BRSR Core Assurance in 2026: What Auditors Will Expect from Indian Companies

There is a moment when a compliance obligation stops feeling theoretical and starts feeling very, very real. For thousands of Indian listed companies, that moment is 2026. BRSR assurance India is no longer a conversation reserved for the top 150 companies that first faced it in FY 2023-24. The mandate has marched steadily up the market capitalisation ladder - top 250, top 500 and by FY 2026-27, it will cover all top 1,000 listed entities. In practical terms, this means an independent auditor will walk into your organisation, ask to see your ESG data, and form a professional opinion on its credibility. The question is whether you will be ready.

What Exactly Is BRSR Core Assurance?

To understand what auditors will expect, you first need to understand what BRSR assurance India actually covers. BRSR Core is a structured subset of the full Business Responsibility and Sustainability Report, comprising 49 Key Performance Indicators (KPIs) organised into 9 ESG attributes.

These span three environmental attributes - GHG emissions, energy management, and water and waste management - four social attributes covering workforce composition, occupational health and safety, diversity and inclusion, and training and skill development, and two governance attributes addressing business ethics and openness of business. Unlike the broader BRSR, these 49 KPIs must be independently verified to the standard of reasonable assurance.

Reasonable assurance is the highest level of assurance currently prescribed under SEBI’s BRSR Core framework. It is equivalent in rigour to a financial statement audit - not a review, not a limited assurance engagement. The assurance provider must obtain sufficient and appropriate evidence to support a positively worded opinion on whether the ESG data is free of material misstatement. For companies used to narrative sustainability disclosures, this is an entirely different category of scrutiny. ESG reporting standards in India have effectively moved from aspiration to auditable accountability.

BRSR Core Assurance Phase-In Timeline

FY 2023–24: Top 150 listed companies - Reasonable Assurance mandatory

FY 2024–25: Top 250 listed companies + Value Chain disclosures

FY 2025–26: Top 500 listed companies

FY 2026–27: All top 1,000 listed companies

The 5 Things Auditors Will Actually Test

When an auditor arrives for a BRSR assurance engagement in India, they are not simply reading your sustainability report. They are testing the systems, controls, and evidence that sit behind every disclosed number. Based on the ICAI’s SSAE 3000 standard and SEBI’s assurance framework, here is what they will actually focus on.

Data traceability

Every KPI in the BRSR Core ESG disclosure must trace back to a source record. Scope 1 emissions are not a number that lives in a spreadsheet - they must be traceable to fuel consumption logs, invoices, and meter readings. Water withdrawal figures must link to utility bills or internal flow meters. If a data point cannot be traced, auditors will qualify their opinion or flag a material weakness. Companies that have been running ESG data collection manually, across disconnected teams, typically discover this problem the hard way.

Methodological consistency

Auditors will assess whether the same measurement methodology has been applied year-on-year. Switching between GHG Protocol scopes, changing emission factors mid-year, or redefining organisational boundaries without disclosure creates immediate red flags. Sustainability reporting compliance demands documented, consistent methodologies, not just accurate final numbers. Unexplained changes in assumptions can result in audit qualifications even if the underlying data is correct.

Internal controls over ESG data

This is arguably the area in which most Indian companies are least prepared. Auditors will want to see that your ESG data undergoes a formal review and approval process before it appears in the annual report. Who owns each KPI? Who checks it? Who approves it before board sign-off? BRSR assurance India at the reasonable assurance level requires evidence of internal governance over data, not unlike the internal controls testing done in a financial audit. Without this, even accurate data looks unreliable.

Board-level accountability

Auditors will examine whether ESG risks are integrated into your enterprise risk management framework and whether board-level oversight of BRSR Core ESG disclosure is documented. A sustainability report signed off by the CFO without evidence of board review will raise questions. Senior leadership accountability for data quality is a specific area of scrutiny under the SSAE 3000 framework that governs ESG reporting standards in India.

Value chain data quality

From FY 2024-25, the top 250 companies must also report and obtain limited assurance on value chain ESG disclosures - covering upstream and downstream partners that collectively represent 75% of purchases and sales by value. Collecting reliable ESG data from suppliers and distributors is a genuine operational challenge. Auditors will assess whether your company has formal data request processes, documented agreements with value chain partners, and verification mechanisms for third-party data. This area of sustainability reporting compliance is where most companies currently have the widest gaps.

Common Readiness Gaps and How to Close Them

The most frequently observed BRSR assurance India readiness gaps include missing KPI definitions (teams measuring the same metric differently across sites), manual data collection with no audit trail, inadequate source evidence, and weak internal controls over ESG data. According to GloCert International’s BRSR Core Assurance Readiness Guide, companies entering the assurance mandate for the first time typically need a 6 to 12-month preparation window before their financial year-end. For FY 2026–27 entrants, that preparation window is already live.

Closing these gaps requires three things to happen simultaneously. First, a formal BRSR Core ESG disclosure data governance structure must be established, assigning ownership of each KPI to a named individual or function and documenting collection procedures and approval workflows. Second, methodology documentation must be formalised: each environmental, social, and governance metric must have a written methodology note that defines what is being measured, how, using which standard, and over what boundary. Third, companies must start treating sustainability reporting compliance not as an annual reporting exercise but as a continuous data management discipline.

India stands out globally because SEBI ESG reporting mandates reasonable assurance - the highest standard - while most other jurisdictions, including the EU’s CSRD, start with limited assurance. This means that ESG reporting standards in India are, in several respects, more demanding than the international norm. For companies operating globally, aligning BRSR Core data collection with frameworks such as the GHG Protocol and GRI from the outset will satisfy BRSR assurance India requirements and prepare disclosures for international investor scrutiny. This is one reason why engaging a qualified ESG audit India professional early is not just prudent - it is strategically smart.

What This Means for Your 2026 Annual Report

The annual report is no longer just a financial document with a sustainability appendix. Under BRSR Core ESG disclosure requirements, the ESG section carries the same weight and legal significance as your audited financial statements. Breaches of SEBI ESG reporting rules are treated as violations of India’s Listing Obligations and Disclosure Requirements (LODR) - and may result in regulatory action. This means the CFO, the board, and the audit committee all carry personal accountability for the integrity of BRSR Assurance India disclosures.

The practical implication is that companies need to appoint their ESG audit India assurance provider early - not in the final quarter when the report is being drafted, but at the start of the financial year.

Auditors who are brought in late have less time to test controls, more risk to manage, and less room to help companies correct deficiencies before the report is finalised. Sustainability reporting compliance is best treated as a year-round engagement, not a year-end scramble. Companies that embed SEBI ESG reporting discipline into their daily operations - rather than treating it as a once-a-year documentation exercise - consistently produce cleaner, faster, and less costly assurance outcomes.