CSRD double materiality assessment – practical

A Kraków-based manufacturing company with 600 employees receives a questionnaire from its German parent: complete a double materiality assessment before the next reporting cycle or face exclusion from the group's consolidated sustainability report. The team opens the Corporate Sustainability Reporting Directive and finds a framework that is simultaneously principled and technically demanding. Where does the process actually start?

The double materiality assessment (DMA) is the analytical backbone of CSRD reporting. It requires companies to evaluate sustainability matters from two directions: whether a topic creates financial risks or opportunities for the business (financial materiality), and whether the company's operations cause positive or negative impacts on people and the environment (impact materiality). Polish entities in scope must complete a documented DMA before preparing any European Sustainability Reporting Standards (ESRS) disclosure. Failure to conduct a defensible assessment forfeits the ability to use topic-level omissions and exposes the company to supervisory scrutiny from the Financial Supervision Authority (KNF) and the National Court Register (KRS) filing review.

This guide walks through the DMA procedure step by step – from scoping and stakeholder engagement through threshold-setting to documentation and audit readiness. Three business scenarios (manufacturing, IT services, foreign-owned subsidiary) illustrate where the process diverges. Common mistakes and a practical checklist close the guide.

What is double materiality and why does it matter for Polish companies?

Double materiality is not a single test. It is two parallel analyses that intersect. Financial materiality asks whether a sustainability topic could reasonably affect the company's cash flows, access to capital, or cost structure within a foreseeable horizon. Impact materiality asks whether the company's activities cause – or could cause – actual or potential effects on workers, communities, or ecosystems. A topic that clears either threshold is material and must be disclosed under the relevant ESRS standard.

Polish companies entering CSRD scope fall into three waves. Large public-interest entities (PIEs) with more than 500 employees reported first, for financial year 2024. Large non-PIE companies with more than 250 employees, a balance sheet above EUR 25m, or net turnover above EUR 50m report for 2025. Listed SMEs follow for 2026. The National Court Register (KRS) and the Polish Financial Supervision Authority (KNF) are the primary domestic supervisory bodies overseeing disclosure quality. The Polish Financial Supervision Authority (KNF) can impose administrative sanctions for material omissions in sustainability statements.

Why does this matter beyond compliance? A weak DMA creates a downstream problem. Every ESRS topic that is incorrectly scoped out – climate change, own workforce, supply chain due diligence – becomes a gap that auditors and stakeholders will identify. Remediation after publication is costly and reputationally damaging. Getting the assessment right before the first report is far cheaper than correcting it under pressure.

The Ustawa o rachunkowości (Accounting Act) as amended to transpose CSRD requires that the sustainability statement, including the DMA methodology, be subject to limited assurance. That means the assessor's logic – thresholds, stakeholder inputs, scoring – must be documented in a way that a third-party auditor can follow. Polish entities should treat DMA documentation as an audit file from day one.

How should a company structure the DMA process step by step?

The DMA has four operational phases: (1) universe definition, (2) stakeholder engagement, (3) scoring and threshold application, and (4) documentation and sign-off. Each phase has a minimum time requirement. A company completing a first-time DMA should budget at least 12 to 16 weeks for the full cycle. Rushing the stakeholder phase – the most common shortcut – invalidates the output.

Phase 1 – Universe definition (weeks 1–3). Map every ESRS topic and sub-topic against the company's value chain. The value chain includes upstream suppliers, own operations, and downstream customers and end-users. For a Polish manufacturer, upstream scope typically covers raw material extraction; downstream scope covers product use and end-of-life. The output is a long list of candidate topics – commonly 40 to 60 sub-topics – before any filtering.

Phase 2 – Stakeholder engagement (weeks 4–8). ESRS 1 requires companies to identify affected stakeholders and users of sustainability information. Affected stakeholders include employees, local communities, and supply chain workers. Users include investors, lenders, and analysts. The engagement does not need to be exhaustive, but it must be documented. Structured interviews, surveys, or workshop outputs should be retained. We obtained a clean first-year assurance opinion for a manufacturing client in the Mazowieckie region (autumn 2025) precisely because stakeholder interview notes were filed systematically from the outset.

Phase 3 – Scoring and thresholds (weeks 9–13). Assign scores to each candidate topic across impact dimensions (scale, scope, irremediability for negative impacts; scale and scope for positive impacts) and financial dimensions (magnitude and likelihood of financial effect). Apply a materiality threshold – typically a numerical cut-off agreed with management and disclosed in the methodology note. Topics above the threshold are material; topics below may be scoped out, provided the reasoning is documented.

Phase 4 – Documentation and sign-off (weeks 14–16). Produce a DMA report that records the methodology, scoring matrix, stakeholder map, threshold rationale, and final topic list. Management – at board level – must approve the output. The sustainability statement must then describe the DMA process in sufficient detail for a reader to understand which topics were included and why others were excluded.

Retain all stakeholder engagement records as audit evidence
Document threshold-setting decisions with named approvers and dates
Version-control the scoring matrix – auditors will ask for prior drafts
Cross-reference the final topic list to the ESRS disclosure requirements
Obtain board-level sign-off before the sustainability statement is finalised

For cross-border structures, particularly foreign-owned subsidiaries reporting into a parent's consolidated statement, the DMA methodology must be consistent with the group approach. A subsidiary cannot use a narrower threshold than the parent without documented justification. This is a frequent friction point when a Polish entity's assessment feeds into a German or Dutch consolidated report. Our compliance programme design guide for UAE subsidiaries in Poland addresses the analogous challenge of aligning group and local compliance frameworks.

What are the most common mistakes that invalidate a DMA?

Three mistakes account for the majority of DMA failures in first-year Polish filings. Each carries a different remediation cost and a different risk of supervisory attention. Understanding them before starting the process is far more efficient than correcting them under audit pressure.

Mistake 1 – Treating DMA as a desk exercise. Some teams complete the assessment using only internal data and management judgment, without structured stakeholder input. ESRS 1 explicitly requires engagement with affected stakeholders. An assessment that cannot point to documented stakeholder inputs will not survive limited assurance review. The auditor will note the gap; the company will need to repeat the engagement phase, delaying the entire reporting timeline by weeks.

Mistake 2 – Conflating financial and impact materiality. These are separate tests. A topic can be impact-material without being financially material – for example, a company whose operations affect a local waterway but whose financial model is not directly exposed to water-related costs. Treating the two tests as one, or allowing financial materiality to override impact materiality, produces a systematically narrow topic list. Regulators and assurance providers are increasingly alert to this pattern.

Mistake 3 – Setting thresholds without methodology disclosure. Many companies choose a scoring threshold of, say, 3.0 on a 5-point scale but do not document why that number was chosen or how it compares to industry practice. The sustainability statement must describe the methodology. A threshold that appears arbitrary – or that conveniently excludes sensitive topics – will attract scrutiny. The threshold rationale should be approved by the audit committee or supervisory board, not just the sustainability team.

A secondary risk involves the value chain boundary. Companies frequently scope out upstream suppliers on the grounds that data is unavailable. ESRS 1 permits this, but requires disclosure of the omission and the reason. Silently excluding the supply chain – without noting the gap – is treated as a methodology deficiency, not a data limitation. The distinction matters for assurance purposes. For companies managing complex cross-border supplier relationships, the legal analysis in our compliance programme design guide for Italy subsidiaries in Poland provides a useful parallel on scoping decisions under group structures.

Personal liability is a real risk here. Under Polish corporate legislation, board members who sign off on a sustainability statement containing material misstatements – including a deficient DMA – may face personal liability for damages caused to investors or creditors who relied on the disclosure. That consequence is irreversible once the statement is published and audited.

How do the three business scenarios play out in practice?

The DMA process looks different depending on the company's sector, ownership structure, and value chain complexity. Three scenarios illustrate the key divergence points: a Polish manufacturer, a Warsaw-based IT services provider, and a Polish subsidiary of a foreign group.

Scenario A – Manufacturing (Silesia, 400 employees). A steel components manufacturer has a long upstream value chain (mining, logistics) and significant own-operations impacts (emissions, wastewater, occupational health). Climate change, pollution, and own workforce are almost certainly material on the impact side. Transition risk and physical risk from climate are likely financially material. The DMA must cover Scope 1 and 2 emissions data as a minimum. The stakeholder map should include trade union representatives and local community groups near the production site. Budget at least 14 weeks and expect the assurance provider to focus on the emissions data trail.

Scenario B – IT services (Warsaw, 300 employees). A software development firm has a short value chain and low physical impact. Climate change may not be impact-material for own operations, but data centre energy use and electronic waste in the supply chain may clear the threshold. The own workforce topic – covering working conditions, diversity, and pay equity – is typically material. The DMA process is faster (10 to 12 weeks is realistic) but the stakeholder engagement must still include employees and, if relevant, freelance contractors. Financial materiality analysis should address talent retention risk and regulatory exposure under the EU AI Act.

Scenario C – Foreign-owned subsidiary (Lower Silesia, 250 employees). A Polish subsidiary of a Dutch parent must align its DMA with the group methodology. The parent's threshold and topic list set the floor; the subsidiary may identify additional locally material topics (for example, topics specific to Polish labour law or local environmental permits) but cannot set a higher threshold that excludes group-level topics. The subsidiary's management is still responsible for the local DMA, even if the group sustainability team provides templates. We secured a clean assurance opinion for a foreign investor's subsidiary in Lower Silesia (spring 2026) by establishing a clear protocol for how local deviations from the group methodology would be documented and escalated.

For IT and technology companies navigating both CSRD and digital regulation, the intersection with whistleblower compliance and internal reporting channels is worth noting separately. A company that identifies workforce grievance mechanisms as a material topic under ESRS S1 must also ensure those mechanisms meet the requirements of the Polish whistleblower protection law. The two frameworks reinforce each other. Expert analysis of evidentiary standards in cross-border disputes – relevant when DMA-related claims reach litigation – is covered in our guide to expert witnesses in Polish court proceedings.

To receive an expert assessment of your company's DMA readiness and reporting timeline, contact info@kordeckipartners.com.

What should companies prepare before starting the DMA?

Preparation reduces the total time and cost of the DMA significantly. Companies that arrive at phase one with the right inputs in place complete the process in 12 weeks rather than 18. The preparation checklist below reflects the documents and decisions that most frequently cause delays when they are missing at the start.

Organisational boundary map: legal entities, geographies, and operational sites in scope
Value chain map: key upstream suppliers (by spend category) and downstream distribution channels
Existing ESG data inventory: emissions data, energy use, workforce headcount and demographics, safety records
Stakeholder register: primary affected stakeholder groups and named contacts for engagement
Governance decision: which body (board, audit committee, sustainability committee) will approve the DMA output

Cost is a practical concern. A first-time DMA for a company with 250 to 500 employees typically requires between 80 and 150 hours of internal and external effort combined. External legal and advisory fees in Poland range from PLN 40,000 to PLN 120,000 depending on value chain complexity and the level of assurance preparation required. Companies that have already completed an internal ESG gap analysis, or that have existing ISO 14001 or ISO 45001 certification, can reduce the scoping phase by two to three weeks.

The AML and whistleblower compliance frameworks that many Polish companies already maintain provide a useful structural parallel. Both require documented risk identification, stakeholder-facing channels, and board-level sign-off. Teams familiar with AML risk assessments will find the DMA scoring logic recognisable. ESG reporting and compliance lawyer Warsaw engagements increasingly overlap, as the same governance infrastructure supports both frameworks.

One timing point deserves emphasis. CSRD requires the sustainability statement to be included in the management report, which is filed with the National Court Register (KRS) alongside the annual financial statements. The DMA must therefore be complete before the financial year closes or, at the latest, before the management report is drafted. Starting the DMA in the fourth quarter of the reporting year – as many companies do – leaves insufficient time for stakeholder engagement and documentation. Starting in the second quarter is the defensible approach.

Frequently asked questions

Q: Can a company use a third party's DMA methodology rather than developing its own?

A: Yes, provided the methodology is adapted to the company's specific value chain and stakeholder context. Generic sector templates are a useful starting point, but they cannot substitute for company-specific stakeholder engagement or threshold-setting. The sustainability statement must describe the methodology actually used, not the template source. If the methodology is borrowed and unadapted, assurance providers will flag the gap.

Q: How long does a first-time DMA typically take, and what does it cost?

A: A first-time DMA for a mid-sized Polish company (250 to 500 employees) takes 12 to 16 weeks from scoping to board sign-off. External advisory costs in Poland typically range from PLN 40,000 to PLN 120,000. Companies with existing ESG data infrastructure and a functioning stakeholder engagement process can reduce both the timeline and the cost. Attempting to compress the process below 10 weeks without prior ESG groundwork is a common cause of assurance failures.

Q: Does a Polish subsidiary need to conduct its own DMA if the parent group has already done one?

A: This is a frequent misconception. A subsidiary that is individually in scope under CSRD must produce its own sustainability statement, which requires its own DMA. The group DMA can provide the methodology framework and topic universe, but the subsidiary's management must independently assess local materiality and document the analysis. Relying on the parent's DMA without a subsidiary-level assessment is a methodology deficiency that assurance providers will identify. The subsidiary's board bears responsibility for the local statement regardless of group structures.

For a tailored strategy on CSRD double materiality assessment for your company's specific sector and ownership structure, reach out to info@kordeckipartners.com.

About KORDECKI & Partners

KORDECKI & Partners is a law firm based in Warsaw and Krakow, advising business clients across 30 jurisdictions. Our team combines expertise in Polish and international law with a practical approach to ESG compliance, CSRD reporting, and sustainability governance. We work with Polish entrepreneurs, foreign investors, and in-house legal teams. To discuss your situation, contact info@kordeckipartners.com.