FAQCSDDDEU

CSDDD risk prioritisation how to rank adverse impacts by severity, likelihood, and evidence

CSDDD prioritisation is allowed when a company cannot prevent, mitigate, end, or minimise all identified adverse impacts at the same time and to their full extent.

Use severity, likelihood, stakeholder evidence, and a documented rationale to show why one impact was addressed before another.

Back to main artifactReview sources
Author
Sorena AI
Published
May 9, 2026
Updated
May 25, 2026
Questions
4

Structured answer sets in this page tree.

Primary sources
7

Cited legal and guidance references.

Publication metadata
Sorena AI
Published May 9, 2026
Updated May 25, 2026
Overview

Under the EU Corporate Sustainability Due Diligence Directive, risk prioritisation is not a licence to ignore lower-ranked issues. It is a structured way to sequence identified actual and potential adverse human rights and environmental impacts when everything cannot be addressed immediately.

Search this module

Find a question or answer quickly

4 of 4 questions
Question 1

When can CSDDD teams prioritise adverse impacts instead of addressing everything at once?

Article 9 applies after Article 8 identification and assessment. If it is not feasible to prevent, mitigate, bring to an end, or minimise all identified adverse impacts at the same time and to their full extent, the company must prioritise the impacts so it can fulfil the prevention and mitigation duties in Articles 10 and 11.

The priority order must be based on the severity and likelihood of the adverse impacts. After the most severe and most likely impacts have been addressed within a reasonable time, the company must move on to less severe and less likely impacts.

  • Start from identified actual and potential adverse human rights and environmental impacts, not from supplier spend, contract value, media exposure, or convenience.
  • Use prioritisation to sequence action when capacity, access, or timing prevents simultaneous full response.
  • Record when each lower-priority impact will be revisited so prioritisation does not become permanent deferral.
Citations
Question 2

How should teams score severity and likelihood for CSDDD prioritisation?

Severity should focus on the impact on people or the environment. The CSDDD definition points to scale, scope, and irremediable character, including gravity, number of affected people, environmental extent, irreversibility, and limits on restoring affected people or the environment within a reasonable period.

Likelihood should capture credible indicators that the impact has occurred or may occur, such as prior assessments, notifications, complaints, high-risk geographies, product or service risks, sector risks, business-model risks, or changed operating conditions. For human rights impacts, the rationale should not let low estimated probability bury an impact that would be severe or hard to remedy.

  • Severity fields: affected right or environmental interest, scale, scope, irremediability, affected groups, affected sites, and restoration limits.
  • Likelihood fields: known incidents, complaints, credible external reports, supplier or site assessment results, operating context, sector risk, product or service risk, and change triggers.
  • Outcome field: ranked priority tier, immediate action, action owner, planned follow-up for lower-ranked impacts, and the reason the ranking changed or stayed the same.
Citations
Recommended next step

Turn CSDDD prioritisation into a reviewable evidence file

Use Sorena to connect CSDDD impact records, stakeholder evidence, severity and likelihood rationale, and follow-up actions before decisions are challenged.

Research workflow
Open Research Copilot

Check CSDDD prioritisation questions against cited source material.

Explore next step
Talk to Sorena
Discuss CSDDD implementation

Review impact ranking, source evidence, and implementation records with Sorena.

Explore next step
Question 3

What stakeholder evidence belongs in a CSDDD prioritisation file?

Stakeholder evidence should help test the company's view of severity and likelihood. Article 13 requires stakeholder consultation when gathering information to identify, assess, and prioritise adverse impacts, and again for prevention or corrective action plans, suspension or termination decisions, remediation, and monitoring indicators.

The file should distinguish direct stakeholder evidence from expert input. If effective stakeholder engagement is not reasonably possible, the company should consult experts who can provide credible insight into actual or potential impacts.

  • Record who was consulted: employees, workers' representatives, affected communities, consumers, civil society organisations, environmental or human rights institutions, or legitimate representatives.
  • Record how barriers were handled: language, access, retaliation risk, confidentiality, anonymity, vulnerable groups, and overlapping vulnerabilities.
  • Record what changed: priority score, action plan, indicator, escalation, or explanation for why stakeholder evidence did not change the ranking.
Citations
Question 4

What makes a CSDDD prioritisation rationale audit-ready?

An audit-ready rationale should let a reviewer trace the decision from identified impact to priority ranking to action. It should explain why the selected impacts were treated first, which evidence was used, which stakeholders or experts informed the assessment, and when lower-ranked impacts will be addressed.

The rationale should also separate prioritisation from response design. Articles 10 and 11 ask different questions after prioritisation, including whether the company caused, jointly caused, or is linked to the impact, where the impact occurs in the chain of activities, and what influence the company can exercise.

  • Impact record: description, actual or potential status, affected people or environmental area, activity, subsidiary, direct or indirect business partner, and chain-of-activities location.
  • Priority record: severity analysis, likelihood analysis, stakeholder or expert evidence, missing information, assumptions, and the reason for the final rank.
  • Action record: prevention, mitigation, ending, minimisation, remediation, business partner engagement, contractual assurance, verification, support to SMEs, or escalation path.
  • Review record: monitoring indicator, responsible owner, next review event, and evidence showing less severe or less likely impacts are not forgotten.
Citations
Primary sources

References and citations

EUR-Lex summary of Directive (EU) 2024/1760
data.europa.eu
Referenced sections
  • The EUR-Lex summary describes the directive's requirement to identify impacts and prioritise addressing them based on severity and likelihood.
"severity and likelihood"
OECD Due Diligence Guidance for Responsible Business Conduct
mneguidelines.oecd.org
Referenced sections
  • The OECD guidance supports risk-based due diligence, prioritising the most significant risks where immediate action on every impact is not possible, and then moving to less significant impacts.
"risk-based"
Related guides

Explore more topics

CSDDD adverse impact prioritisation workflow
A CSDDD workflow for identifying actual and potential adverse human rights and environmental impacts, ranking severity and likelihood, and documenting prevention, mitigation, remediation, and stakeholder evidence.
CSDDD Applicability Test: EU and Non-EU Company Scope
Test whether Directive (EU) 2024/1760 may apply to an EU or non-EU company using grounded CSDDD employee, turnover, group, franchise, royalty, exclusion, and phase-in checks.
CSDDD chain of activities and supplier due diligence
Explain CSDDD chain-of-activities scope, upstream and downstream boundaries, subsidiaries, direct and indirect business partners, supplier risk segmentation, and evidence.
CSDDD Chain of Activities Boundaries
Define CSDDD upstream and downstream chain of activities boundaries for subsidiaries, direct and indirect business partners, distribution, transport, storage, and records.
CSDDD chain of activities boundaries: upstream and downstream FAQ
FAQ on how the CSDDD defines chain of activities boundaries for subsidiaries, direct and indirect business partners, upstream activities, downstream logistics, and evidence.
CSDDD civil liability under Article 29: what companies should check
FAQ on CSDDD Article 29 civil liability: liability conditions, protected legal interests, causation, compensation, limitation periods, and evidence disclosure.
CSDDD Climate Transition Plan Requirements
Article 22 CSDDD guidance for climate transition plans: business model alignment, targets, actions, funding, governance, and 12-month progress updates.
CSDDD complaints and notifications FAQ
FAQ on Article 14 CSDDD complaint and notification mechanisms, who may complain, follow-up rights, confidentiality, retaliation, and evidence.
CSDDD compliance duties and evidence guide
A grounded CSDDD compliance guide covering due diligence policy, adverse impact identification, prevention, corrective action, complaints, monitoring, reporting, climate plans, and supervisory evidence.
CSDDD contractual assurances FAQ for Articles 10 and 11
How CSDDD Articles 10 and 11 use contractual assurances with business partners, verification, SME support, action plans, and suspension or termination escalation.
CSDDD deadlines and compliance calendar after Directive (EU) 2025/794
Current CSDDD calendar for transposition, application phases, Article 16 reporting exceptions, Commission guidance dates, and practical compliance evidence.
CSDDD due diligence checklist
A grounded CSDDD checklist for scope, due diligence policy, chain-of-activities risk mapping, impact prioritisation, action plans, complaints, monitoring, communication, climate planning, and evidence.
CSDDD Due Diligence Steps Playbook for Articles 5 and 7-16
A grounded playbook for the CSDDD due diligence sequence: policy integration, impact assessment, prioritisation, prevention, correction, remediation, stakeholder engagement, complaints, monitoring, communication, and evidence.
CSDDD FAQ: scope, dates, duties, liability, and evidence
Practical answers on CSDDD scope, current application dates, chain of activities, due diligence duties, complaints, remediation, civil liability, climate plans, and evidence.
CSDDD franchising and licensing scope FAQ
FAQ on when franchise or licensing networks can fall within Article 2 of the EU CSDDD, including royalties, turnover, EU and non-EU treatment, and evidence.
CSDDD grievance and remediation workflow guide
Build a CSDDD grievance, notification, stakeholder engagement, and remediation workflow around Articles 12, 13, and 14 of Directive (EU) 2024/1760.
CSDDD Liability and Penalties: enforcement, fines, and civil claims
A grounded guide to CSDDD supervisory enforcement, penalty mechanics, civil liability, compensation limits, evidence records, and national transposition caveats.
CSDDD non-EU turnover threshold FAQ
How non-EU companies should assess CSDDD scope using EU-generated turnover, group thresholds, authorised representative records, and competent authority evidence.
CSDDD Non-EU Turnover Thresholds and Scope Waves
Article 2 and Article 37 CSDDD scope guide for non-EU Union turnover, group routes, franchise and licensing routes, and current application dates after Directive (EU) 2025/794.
CSDDD Omnibus timing changes after Directive (EU) 2025/794
FAQ answer on current CSDDD Article 37 dates after Directive (EU) 2025/794 and how to separate adopted timing changes from proposal-stage Omnibus simplification.
CSDDD penalties and fines under Article 27
How CSDDD Article 27 sets penalty rules, turnover-based fine caps, public decision publication, supervisory authority powers, and national transposition caveats.
CSDDD prevention vs mitigation: potential and actual adverse impacts
CSDDD FAQ on when to prevent or mitigate potential adverse impacts, when to end or minimise actual adverse impacts, and what evidence records to keep.
CSDDD remediation FAQ: when companies must remedy adverse impacts
FAQ on CSDDD remediation: when Article 12 requires remedy, how complaints and stakeholder engagement affect the response, and what evidence to keep.
CSDDD Remediation Plan Template: Article 12, 13 and 14 evidence
A CSDDD remediation plan template for actual adverse impacts, complaint inputs, stakeholder engagement, action records, and monitoring evidence.
CSDDD requirements: scope, due diligence, climate plan, and evidence
A grounded map of the Corporate Sustainability Due Diligence Directive requirements across scope, due diligence policy, impact assessment, complaints, remediation, monitoring, communication, and climate transition planning.
CSDDD Scope Thresholds: EU, Non-EU, Group and Franchise Routes
Article 2 CSDDD scope thresholds for EU companies, non-EU Union turnover, ultimate-parent groups, franchise and licensing routes, consecutive-year tests, and evidence records.
CSDDD scope waves: current Article 37 dates and thresholds
FAQ on the current CSDDD phase-in after Directive (EU) 2025/794: 26 July 2028, 26 July 2029, Article 2 scope thresholds, and evidence to retain.
CSDDD Supplier Contract Clause Review Workflow
Review supplier contract clauses against CSDDD Articles 10 and 11: contractual assurances, verification, SME fairness, support, action plans, and escalation evidence.
CSDDD Supplier Contract Clauses: Articles 10 and 11 Evidence
How to use CSDDD supplier contract clauses without treating clauses as a substitute for due diligence: contractual assurances, verification, SME support, action plans, limits, and evidence.
CSDDD supplier human rights impact scoring template
A CSDDD supplier impact scoring template for Article 8 identification, Article 9 prioritisation, severity, likelihood, stakeholder input, chain-of-activities boundaries, and evidence records.
CSDDD transition plans FAQ: Article 22 climate plan requirements
FAQ on CSDDD Article 22 climate transition plans: targets, decarbonisation levers, investment and funding, governance, CSRD overlap, and evidence records.
CSDDD vs CSRD: Due Diligence and Reporting Compared
Compare CSDDD due diligence duties with CSRD sustainability reporting, including scope, timing, Article 16 reporting, evidence overlap, assurance, and enforcement.
CSDDD vs German LkSG Comparison
Compare the EU CSDDD with Germany's LkSG without mixing directive duties, national-law duties, chain boundaries, complaints, reporting, and enforcement routes.
CSDDD vs OECD Guidelines
Compare the binding EU CSDDD with the OECD Guidelines for responsible business conduct across scope, due diligence duties, business relationships, remediation, and evidence.
How CSDDD overlaps with OECD, UNGP, and ILO standards
FAQ on how OECD responsible business conduct guidance, the UN Guiding Principles, and ILO labour standards inform CSDDD due diligence without being the same legal instrument.