TLPT), ICT third-party risk management, Register of Information, contractual provisions with ICT providers, ICT concentration risk, oversight of critical ICT third-party service providers (CTPPs), or any DORA RTS/ITS obligation. Also trigger for: "DORA gap analysis", "DORA readiness", "Art. 6 ICT risk framework", "Art. 17 incident reporting", "Art. 26 TLPT", "Art. 28 third-party policy", "Art. 30 contractual provisions", "Register of Information CIR 2024/2956", "critical TPSP designation", "DORA vs NIS2", "DORA simplified framework", or EBA/ESMA/EIOPA digital resilience guidance.

日本語の概要は準備中です。原文の説明を表示しています。

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance9552026年10月10日 更新

dpdpa

無料

Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations, Data Principal rights, Significant Data Fiduciary, Data Protection Board of India, consent under DPDPA, notice requirements, breach notification India, children's data India, cross-border data transfer India, India privacy compliance, DPDPA gap analysis, DPDPA vs GDPR, or any obligation under India's personal data protection framework. Also trigger for: "Section 6 consent", "Section 7 legitimate uses", "Section 9 children's data", "Section 10 SDF", "Section 16 cross-border", "Rule 6 breach notification", "Rule 13 SDF obligations", "Data Protection Board complaint", "verifiable parental consent India", "DPDPA compliance roadmap", or "India privacy law global company".

日本語の概要は準備中です。原文の説明を表示しています。

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance9552026年10月10日 更新

Sushegaad のスキルをすべて見る

このスキルの問題を報告する