In the ever-evolving landscape of corporate sustainability reporting, few regulations have generated as much discussion, and confusion, as the EU Corporate Sustainability Reporting Directive (CSRD). With recent developments including implementation delays, simplification proposals, and international pushback, many organisations are struggling to understand what is happening and how to prepare.

This article cuts through the noise to provide clarity on the current status of the CSRD, what is coming next, and what your organisation should be doing right now.

The "Stop-the-Clock" directive: finally official

After months of speculation and conflicting reports, the situation has been largely resolved with the official adoption of the "Stop-the-Clock" directive, which took effect on 17 April 2025. This directive is part of the broader "Omnibus I" package, which aims to simplify EU sustainability legislation.

The approval process followed a clear timeline:

This brings much-needed certainty to the implementation timeline, even as debates continue about the substantive requirements.

Revised implementation timeline: who reports when?

The most significant change in the "Stop-the-Clock" directive is the revised implementation timeline.

First wave (no change)

Second wave (two-year delay)

Third wave (two-year delay)

Special note for companies with 501 to 1,000 employees

Companies in the first wave with 501 to 1,000 employees face a unique situation: they cannot use the Stop-the-Clock provision and must still report for the 2024 financial year, even though they may be removed from scope when the full Omnibus proposal is adopted. This creates a challenging "comply now, possibly exempt later" scenario.

Political context: why the confusion persists

While the implementation timeline is now clear, the substantive changes to the CSRD (the "Simplification Proposal" or full Omnibus package) remain under debate, with significant political divisions:

These political divisions explain much of the conflicting information that has circulated in recent months.

Next steps in the legislative process

The path forward for the CSRD involves several key milestones.

Member state implementation

Substantive changes timeline

This means that while the reporting timeline is now fixed, the exact requirements may continue to evolve throughout 2025 and into 2026.

The international dimension: US opposition

Adding another layer of complexity is the international pushback, particularly from the United States:

Organisations with global operations need to monitor these developments closely as they could significantly impact compliance strategies.

What your organisation should do now

With this clarified understanding of the CSRD's current status, here are practical steps for different types of organisations.

For first wave companies (500+ employees, public interest entities)

  1. Continue preparation for the 2024 financial year reporting. Maintain momentum on data collection systems, proceed with materiality assessments, and develop reporting frameworks.
  2. Special consideration for 501 to 1,000 employee companies. You may be removed from scope in the future, but you must still comply for the 2024 financial year. Consider a balanced approach that meets minimum requirements while avoiding over-investment.

For second and third wave companies

  1. Leverage your extended timeline. You now have a two-year extension before reporting requirements apply. Use this time strategically rather than delaying all preparation.
  2. Monitor developments in the full Omnibus proposal. Stay informed about potential scope and requirement changes, and adjust your implementation strategy as the final form becomes clearer.
  3. Consider a phased preparation approach. Begin with gap analysis and materiality assessments, gradually implement data collection systems, and avoid rushed implementation as your deadline approaches.

For all companies

  1. Monitor the ongoing political negotiations. The scope reduction (to companies with 1,000+ employees) is not yet final, and requirements may still change as the full Omnibus package moves through the legislative process.
  2. Consider your international compliance strategy. If you operate globally, assess how international tensions might affect your approach, and develop a strategy that can adapt to potentially divergent requirements.
  3. Look beyond compliance to strategic value. Despite the delays and potential simplifications, sustainability reporting is here to stay. Organisations that view this as a strategic opportunity rather than a compliance burden will gain a competitive advantage.

The unified compliance approach: a better way forward

While the CSRD timeline changes provide some breathing room, they do not fundamentally alter the direction of travel toward more comprehensive sustainability reporting. Moreover, CSRD is just one of many frameworks that organisations must manage simultaneously. This is where a unified compliance management approach becomes essential.

The challenge of multiple frameworks

Most organisations today are managing multiple compliance frameworks simultaneously:

Each framework traditionally exists in its silo, with separate teams, processes, documentation, and reporting. This creates significant inefficiencies, with studies showing that organisations typically spend 80% of their compliance effort on administrative tasks rather than creating strategic value.

How unified compliance management helps

Secure Step Forward specialises in helping organisations transform their approach to compliance through a unified compliance management platform that:

  1. Centralises multiple frameworks. CSRD, ISO 27001, DORA, and other frameworks are managed in a single platform, with overlapping requirements mapped to eliminate duplication and cross-framework visibility through unified dashboards.
  2. Transforms compliance from burden to strategic asset. Compliance activities connect directly to business objectives, compliance data converts into business intelligence, and risk-based decision making is enabled across the organisation.
  3. Reduces compliance effort by up to 80%. Duplicate activities across frameworks are eliminated, routine compliance tasks are automated, and reporting is streamlined through centralised data collection.

Practical application to CSRD

For organisations navigating the CSRD changes, a unified compliance approach offers particular benefits. First wave companies can efficiently meet current requirements while maintaining flexibility to adapt to future changes. Companies with 501 to 1,000 employees can implement a right-sized approach that meets immediate needs without over-investing. Second and third wave companies can use the extended timeline to implement a strategic, unified approach rather than rushing into siloed compliance.

Conclusion: beyond compliance to strategic value

The recent CSRD changes provide welcome clarity on implementation timelines, even as debates continue about the final scope and requirements. Organisations should use this clarity to develop a strategic approach to compliance that goes beyond mere regulatory adherence.

By adopting a unified compliance management approach, organisations can not only navigate the complexities of CSRD and other frameworks more efficiently but also transform compliance from a cost centre into a source of strategic business intelligence. Whether you are in the first wave, facing imminent reporting requirements, or benefiting from the two-year extension, now is the time to reassess your approach to compliance and sustainability reporting.

Stop managing compliance in silos

Secure Step Forward specialises in unified compliance management that helps organisations reduce compliance effort while transforming regulatory requirements into strategic business intelligence. Get in touch to talk about how this applies to your CSRD position.