A Cognitud Field Guide · 2026 Edition · IX Chapters

How enterprise leaders convert compliance.
Into competitive advantage.

“CSRD Wave 2 is filing. ISSB is the disclosure baseline in twenty-plus jurisdictions. India’s BRSR Core is fully in force.”

Talk to our team Calculate your ESG score

Updated23 July 2026Read14 minChaptersIXEdition2026ByCognitud Advisory

Executive summary

Four things every board should know before the 2026 cycle closes.

CSRD Wave 2 is not paused. The 2025 Omnibus package simplified specific datapoints and extended timelines for smaller companies by two years — but Wave 2 (~50,000 EU companies) is still filing its first report in 2026 on FY 2025 data.
ISSB is now the default disclosure baseline outside the EU. Twenty-plus jurisdictions have adopted or committed. For multinationals, the practical challenge is building one measurement layer that maps out to both ESRS and IFRS S1/S2.
India's BRSR Core is fully in force for the top 1,000 listed companies with reasonable-assurance schedules phasing upward. Value-chain BRSR is expected for the top 250 from FY 2025-26.
Nature is the next disclosure frontier. TNFD adoption has passed 500 organisations. ESRS E4 (Biodiversity) already applies to CSRD-covered entities. ISSB has begun scoping a mandatory nature standard for release later this decade.

Section I

The 2026 landscape

The last eighteen months have compressed a decade of regulatory development into one filing cycle. Sustainability disclosure is no longer a voluntary parallel to financial reporting — it is being absorbed into it. Same timelines. Same audit committees. Same assurance regime. Same executive accountability.

Three shifts sit under this compression. First, the frameworks converged. ESRS (EU), IFRS S1/S2 (ISSB) and BRSR Core (India) now share enough common measurement infrastructure that a well-designed data layer feeds all three. Second, the scope widened: nature-related risk via TNFD, human-rights due diligence via CS3D, and transition-plan disclosure moved from “nice to have” to explicit line items. Third, the audience broadened — ESG data now feeds not only investors but also customers with CSRD-covered procurement, lenders with green-loan pricing, insurers with climate-underwriting models, and regulators with cross-border data-sharing agreements.

“For enterprise leaders, the question is no longer whether to comply. It is whether the compliance capex you're about to spend also builds a competitive advantage.”
— Cognitud Advisory

Section II

The regulatory matrix

Five regulatory tracks cover roughly 95% of the ESG disclosure obligations our clients face in 2026. Below is what applies, where, and by when.

Regime	Region	Status in 2026	Who it covers
CSRD / ESRS	European Union	Wave 2 filing (post-Omnibus)	~50,000 EU companies meeting two of three: 250+ employees, €50M turnover, €25M balance sheet. Double materiality.
ISSB S1 & S2	Global	Mandatory in 20+ jurisdictions	Adoption confirmed in Australia (FY 2025 large groups), Japan (SSBJ from FY 2027), UK (endorsement in progress), Singapore, Malaysia, Brazil, and others.
BRSR Core	India	In force with phased assurance	Top 1,000 listed companies by market cap. Reasonable assurance mandatory for top 250, phasing upward. Value-chain BRSR expected for top 250 from FY 2025-26.
US SEC + California	United States	SEC rule stayed; CA statutes on track	SEC climate rule paused pending litigation. California SB 253 (Scope 1&2 from 2026; Scope 3 in 2027) + SB 261 (climate risk from 2026) cover most Fortune 500 with CA operations.
CS3D	EU + non-EU with EU activity	Phased in from 2027–2029	Large EU groups (1,000+ employees, €450M turnover) and equivalent non-EU groups with EU activity above the threshold. Human-rights and environmental due-diligence obligation across the value chain.

Section III

The compliance calendar

Same map, arranged temporally. The three-year window that determines whether your programme is on the front foot or the back foot.

2026

The first-filing year

CSRD Wave 2

~50,000 EU companies file first report on FY 2025 data. Limited assurance mandatory. Post-Omnibus datapoint set applies.

California SB 253 (Scope 1 & 2)

First reporting on FY 2025 emissions data for companies with >$1B revenue and California operations.

California SB 261

First climate-related financial risk reports (TCFD-aligned) for companies >$500M revenue with CA activity.

BRSR Core assurance

Reasonable assurance mandatory for top 250 listed Indian companies. Value-chain BRSR expected for the same cohort.

2027

The scope expands

California SB 253 (Scope 3)

Scope 3 disclosure begins for covered companies (delayed by one year from original schedule).

ISSB in Japan

SSBJ standards take effect for large groups from FY 2027. Effectively means ISSB in the world's third-largest capital market.

BRSR Core assurance broadens

Assurance obligation phases from top 250 upward toward the top 1,000, per SEBI schedule.

2028

The next-tier catches up

CSRD Wave 3

Originally 2027, extended by the Omnibus package. Listed SMEs and specific non-EU groups with EU activity enter scope.

ISSB nature standard

ISSB is expected to publish exposure drafts of a mandatory nature disclosure standard in this window, building on TNFD.

Section IV

The five-pillar system

The programmes we see hitting escape velocity share the same five load-bearing elements. Missing any one compromises the value of the other four. Read them as a system, not a checklist.

Foundation

01Foundation

Governance & double materiality

A board-endorsed double materiality assessment, refreshed biennially, mapped to both impact and financial materiality, and used to prioritise both reporting scope AND capital allocation.

Field note. If your materiality assessment lives only in the sustainability report and nowhere in the strategic plan, it is a compliance artefact, not a governance one.

Data spine

02Data spine

Measurement infrastructure

One source of truth for GHG (Scopes 1, 2 & 3) mapped to GHG Protocol categories with year-on-year methodology consistency. Nature-dependency mapping via TNFD LEAP sits alongside.

Field note. For most non-financial corporates, Scope 3 is 70–90% of the total footprint. Staged in three phases: category screening, primary data on 2–3 material categories, then progressive supplier engagement.

Filing engine

03Filing engine

Disclosure & assurance-readiness

Reporting that satisfies both letter and spirit of the applicable regime — CSRD/ESRS, ISSB S1/S2, BRSR Core — with an audit trail that can survive limited and eventually reasonable assurance from day one.

Field note. 80% of our client engagements start here because most companies inherited disclosure infrastructure designed for a voluntary reporting era.

Trajectory

04Trajectory

Target-setting under SBTi

Near-term (2030) and long-term (2050) targets validated against SBTi Net-Zero Standard v1.2. Financial institutions follow the SBTi FI Net-Zero Standard finalised in 2025.

Field note. A target is only as credible as the marginal-abatement-cost curve (MACC) that supports it. Cognitud sequences MACC development BEFORE target commitment, not after.

Return on programme

05Return on programme

Value creation

Sustainability-linked products, sustainability-linked financing, operational-efficiency programmes financed from carbon-price internalisation, licence-to-operate improvements.

Field note. Value-creation ESG requires a CFO in the room, not just a CSO. This pillar is what separates a compliance cost centre from a strategic investment.

“The order isn't 'pick two'. Every pillar reinforces the ones below it, and gets its own credibility from the ones above it.”
— Cognitud Advisory

Section V

Sector plays

Same five pillars, applied differently by sector. Cognitud’s practice maps the pillars against the structural realities each industry actually faces.

Chemicals

3006 kt · avg Wave-2 chem plant

Site-level decarbonisation economics, product carbon footprints in customer specifications, feedstock-slate strategy with certification requirements.

Manufacturing & Industrials

70–85% Scope 3 cat. 1 share

Process-electrification MACCs, purchased-goods primary-data programmes, transition plans disclosed to CSRD-covered customers.

Energy & Utilities

Capex must align to 1.5 °C

Capex-cycle alignment with 1.5 °C pathways, methane inventories, transition-finance access, community-impact disclosure.

Mining & Metals

tCO₂e / tonne product

Chain-of-custody documentation, production-footprint measurement, biodiversity baselines under TNFD, tailings governance.

Consumer Goods & Retail

Cat. 1 + 11 dominate

Value-chain BRSR disclosure, Scope 3 categories 1 (purchased goods) and 11 (use of sold products), packaging circularity, CS3D human-rights due diligence.

Pharma & Healthcare

Cold-chain drives Scope 3

Cold-chain emissions, API-supply-base nature-dependency mapping, patient-access ESG metrics, regulatory-quality-adjacent sustainability disclosure.

Section VI

What goes wrong

A hundred-plus engagements later, the failure modes rhyme. Five recur.

Two separate reports for CSRD and ISSB

Companies with EU and non-EU obligations spin up parallel workstreams. Expensive, and produces internally inconsistent numbers. Build ONE measurement layer, then map it out to both regimes.

An SBTi commitment before the MACC exists

Committing to 42% by 2030 and then discovering the marginal abatement cost is prohibitive erodes credibility publicly and internally. Cognitud sequences the abatement-cost curve first, target commitment second.

Long-tail Scope 3 on spend proxies only

Fine at screening, a problem at target-setting. Reasonable-assurance auditors are increasingly rejecting materially high Scope 3 categories that never move off spend proxies into primary data.

A materiality assessment that never leaves sustainability

A double materiality assessment is a governance instrument, not an ESG artefact. If it doesn't inform capital allocation, risk registers, or strategic planning, it is window dressing.

Standing up disclosure infrastructure six months before first filing

The audit trail matters. Companies that stand up infrastructure twelve months before first filing spend the year firefighting. Assurance-ready infrastructure is a 12-18 month build.

Section VII

The 90-day blueprint

A 90-day quick-start is not a substitute for a 12-18 month build. It is how you buy the credibility, calendar visibility and board attention that the longer build needs. Three windows, three specific deliverables each.

Days 0–30

Applicability + baseline

Regime applicability map by legal entity
First-pass double materiality register
Scope 1 & 2 inventory on FY 2025 data

Days 31–60

Materiality + Scope 3 screening

Stakeholder-engaged double materiality complete
All 15 Scope 3 categories screened
2–3 material Scope 3 categories identified + governance charter drafted

Days 61–90

Disclosure + target framing

Assurance-readiness gap analysis vs applicable regime
SBTi framing draft (commitment held for months 4–6, after MACC)
12-month roadmap + steady-state operating model to board

Section VIII

Frequently asked

Every answer below is duplicated in this page’s structured data (schema.org FAQPage), so answer engines like Google’s AI Overviews, ChatGPT and Perplexity can quote it directly.

What is CSRD Wave 2 and who has to comply in 2026?

The EU's Corporate Sustainability Reporting Directive Wave 2 covers approximately 50,000 companies meeting two of three thresholds (250+ employees, €50M turnover, €25M balance sheet). They file their first CSRD report in 2026 on FY2025 data, against the European Sustainability Reporting Standards (ESRS). The February 2025 Omnibus package simplified specific ESRS datapoints and extended the reporting timeline for smaller companies by two years, but Wave 2 substantive obligations remain in force.

How do ISSB S1 and S2 differ from ESRS?

IFRS S1 (general sustainability) and S2 (climate) issued by the ISSB in June 2023 use single (investor-focused) materiality, while ESRS uses double materiality — meaning ESRS also requires disclosure of the company's impact on the environment and society, not only what affects financial performance. ISSB is being adopted as the baseline in Australia, Japan (SSBJ), Singapore, Malaysia, UK (endorsement in progress) and 15+ other jurisdictions. The two frameworks are being deliberately aligned so the ESRS climate module can satisfy ISSB S2 as an interoperable disclosure.

What is BRSR Core and which Indian companies does it apply to?

BRSR Core is the assurance-mandatory subset of nine ESG KPIs within India's Business Responsibility and Sustainability Report framework. As of 2026 it applies with reasonable-assurance to the top 1,000 listed companies by market capitalisation, having phased upward from the top 150 in earlier years. Value-chain BRSR disclosure is expected for the top 250 listed companies from FY 2025-26 (voluntary the year prior).

What is CS3D and how does it relate to CSRD?

The Corporate Sustainability Due Diligence Directive (CS3D) adopted in 2024 requires large EU and non-EU companies with EU activity to conduct human-rights and environmental due diligence across their value chains. It is separate from CSRD (which is disclosure) but the two are complementary: CS3D creates the substantive due-diligence obligation, and CSRD requires disclosure of how the company discharges it. Both were amended by the 2025 Omnibus package to align timelines and scope with the practical constraints of a phased implementation.

How does Scope 3 measurement work in practice?

Scope 3 covers 15 categories of indirect emissions across the upstream and downstream value chain — for most non-financial corporates, Scope 3 is 70-90% of total footprint. GHG Protocol requires all 15 to be screened (typically with spend-based proxies), with primary data required on the two-to-three categories that dominate. Financial institutions follow the PCAF (Partnership for Carbon Accounting Financials) methodology for financed emissions. Assurance-ready Scope 3 requires a category-by-category methodology statement, not a single number.

What does SBTi Net-Zero v1.2 require?

The Science Based Targets initiative's Corporate Net-Zero Standard v1.2 requires validated near-term targets (typically 2030) and long-term targets (typically 2050) covering at least 90% of the value-chain footprint. Long-term targets must reflect at least 90% reduction from the base year for scopes 1&2 and typically 90% for scope 3. Residual emissions are neutralised via permanent carbon removals, not avoidance offsets. Financial institutions follow the SBTi Financial Institutions Net-Zero Standard (finalised 2025) with sector-specific methodologies.

What is TNFD and is nature disclosure mandatory?

The Taskforce on Nature-related Financial Disclosures published its final v1.0 recommendations in September 2023, following the TCFD four-pillar structure (Governance, Strategy, Risk & Impact, Metrics & Targets) applied to nature. As of 2026 TNFD adoption is voluntary and over 500 organisations have committed to reporting under it. ISSB has begun scoping a mandatory nature standard, and ESRS E4 (Biodiversity & Ecosystems) already imposes similar disclosure on CSRD-covered EU entities. Cognitud recommends TNFD LEAP (Locate, Evaluate, Assess, Prepare) as the entry point regardless of jurisdiction.

What is double materiality?

Double materiality — adopted by CSRD/ESRS — requires disclosure of both the sustainability topics that affect the company's financial performance (financial materiality) AND the topics on which the company has a material impact on environment or society (impact materiality). It is broader than ISSB's investor-focused single-materiality view. A robust assessment produces two overlapping ranked lists and is refreshed at least biennially.

How long does an assurance-ready ESG programme take to stand up?

For an enterprise starting from a low baseline, expect 12-18 months: months 1-3 for governance, applicability and materiality; months 4-9 for measurement infrastructure and first internal reporting cycle; months 10-18 for assurance-readiness, disclosure integration with financial reporting timelines, and moving from compliance to value creation. Programmes that only start six months before their first filing typically spend that year firefighting rather than improving.

Section IX

Take action

This playbook is deliberately structural — every chapter connects to a Cognitud solution area or a client case study. Pick the pillar closest to where you are, or start a conversation.

ESG strategy & transformation

Build the governance layer and target operating model behind the reporting.

Climate action & net zero

MACC-driven abatement pathways and credible SBTi target-setting.

Nature & biodiversity

TNFD LEAP assessments and biodiversity baseline programmes.

Sustainability due diligence

Assurance-ready measurement infrastructure + ESG risk assessments.

Case studies

How Cognitud has executed these programmes with named enterprise clients.

Advisory insights

Current-year commentary on CSRD, ISSB, BRSR and adjacent regimes.

Start the work

Send us your applicable regime and disclosure baseline.

We’ll come back within a week with a 90-day scoping proposal shaped to your specific deadline — the same blueprint outlined in Section VII, calibrated to what you already have.

Talk to Cognitud

Written and maintained by Cognitud’s advisory practice. Updated whenever a material change occurs in the disclosure landscape. Last update: 23 July 2026. Send corrections or suggestions.