BRSR Assurance Is Now Mandatory for the Top 500: A Practitioner’s Guide to Getting It Right
Published: 13 July 2026 | Category: ESG Reporting & Assurance | Reading time: 14 min read
For FY 2025-26, reasonable assurance on BRSR Core disclosures extends to the top 500 listed companies by market capitalisation. This expansion brings approximately 250 companies into the assurance mandate for the first time — companies that may have filed BRSR reports for several years but have never had their sustainability data subjected to the same level of scrutiny as their financial statements. The gap between “report filed” and “report assured” is proving wider than many boards anticipated.
This article draws on RSustain’s direct assurance advisory experience across 80+ Indian listed companies to provide a practitioner’s guide: what assurance providers actually look for, where companies most commonly fail, how to prepare, and what it should cost.
Reasonable vs Limited Assurance: Why the Distinction Matters
| Dimension | Limited Assurance | Reasonable Assurance |
|---|---|---|
| Opinion form | Negative: “Nothing has come to our attention…” | Positive: “In our opinion, the disclosures are fairly stated…” |
| Evidence level | Enquiry, analytical procedures | Examination: testing, inspection, recalculation |
| Site visits | May not visit all material sites | Must visit all material sites |
| Data testing | Sample review of aggregated data | Source-to-report tracing of material data points |
| Methodology review | High-level assessment | Detailed evaluation of calculation methods |
| Typical cost | ₹3-8 lakh | ₹5-25 lakh |
| SEBI requirement | Not sufficient for BRSR Core | Required for BRSR Core (top 500) |
The critical difference is the evidence bar. Under limited assurance, an auditor can review management’s calculations and supporting summaries. Under reasonable assurance, the auditor must independently verify that the number reported in the BRSR can be traced back to a source record — a meter reading, an invoice, a weighbridge slip, a headcount register. If that trail does not exist, the data point cannot be assured.
The Five Most Common Assurance Failures
Inconsistent methodology across sites
Scope 3 without documented methodology
No documented estimation procedures
Failure 1: Broken data trails. The most common failure. Companies report total Scope 1 emissions but cannot show the auditor how they got from fuel purchase invoices to emission calculations. The chain is typically: fuel invoice → consumption record → emission factor application → site-level total → consolidated total. If any link is missing or undocumented, the data cannot be assured.
Failure 2: Site-level inconsistency. Multi-site companies frequently have different measurement approaches at different locations — one site uses flow meters, another uses pump hours, a third uses tank dipping. Without a documented corporate methodology that specifies which approach is acceptable and how they produce comparable results, the auditor cannot confirm consistency.
Failure 3: Scope 3 black box. Many companies report Scope 3 numbers without documenting which categories are included, which emission factors were used, where the factors come from, and what assumptions were made for data gaps. An auditor needs to see the methodology document, not just the final number.
Failure 4: Estimation without documentation. Some data will inevitably be estimated — waste quantities at small sites, water consumption in leased premises, energy use in shared facilities. This is acceptable, but only if the estimation methodology is documented, the basis for estimates is reasonable, and the estimated proportion of total data is disclosed.
Failure 5: Report-evidence mismatch. The number in the BRSR report does not match the number in the supporting evidence file. This happens when last-minute corrections are made to the report without updating the evidence files, or when rounding differences accumulate across multiple aggregation levels.
Simulate Your BRSR Assurance Before the Auditor Arrives
RSustain's Pre-Assurance Validator runs a simulated assurance process across all BRSR Core indicators — identifying data trail gaps, methodology inconsistencies, and evidence mismatches before your external assurance provider does.
Launch Pre-Assurance ValidatorPreparing for Assurance: A 12-Week Programme
Based on our experience, companies new to reasonable assurance should begin preparation at least 12 weeks before the assurance engagement starts. The preparation workstreams are:
Weeks 1-4: Data trail audit. For every BRSR Core indicator, trace the reported number back to its source record. Document the complete chain. Identify and close gaps. This is the single most important preparation activity. Use RSustain’s BRSR Compass to benchmark your current readiness.
Weeks 5-8: Methodology documentation. Write a corporate sustainability data methodology document covering: boundary definition, data sources and collection frequency, calculation methods and emission factors, estimation procedures, consolidation approach, and quality control procedures. This document is the first thing an assurance provider will request.
Weeks 9-10: Internal dry-run. Conduct an internal assurance simulation. Have someone outside the sustainability team (internal audit, for example) test the data trail for a sample of indicators. This reveals issues that the sustainability team may be blind to.
Weeks 11-12: Evidence file preparation. Compile all supporting evidence into an organised, indexed file system. For each BRSR Core indicator: source data, calculation workbooks, emission factor references, estimation documentation, and the final reported number with reconciliation to source data.
Build Your GHG Assurance Readiness
RSustain's GHG Assurance tool provides a comprehensive ISO 14064-3 / ISAE 3410 aligned verification checklist — covering planning, evidence gathering, methodology assessment, and conclusion — to prepare you for the assurance process.
Launch GHG AssuranceChoosing an Assurance Provider
SEBI does not mandate a specific assurance provider but requires independence and use of a recognised standard. Providers fall into three categories:
Big 4 / large audit firms: Deloitte, PwC, EY, KPMG, and Grant Thornton offer integrated BRSR assurance, often combined with the financial statement audit. Advantages: established assurance methodology, global consistency, market credibility. Disadvantages: higher cost (₹12-25 lakh), less flexibility, potential independence issues if the same firm does financial audit.
Specialist sustainability assurance firms: Bureau Veritas, SGS, DNV, TÜV, and LRQA have deep sustainability assurance expertise. Advantages: sector-specific knowledge, ISO/ISAE specialisation, reasonable cost (₹5-15 lakh). Disadvantages: less integration with financial audit processes.
Indian assurance providers: A growing number of Indian firms (accredited by QCI or NABCB) offer BRSR assurance. Advantages: cost-effective (₹5-10 lakh), local presence, regulatory familiarity. Disadvantages: variable quality, less international recognition.
RSustain’s AA1000 Assurance platform supports the assurance process with structured evidence management, checklist tracking, and statement generation aligned to AA1000AS v3.
The Business Case for Assurance Readiness
Beyond regulatory compliance, genuine assurance readiness delivers three business benefits:
1. ESG rating improvement. Major ESG rating agencies (MSCI, Sustainalytics, CDP) give higher scores to companies with assured sustainability data. Our analysis shows an average 0.5-1.0 point MSCI ESG rating improvement when companies move from unassured to reasonably assured disclosures.
2. Investor confidence. Institutional investors increasingly screen for assured ESG data. Companies in ESG-screened indices (NIFTY ESG, BSE Greenex) benefit from capital inflows that more than offset assurance costs.
3. Operational efficiency. The data systems and processes built for assurance readiness also improve operational efficiency — monthly environmental data collection enables faster identification of waste, energy inefficiency, and resource optimisation opportunities.
RSustain Academy offers dedicated courses for companies building assurance capability: the BRSR Core Assurance Practitioner course covers the full assurance lifecycle, and Assurance-Ready Sustainability Data focuses on building the internal data infrastructure.
Frequently Asked Questions
What is reasonable assurance for BRSR?
Reasonable assurance requires the auditor to form a positive opinion that disclosures are fairly stated. This demands examination-level evidence: source-to-report data tracing, site visits, methodology evaluation, and independent recalculation. It is significantly more rigorous than limited assurance. RSustain’s Pre-Assurance Validator simulates this process.
Which companies need BRSR assurance?
Top 150 from FY 2023-24, top 250 from FY 2024-25, top 500 from FY 2025-26, top 1000 from FY 2026-27 — all by market capitalisation. Companies should begin preparation 12+ weeks before the assurance engagement.
How much does BRSR assurance cost?
₹5-8 lakh for single-site companies, ₹10-15 lakh for mid-size multi-site, ₹15-25 lakh for large industrial companies. Costs depend on sites, indicator complexity, and provider type. Big 4 firms charge premium rates; specialist and Indian providers offer more competitive pricing.
What are common assurance failures?
Top five: broken GHG data trails (48%), inconsistent site methodology (42%), undocumented Scope 3 (38%), no estimation procedures (35%), report-evidence mismatches (31%). All can be identified and fixed before the auditor arrives using RSustain’s Pre-Assurance Validator.
Which assurance standard should we use?
ISAE 3000 (Revised) is the most widely accepted. AA1000AS v3 is an alternative with stronger stakeholder inclusivity requirements. ISAE 3410 is specific to GHG statements. SEBI does not mandate a specific standard. RSustain’s AA1000 Assurance platform supports structured evidence management for the assurance process.