Double Materiality Assessment 2026: A Step-by-Step Methodology for ESRS-Ready Reporters

Quick Facts

• What it is: An assessment of (a) the company's actual and potential impacts on people and the environment (impact materiality), and (b) sustainability matters that affect enterprise value (financial materiality).
• Where it lives: ESRS 1 §3 (concept), IRO-1 and IRO-2 in ESRS 2 (process and outcome disclosures).
• Output: A list of material topics and sub-topics, each tied to disclosed datapoints.
• Audit posture: Limited assurance providers focus on process integrity — they will replay your scoring, sample your stakeholders, and test your governance.
• Refresh cadence: Annual, with a triggered refresh if a major event changes the IRO landscape (M&A, new geography, regulatory shift).

Why this matters: Roughly two thirds of first-cycle ESRS assurance findings trace back to weaknesses in the DMA — not to the metrics themselves.

---

1. The two lenses, made operational

Impact materiality (inside-out)

Adverse and positive impacts caused, contributed to, or directly linked to the undertaking. Scored on:

• Severity = scale × scope × irremediability
• Likelihood (for potential impacts)

A severe human-rights impact is material even if its probability is low. This is the part finance-led DMAs most often get wrong.

Financial materiality (outside-in)

Sustainability matters that generate or may generate financial effects — risks (cost increases, asset write-downs, financing access) and opportunities (new markets, efficiencies). Scored on:

• Magnitude of financial effect
• Likelihood
• Time horizon (short / medium / long)

A topic is material if it passes either lens. The two are scored separately and reconciled.

---

2. The eight-step methodology

Step 1 — Define the assessment perimeter

Consolidated group + value chain (upstream and downstream). Document your value chain mapping at the same level of detail you would for an audit.

Step 2 — Build the long list of sustainability matters

Start from ESRS Annex AR16 (the topical sub-sub-topic list) plus entity-specific topics not covered by ESRS. Do not drop ESRS-listed topics at this stage; you can deprioritise them later, but you must have considered them.

Step 3 — Identify Impacts, Risks and Opportunities (IROs)

For each candidate topic, brainstorm IROs across the value chain. Use a structured template: what the IRO is, where it occurs, who is affected, when. The IRO inventory is the audit evidence base.

Step 4 — Stakeholder engagement

Required, not optional. Map stakeholders into:

• Affected stakeholders (workers, communities, end-users, suppliers' workers).
• Users of sustainability information (investors, lenders, business partners).

Mix methods: interviews, workshops, surveys, public consultations, NGO dialogues. Keep a stakeholder log (who, when, format, topics covered, key inputs).

Step 5 — Score IROs against thresholds

Pre-agree the thresholds with the audit committee. Scales of 1–5 are common; the thresholds (e.g. ≥4 = material) must be approved before scoring, not after.

Step 6 — Reconcile and consolidate

Produce one materiality matrix combining both lenses. A topic is material if it crosses the threshold in either. Avoid the "compromise" temptation of dropping borderline topics — that is exactly where assurance findings appear.

Step 7 — Map material topics to datapoints

Each material topic activates the related ESRS topical standard(s) and their MDR + topical datapoints. This is the bridge from "DMA outcome" to "report content".

Step 8 — Governance approval and disclosure

Audit committee + board approve the material topic list. Disclose the process (IRO-1) and the outcome (IRO-2 + SBM-3) in ESRS 2.

---

3. The governance that auditors expect to see

A defensible DMA needs four governance artefacts:

1. DMA charter. Signed by the audit committee. Defines the scope, lenses, scales, thresholds, refresh cadence.
2. Stakeholder engagement plan. Names the stakeholder groups, the rationale for selection, and the methods.
3. Scoring workbook. Versioned. Every change is timestamped with rationale.
4. Approval minutes. Audit committee resolution accepting the material topic list.

Without these, even a technically strong DMA will pick up qualified assurance opinions.

---

4. Common mistakes (and the fixes)

Mistake 1 — Skipping affected-stakeholder engagement. Talking only to investors and ESG raters is impact-blind. Fix: pre-define a target of N affected-stakeholder touchpoints per material topic candidate.

Mistake 2 — Letting one workshop replace the assessment. A four-hour workshop produces a heatmap, not a DMA. Fix: workshops feed scoring; scoring is documented; documentation is what gets assured.

Mistake 3 — Borrowing a peer's matrix. Sector peers help with completeness, never with conclusion. Your IROs are entity-specific.

Mistake 4 — Treating financial materiality as a finance-only exercise. The CFO sees the financial lens; QHSE and operations see the underlying drivers (incident likelihood, regulatory exposure, supply continuity). Fix: cross-functional scoring panel.

Mistake 5 — No rationale for omissions. Every ESRS topic that is not material must have a documented rationale. Empty cells in the matrix = audit findings.

---

5. Tooling — what actually helps

A DMA can be run in spreadsheets if you are disciplined. It scales much better with a purpose-built tool, especially when the long list runs to 80+ sub-sub-topics and dozens of stakeholders.

Useful capabilities:

• IRO repository with versioning
• Configurable scoring scales and thresholds
• Stakeholder log integrated with scoring
• Heatmap and matrix outputs
• Audit trail / change log
• Linkage from material topic → ESRS datapoint → disclosure section

Vendors with credible DMA modules include Position Green, Novisto, Workiva, Greenstone, Sweep, EcoOnline ESG, and increasingly the larger EHS suites (Cority, Sphera, Intelex). See our full ESG/CSRD guide →.

For mid-market reporters that already run a strong QHSE platform, the practical pattern is: keep your QHSE system of record (e.g. Tekmon, EcoOnline) for source data, add a focused DMA + disclosure tool, and skip enterprise-grade ESG platforms until volume justifies them.

---

6. A 90-day DMA sprint

This rhythm fits inside a normal financial-reporting calendar and leaves Q4 for content drafting and assurance preparation.

---

7. After the first cycle: what to refresh, what to lock

After cycle 1, separate the foundations from the outputs:

Lock for 3 years

• DMA charter (scales, thresholds)
• Stakeholder map (refresh annually but rebuild only on major change)
• IRO taxonomy

Refresh annually

• Stakeholder engagement evidence
• IRO inventory (additions/removals)
• Scoring
• Material topic list

This separation is what turns a one-off project into a sustainable annual cycle.

---

8. Bottom line

The DMA is the spine of ESRS. Get the methodology right and everything downstream — datapoint mapping, narrative drafting, assurance readiness — gets faster. Get it wrong and you will spend three reporting cycles fixing the same findings.

The reporters who succeed treat the DMA as a governance process with a documented charter, named owners, evidenced stakeholder engagement, and a versioned scoring trail. Tools help, but they cannot rescue weak governance.

Need help shortlisting the right ESRS-ready software? Take the Get Matched quiz for a curated list aligned to your sector, size and reporting wave.