Skip to content

Evidence request lists

CDP (formerly Carbon Disclosure Project)

Evidence request list. 13 controls, 13 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 11 September 2026. Published by The Art of Service.

CDP: Environmental Performance Modules

CDP-M10
Module 10 - Environmental Performance: Plastics

Module 10: plastics-related disclosure - plastics mapping, impacts and reduction activities (not scored in the initial integration year).

Artefacts an auditor will ask for
  • mapping of plastics use/production
  • plastics reduction activities and targets
Where this commonly fails
  • plastics impacts not mapped
CDP-M11
Module 11 - Environmental Performance: Biodiversity

Module 11: biodiversity-related disclosure - biodiversity dependencies/impacts, action plans, targets and engagement.

Artefacts an auditor will ask for
  • biodiversity dependencies and impacts assessment
  • biodiversity action plans and targets
Where this commonly fails
  • biodiversity impacts not assessed
CDP-M12
Module 12 - Environmental Performance: Financial Services

Module 12: sector-specific disclosure for financial services - financed/facilitated emissions, portfolio impacts and climate-related portfolio risk.

Artefacts an auditor will ask for
  • financed/portfolio emissions where applicable
  • portfolio climate-risk assessment
Where this commonly fails
  • financed emissions not disclosed by a financial institution
CDP-M6
Module 6 - Environmental Performance: Consolidation Approach

Module 6: the consolidation approach used for environmental performance data (e.g. operational/financial control, equity share) consistent across issues.

Artefacts an auditor will ask for
  • stated consolidation approach for emissions and other environmental data
Where this commonly fails
  • inconsistent or undefined consolidation approach
CDP-M7
Module 7 - Environmental Performance: Climate Change

Module 7: climate-change performance - Scope 1, 2 and 3 greenhouse gas emissions, energy consumption, emissions reduction targets, internal carbon pricing and verification.

Artefacts an auditor will ask for
  • Scope 1, 2 and 3 GHG inventory with methodology and base year
  • emissions reduction targets and progress
  • energy consumption data
  • third-party verification/assurance of emissions
Where this commonly fails
  • Scope 3 omitted without justification
  • no base year or methodology
  • targets not science-based or not tracked
  • emissions unverified
CDP-M8
Module 8 - Environmental Performance: Forests

Module 8: forests-related performance - forest-risk commodity footprint, deforestation/conversion commitments, traceability and certification.

Artefacts an auditor will ask for
  • identification of forest-risk commodities in the value chain
  • deforestation/conversion-free commitments and targets
  • traceability and certification data
Where this commonly fails
  • forest-risk commodities not identified
  • no deforestation commitment
CDP-M9
Module 9 - Environmental Performance: Water Security

Module 9: water-security performance - water dependencies and impacts, water risk assessment, withdrawals/discharges and water targets.

Artefacts an auditor will ask for
  • water risk assessment across the value chain
  • water withdrawal/discharge data
  • water-related targets
Where this commonly fails
  • water risks not assessed
  • no water data or targets

CDP: General and Sign-Off

CDP-M1
Module 1 - Introduction

CDP Full Corporate Questionnaire Module 1: organisational details, reporting boundary, reporting period and the environmental issues (climate change, forests, water security, plastics, biodiversity) relevant to the organisation.

Artefacts an auditor will ask for
  • defined reporting boundary and period consistent with financial reporting
  • identification of which CDP environmental issues apply
Where this commonly fails
  • reporting boundary inconsistent with financial statements
  • relevant environmental issues omitted
CDP-M13
Module 13 - Further Information and Sign-Off

Module 13 (integrated): additional disclosures, verification statements and sign-off by an authorised person.

Artefacts an auditor will ask for
  • third-party verification/assurance statements
  • sign-off by an authorised senior person
Where this commonly fails
  • no verification of disclosed data
  • no authorised sign-off

CDP: Integrated Modules (Governance, Risk, Strategy)

CDP-M2
Module 2 - Identification, Assessment and Management of Dependencies, Impacts, Risks and Opportunities

Module 2 (integrated): the processes used to identify, assess and manage environmental dependencies, impacts, risks and opportunities across the value chain.

Artefacts an auditor will ask for
  • documented process to identify and assess environmental dependencies/impacts/risks/opportunities
  • value-chain mapping
  • integration with enterprise risk management
Where this commonly fails
  • no defined environmental risk-identification process
  • value chain not considered
CDP-M3
Module 3 - Disclosure of Risks and Opportunities

Module 3 (integrated): disclosure of the substantive environmental risks and opportunities and their current and anticipated financial effects.

Artefacts an auditor will ask for
  • disclosed substantive risks and opportunities with financial effects
  • quantification where possible
Where this commonly fails
  • financial effects of risks/opportunities not disclosed
CDP-M4
Module 4 - Governance

Module 4 (integrated): board oversight and management responsibility for environmental issues, and incentives for managing environmental performance.

Artefacts an auditor will ask for
  • evidence of board-level oversight of environmental issues
  • defined management responsibilities
  • environment-linked incentives
Where this commonly fails
  • no board oversight of environmental issues
  • management responsibility undefined
CDP-M5
Module 5 - Business Strategy

Module 5 (integrated): integration of environmental issues into business strategy and financial planning, climate transition plan, and scenario analysis.

Artefacts an auditor will ask for
  • environmental issues integrated into strategy and financial planning
  • climate transition plan
  • climate-related scenario analysis
Where this commonly fails
  • no transition plan
  • scenario analysis not performed
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does. See the CDP (formerly Carbon Disclosure Project) framework page.