Many companies still treat corporate social responsibility as a communications exercise rather than a governance discipline. That gap shows up fast: investors run ESG screens before financing decisions, and an increasing share of businesses are now legally required to report on sustainability, not just talk about it.
Building a real CSR strategy takes structure. This guide walks through what CSR means, the regulatory backdrop in Europe, the ISO 26000 framework, and the 5 concrete steps to put a strategy in place, from appointing a lead to training your teams.
What Is CSR?
Corporate Social Responsibility (CSR) is a concept that emerged in the 1950s. The European Commission gave it a precise definition in 2011: the responsibility of companies for the effects they have on society. That responsibility covers a broad environmental dimension, which is why CSR's areas of focus map directly onto the pillars of sustainable development.
On the regulatory side, French law has built up CSR obligations step by step. The 2001 NRE law first required large listed groups to publish an annual social and environmental report. The Grenelle I and II laws then extended that transparency requirement to non-listed companies with more than 500 employees. In 2017, France's Duty of Vigilance law pushed companies with more than 5,000 employees to respect human rights and labour rights, particularly abroad, through a vigilance plan designed to prevent environmental, corruption and human rights risks.
At the EU level, the Corporate Sustainability Reporting Directive (CSRD), in force since 2024, now requires detailed sustainability reporting audited by an independent third party for a large number of companies across Europe.
In France, several provisions of the 2019 PACTE law reinforced CSR further, notably Article 1833 of the Civil Code, which now requires every company's corporate purpose to take environmental and social issues into account.
These regulatory requirements target transparency, not fixed performance targets. Building a CSR strategy today is therefore both a business strategy and an ethical stance.
The 3 Pillars of CSR
As a voluntary commitment to sustainable development, CSR means integrating social, economic and environmental concerns into a company's policy, activities and relationships. These three pillars come directly from the UN Sustainable Development Goals (SDGs).
Every CSR strategy covers:
Companies often act on the environmental pillar through an employer mobility plan, a scheme that reduces commuting-related emissions.
Why Build a CSR Strategy?
What started as a voluntary approach has become a legal obligation for a growing number of companies under EU regulation. It has also become a decisive factor for how groups and brands are perceived.
CSR increasingly affects commercial performance, business relationships and access to investment. Banks and investors now use **ESG** (Environmental, Social, Governance) ratings to determine access to financing and the interest rates offered to companies.
A company's CSR strategy can also shape its reputation directly. Consumers are increasingly sensitive to environmental and ethical concerns: they favour responsible brands and boycott companies exposed by the media for poor labour practices or environmental failures.
Structuring CSR with the ISO 26000 Standard
The **ISO 26000 standard** sets international guidelines for sustainable development and CSR. Developed over several years by around a hundred countries, it was adopted in 2010 and now serves as the reference for building a CSR strategy in organisations and companies of every size.
ISO 26000 defines social responsibility through 7 core subjects:
ISO 26000 does not lead to certification, but companies can showcase their CSR approach through a label built on the standard's criteria, such as the AFNOR Engagé RSE label, the Positive Company label or the Lucie label.
How to Build a CSR Strategy in 5 Steps
1. Appoint a CSR Lead
Naming someone responsible for the company's CSR strategy is the most effective way to keep the initiative on track. Depending on company size, this can be a dedicated department under a CSR manager, or an outsourced role. Internally, the CSR lead suggests the right actions, oversees delivery of the strategy, and keeps teams engaged.
2. Identify Stakeholders
Mapping stakeholders brings every key actor into the CSR process. Stakeholders can be internal or external: executives and employees, shareholders, unions, but also suppliers, customers, public authorities, local governments or NGOs. Understanding their expectations helps sharpen the strategy.
3. Run a CSR Audit
Every CSR strategy needs to be built on a detailed audit that measures the company's environmental and social impact, defines strategic priorities, and identifies which actions to take. That audit must now apply the principle of double materiality: it is no longer enough to assess the company's impact on the environment, it also has to measure how climate and social risks could affect the company's own profitability and long-term viability.
4. Define an Action Plan
For a CSR strategy to run smoothly, an action plan is essential. This means defining and prioritising concrete social and environmental objectives and actions.
5. Engage and Train Employees
Employee involvement and motivation is a decisive factor in the success and durability of any CSR strategy. Raising awareness among staff and training them is therefore a required step in a CSR action plan.
FAQ: Frequently Asked Questions About CSR Strategy
What is the difference between CSR and ESG?
CSR is the company's overall commitment and strategy for its social, economic and environmental impact. ESG (Environmental, Social, Governance) refers to the criteria and ratings that banks and investors use to assess how well a company delivers on that commitment, particularly for financing decisions.
Is a CSR strategy mandatory?
CSR started as a voluntary approach, but reporting obligations now apply to a growing number of companies. In France, the NRE, Grenelle I and II, and PACTE laws set reporting and governance requirements. At EU level, the CSRD requires detailed, audited sustainability reporting for large companies operating in Europe.
What is double materiality?
Double materiality means assessing impact in two directions at once: how the company affects the environment and society, and how climate and social risks could affect the company's own financial performance and long-term viability. It is now a required part of a CSRD-compliant CSR audit.
Does ISO 26000 lead to a certification?
No. ISO 26000 is a guidance standard, not a certifiable one. Companies that want external recognition can pursue a label built on its criteria, such as AFNOR Engagé RSE, Positive Company or Lucie.
Conclusion
Small and medium-sized companies are now expected to engage with sustainable development too, yet too few have adopted a properly structured CSR strategy. With tighter controls on greenwashing and the arrival of European reporting standards (ESRS), only a rigorous process delivers a CSR strategy that lasts, and that can support a genuine label.
Start by naming a CSR lead and mapping your stakeholders. That single step turns CSR from an intention into a plan.
Kabaun supports your carbon footprint measurement → kabaun.com/en/contact
