How to implement a CSR strategy in your organisation: steps, framework and pitfalls

What a CSR strategy is, and how it differs from ESG and sustainability

Corporate social responsibility (CSR) is a company's voluntary commitment to operate ethically and contribute to society across its social, environmental, economic and governance impact. A CSR strategy is the operating model that turns that commitment into prioritised, measurable actions tied to the business.

The three terms that executives tend to use interchangeably are not the same thing:

• CSR is the internal, values-led framing: what the company chooses to take responsibility for.
• ESG (environmental, social, governance) is the external, metrics-led framing that investors and regulators use to score performance and risk. SKEMA's own review describes ESG as a new deal between business and society, built on data, a clear narrative and measurable commitments.
• Sustainability is the broader objective: meeting present needs without compromising future generations, usually anchored to the UN Sustainable Development Goals.

The practical consequence is that one programme now has to satisfy all three audiences at once.
 

Why CSR matters for executives in 2026

CSR has moved from the communications function to the board agenda because the stakeholders who grant a company its licence to operate now expect it.

• Trust. Business is the only institution that people view as both competent and ethical, and it remains the most trusted institution, at 62% [Edelman Trust Barometer, 2025]. That trust is an asset to defend, not a given.
• Talent. 70% of Gen Z and millennial workers say environmental sustainability matters when they choose an employer, and 47% of Gen Z and 49% of millennials have already left a role over a clash of values [Deloitte Global Gen Z and Millennial Survey, 2025]. CSR has become a recruitment and retention lever.
• Performance. A review of more than 1,000 studies found a positive relationship between ESG and financial performance in 58% of the corporate studies examined, and a negative link in only a small minority [NYU Stern Center for Sustainable Business, 2021].
• Capital and risk. Investors screen for ESG exposure, and a credible strategy reduces the cost of regulatory, legal and reputational surprises.
   

The 2026 regulatory context executives cannot ignore

Most of CSR remains voluntary, but a growing core of it is now mandatory, and the perimeter shifted in 2026. The first job is to know which rules bind your organisation.

Mandatory in the EU. The Corporate Sustainability Reporting Directive (CSRD) requires large companies to report on sustainability using the European Sustainability Reporting Standards (ESRS) and the principle of double materiality, which covers both the company's impact on society and the financial impact of sustainability on the company. The 2025-2026 Omnibus I package then narrowed that scope. The "stop-the-clock" directive (EU) 2025/794 postponed reporting by two years for companies not yet in scope, and directive (EU) 2026/470, in force since 18 March 2026, raised the threshold towards roughly 1,000 employees and cut the number of required data points. Many companies now sit outside the mandatory perimeter, so confirm the threshold that applies to you rather than assuming. Separately, the Empowering Consumers Directive (EU) 2024/825 bans unsubstantiated generic green claims, with rules applying from 27 September 2026; the standalone Green Claims Directive proposal was withdrawn in June 2025.

Mandatory in the UK. Directors of large companies must report under section 172 of the Companies Act 2006 on how they have regard to employees, suppliers, communities and the environment. Streamlined Energy and Carbon Reporting (SECR) and climate disclosures aligned with the TCFD require large companies to publish energy use and climate-related information. The UK Sustainability Reporting Standards, based on the ISSB framework, are still in development and remain voluntary for now.

Voluntary frameworks that structure the work. ISO 26000 provides guidance rather than a certification, the GRI Standards organise reporting, the UN SDGs and UN Global Compact set shared objectives, and B Corp offers a certification route. Treat these as the scaffolding for your strategy and treat CSRD, ESRS, section 172 and SECR as the floor.

The building blocks of a strategic CSR approach

A strategic CSR approach rests on five components: a clear purpose aligned to the business, genuine stakeholder engagement, measurable goals, funded programmes, and transparent reporting. Miss one and the strategy tends to wobble in public.

The programmes themselves usually span seven pillars, which map closely to the seven core subjects of ISO 26000:

• governance and ethics
• employees and working conditions
• community involvement
• environmental responsibility
• responsible sourcing and operations
• stakeholder dialogue
• measurement and transparency

Companies adjust the weighting to their sector. The pillar a strategy quietly drops is often the one that later attracts criticism, which is why academic centres such as the SKEMA Centre for Sustainability Studies study CSR alongside environmental stewardship and governance rather than in isolation.
 

How to implement a CSR strategy: a nine-step roadmap

Each step names what to do, why it matters and what to produce.

1. Secure board and executive sponsorship
   Name an executive sponsor and connect CSR to business priorities and risk management, not to communications.
   Output: a short CSR vision endorsed by the board.
2. Map stakeholders and gather expectations
   Identify internal and external stakeholders across employees, customers, suppliers, investors and communities, and collect their expectations.
   Output: a stakeholder map with priorities.
3. Run a CSR audit and a materiality assessment
   Review existing social and environmental initiatives, then run a materiality, or double materiality, assessment to see which issues are most significant for the business and its stakeholders.
   Output: a ranked list of material issues.
4. Prioritise your focus areas
   Choose the issues with the highest business and stakeholder relevance, rather than trying to act on everything at once.
   Output: three to five focus areas.
5. Set measurable goals and KPIs
   Define short- and long-term goals with baselines and targets, and choose indicators across social, environmental, governance and business outcomes.
   Output: a goal-and-KPI table.
6. Design initiatives and programmes
   Build the actions that deliver each goal, balancing social, environmental and employee-focused initiatives and matching them to budget and maturity.
   Output: a programme plan.
7. Assign governance, ownership and resources
   Set roles across leadership, HR, operations, finance, procurement and communications, with a budget, a timeline and clear decision rights.
   Output: a governance model.
8. Engage employees and launch internal communication
   Train teams so the strategy is understood and adopted, and create channels for participation and feedback.
   Output: an engagement and communications plan.
9. Launch, measure, report and improve
   Track progress against the KPIs, report results and refine the strategy on a regular cycle.
   Output: a published report and a review cadence.

Governance, KPIs and reporting that make CSR credible

A CSR strategy becomes credible when someone owns it and the numbers are public. Set up a CSR committee with an executive sponsor and named owners in each function, so accountability sits with the business rather than with a single team.

Build a simple dashboard that records, for each indicator: the KPI, its baseline, the target, the owner, the reporting frequency and the current status. Useful indicators include employee participation rates, volunteer hours, emissions reductions, supplier compliance rates, diversity metrics and community investment outcomes.

Then fix a reporting cadence and, where relevant, independent assurance. SKEMA's analysis of integrated thinking and sustainable reporting makes the same point that auditors do: a report tied to long-term value creation is harder to dismiss than a glossy annual summary.

Engaging employees and building the skills to lead CSR

Employee participation decides whether a strategy is adopted or ignored. Practical tactics include CSR ambassadors, volunteering schemes, payroll giving and employee-led initiatives, supported by training and steady internal communication.

The harder gap is at the top. Leading a CSR transition demands skills that few executive teams were trained for: reading sustainability regulation, running a materiality assessment, setting and auditing non-financial KPIs, and managing the change across functions. SKEMA Business School addresses this through its executive education programmes and through customised programmes for companies built around challenges such as sustainable development and change management. For senior leaders who want to drive the agenda through applied research, the Global DBA in Sustainability treats the ability to make business decisions compatible with sustainability as a core leadership capability.
 

Common pitfalls and how to avoid greenwashing

Most CSR strategies fail in predictable ways. The frequent mistakes are launching disconnected initiatives with no link to the business, setting vague goals, underfunding the programmes, leaving employees out, and reporting weakly.

The costliest mistake is greenwashing: claiming more than the evidence supports. With the Empowering Consumers Directive applying from September 2026, an unsubstantiated green claim now carries legal risk on top of the reputational damage. The corrective is consistent across every pitfall: connect each claim to a measured outcome, fund what you promise, and report the gaps as well as the wins.

CSR strategy template and pre-launch checklist

A basic CSR strategy template covers, in order: vision, focus areas, stakeholders, goals and KPIs, programmes, owners, budget, timeline and reporting plan.

Run through a short checklist before launch:

• the strategy is endorsed by the board and owned by named executives
• focus areas come from a materiality assessment, not from instinct
• every goal has a baseline, a target and an owner
• the budget matches the ambition
• a reporting cadence and, where relevant, assurance are agreed
• claims are backed by evidence that would survive an audit