Executive Summary
SEBI's expansion of mandatory reasonable assurance under the BRSR Core framework to all top 1,000 listed entities marks a watershed moment for corporate sustainability reporting in India. Organizations that treat this as a compliance checkbox rather than a strategic opportunity risk reputational exposure, investor scrutiny, and significant remediation costs.
<p><strong>Executive Summary:</strong> The Securities and Exchange Board of India (SEBI) has fundamentally recalibrated the ESG reporting landscape for Indian enterprises. With mandatory reasonable third-party assurance under the Business Responsibility and Sustainability Reporting (BRSR) Core framework now applicable to the top 500 listed entities for FY 2025–26 and expanding to the top 1,000 by FY 2026–27, the era of self-reported, unverified sustainability disclosures is effectively over. This is not an incremental regulatory update — it is a structural shift that demands board-level attention, robust data infrastructure, and credible assurance partnerships. For Chief Sustainability Officers, CFOs, and Compliance Heads, the question is no longer <em>whether</em> to prepare, but <em>how quickly and how rigorously</em>.</p><h2>Understanding the BRSR Core Framework: Beyond Checkbox Compliance</h2><p>Introduced by SEBI in 2023 and progressively tightened through subsequent circulars, the BRSR Core is a distilled subset of the broader BRSR framework, comprising Key Performance Indicators (KPIs) that SEBI has identified as most material to investor decision-making. These KPIs span environmental metrics (Scope 1, 2, and 3 greenhouse gas emissions, energy intensity, water consumption), social indicators (gender pay parity, employee well-being, supply chain accountability), and governance disclosures (board composition, related-party transactions, whistleblower mechanisms).</p><p>What distinguishes BRSR Core from its predecessor — the Business Responsibility Report (BRR) — is the explicit requirement for <strong>reasonable assurance</strong>, not merely limited assurance. This is a critical distinction that many compliance teams are still underestimating. Reasonable assurance, the standard applied in financial statement audits, demands that the assurance provider obtain sufficient, appropriate evidence to conclude that the subject matter is free from material misstatement. Limited assurance, by contrast, is a negative assurance — the provider simply states that nothing has come to their attention to suggest non-compliance. The evidentiary bar for reasonable assurance is substantially higher, requiring systematic data collection protocols, documented control environments, and traceable audit trails across all reported metrics.</p><p>For FY 2025–26, the top 500 NSE/BSE-listed entities by market capitalisation are required to obtain this reasonable assurance from an independent, qualified third-party assurance provider. SEBI's roadmap clearly signals extension to the top 1,000 entities by FY 2026–27, giving organizations in the 501–1,000 bracket a narrow but critical preparation window of approximately 12 months.</p><h2>The Four Pressure Points Driving Urgency in 2026</h2><p>Several converging forces make 2026 a defining year for BRSR compliance, and leaders must understand each pressure point to calibrate their response appropriately.</p><p><strong>1. Investor Expectations Have Hardened:</strong> Domestic institutional investors — including EPFO, LIC, and leading mutual funds — alongside foreign portfolio investors (FPIs) operating under their own ESG mandates (SFDR in Europe, SEC climate rules in the US) are now actively screening Indian investee companies on the quality and credibility of ESG disclosures. Unassured or weakly evidenced BRSR disclosures are increasingly flagged in pre-investment due diligence. The International Sustainability Standards Board (ISSB) standards — IFRS S1 and IFRS S2 — which India's Ministry of Corporate Affairs (MCA) has signalled intent to align with, further reinforce this trajectory toward internationally comparable, independently assured disclosures.</p><p><strong>2. Supply Chain Accountability Is Cascading Downward:</strong> Global buyers — particularly those headquartered in the European Union, subject to the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDDD) — are contractually requiring their Indian suppliers to provide verified ESG data. A listed Indian manufacturer that cannot produce credible, assured sustainability metrics risks losing preferred vendor status with European and North American customers. BRSR Core assurance, therefore, is not merely a domestic regulatory obligation; it is increasingly a prerequisite for global commercial relationships.</p><p><strong>3. The DPDP Act Adds Governance Complexity:</strong> India's Digital Personal Data Protection Act, now fully operative, introduces new data governance obligations that intersect directly with ESG reporting. Employee data used in social KPIs — headcount by gender, wage data, health and safety records — must be collected, processed, and disclosed in compliance with DPDP consent and data minimisation principles. Organizations building ESG data pipelines must simultaneously ensure those pipelines are DPDP-compliant, adding a layer of cross-functional coordination between sustainability, HR, legal, and IT teams that most enterprises have not yet operationalised.</p><p><strong>4. Assurance Provider Capacity Is Constrained:</strong> The pool of qualified assurance providers with demonstrated competence in sustainability assurance — holding credentials such as ISAE 3000, AA1000AS v3, or equivalent — is limited relative to the demand that SEBI's expanding mandate will generate. Top-tier assurance providers are already reporting lead times of six to nine months for reasonable assurance engagements. Organizations that delay initiating provider selection and data readiness assessments will face a compressed timeline that significantly increases both cost and execution risk.</p><h2>Building a BRSR Core Assurance-Ready Organization: A Practical Roadmap</h2><p>Achieving assurance readiness is not a sprint — it is a structured, multi-quarter programme that must be owned at the leadership level and executed with cross-functional discipline. Based on Praxis Consulting's advisory experience with listed Indian enterprises, we recommend a four-phase approach.</p><p><strong>Phase 1 — Materiality Alignment and KPI Scoping (Months 1–2):</strong> Begin with a rigorous review of SEBI's BRSR Core KPI list against your organization's operational footprint. Not all KPIs carry equal assurance complexity. Scope 3 emissions, for instance, require engagement with value chain partners and may necessitate primary data collection protocols that do not currently exist. Identify which KPIs present the highest data quality risk and prioritise remediation efforts accordingly. Align this scoping exercise with your existing double materiality assessment if one has been conducted, or initiate one if not.</p><p><strong>Phase 2 — Data Infrastructure and Internal Controls (Months 2–5):</strong> This is invariably where the most significant gaps surface. Many Indian enterprises still rely on spreadsheet-based ESG data aggregation, with no version control, no approval workflows, and no audit trails — conditions that are fundamentally incompatible with reasonable assurance. Invest in purpose-built ESG data management platforms (several of which now incorporate AI-powered anomaly detection and automated regulatory mapping) that can serve as the system of record for BRSR disclosures. Equally important: document the internal controls governing data collection at each operational unit, including the roles responsible, the frequency of data capture, and the review and approval process.</p><p><strong>Phase 3 — Pre-Assurance Internal Review (Months 5–7):</strong> Before engaging an external assurance provider, conduct a structured internal readiness assessment — effectively an internal audit of your BRSR Core data and processes. This should be led by your internal audit function (ideally with ESG-specific expertise) and should simulate the evidence-gathering process that an external assurer will undertake. Identify and close gaps proactively. This step dramatically reduces the cost and duration of the external assurance engagement and minimises the risk of a qualified or adverse assurance conclusion.</p><p><strong>Phase 4 — External Assurance Engagement and Disclosure (Months 7–12):</strong> Select your assurance provider based on demonstrated technical competence in sustainability assurance, familiarity with Indian regulatory requirements, and sector-specific experience. Engage early — ideally by Q2 of the reporting year — to allow adequate time for fieldwork, management responses, and the iterative review process. Ensure that the assurance statement, when published, clearly articulates the scope, criteria, and level of assurance obtained, in line with SEBI's disclosure requirements and ISAE 3000 standards.</p><h2>The Governance Imperative: Board and C-Suite Accountability</h2><p>SEBI's BRSR framework explicitly requires board-level sign-off on sustainability disclosures, and the introduction of mandatory assurance elevates the governance stakes considerably. Directors who sign off on BRSR disclosures that are subsequently found to contain material misstatements face reputational and, potentially, regulatory consequences. This reality is prompting forward-looking boards to establish dedicated ESG or Sustainability Committees at the board level, with clear mandates, defined competencies, and direct oversight of the assurance process.</p><p>The CFO's role is equally pivotal. ESG data quality is, at its core, a financial reporting quality issue — it demands the same rigour applied to financial KPIs. CFOs who integrate ESG data governance into the broader internal financial controls (IFC) framework mandated under Section 134 of the Companies Act, 2013 are better positioned to achieve assurance readiness efficiently, leveraging existing audit infrastructure rather than building parallel processes.</p><p>Chief Sustainability Officers must, in turn, evolve from narrative storytellers to data stewards — individuals who can speak fluently about data lineage, control environments, and assurance methodologies. The BRSR Core assurance requirement is, in effect, professionalising the CSO function in India's listed company ecosystem.</p><h2>Aligning BRSR Core with Global Frameworks: The ISSB Convergence Opportunity</h2><p>India's BRSR Core framework was deliberately designed with international interoperability in mind. SEBI's KPI selection draws significantly from the World Economic Forum's Stakeholder Capitalism Metrics, the GRI Standards, and the TCFD recommendations — all of which are substantially incorporated into IFRS S1 and IFRS S2, the ISSB's inaugural sustainability disclosure standards. The MCA's stated intent to develop Indian Sustainability Reporting Standards (ISRS) aligned with ISSB standards means that organizations investing in BRSR Core compliance today are, in effect, building the foundation for ISSB-aligned reporting tomorrow.</p><p>This convergence opportunity is strategically significant. Rather than treating BRSR Core as a standalone Indian compliance obligation, leading organizations are using it as the entry point for a globally aligned ESG disclosure architecture — one that simultaneously satisfies SEBI requirements, supports CSRD value chain disclosure requests from European customers, and positions the company for ISSB alignment as Indian standards evolve. This integrated approach avoids the costly duplication of parallel reporting frameworks and maximises the return on ESG data infrastructure investment.</p><p>For Indian conglomerates and multinationals with subsidiaries in GRI or CSRD-reporting jurisdictions, the alignment opportunity is even more immediate. A unified ESG data model that maps to GRI, BRSR Core, and ISSB simultaneously is achievable — and Praxis Consulting's framework architecture practice has developed proprietary mapping tools to accelerate this integration for clients.</p><h2>Conclusion: From Compliance Obligation to Competitive Differentiator</h2><p>The mandatory reasonable assurance requirement under BRSR Core is, at its surface, a regulatory mandate. But organizations that approach it with strategic intent will discover a more valuable outcome: a credible, investor-grade sustainability narrative backed by independently verified data — a differentiator that influences capital allocation, customer relationships, talent attraction, and long-term enterprise value.</p><p>The top 1,000 listed Indian companies that achieve assurance readiness ahead of the regulatory deadline will not merely be compliant. They will be demonstrably more trustworthy, more transparent, and more resilient than peers who treat BRSR Core as a last-minute disclosure exercise. In an era where ESG credibility is a proxy for management quality, that distinction matters.</p><p>The window for structured preparation is open — but it is narrowing. Organizations that begin their BRSR Core assurance readiness journey today will find the process manageable, cost-effective, and strategically rewarding. Those who wait will find it expensive, compressed, and reputationally risky.</p><p><em>Praxis Consulting's Sustainability & ESG Advisory practice works with India's leading listed enterprises to design and implement BRSR Core assurance readiness programmes, ESG data governance frameworks, and integrated sustainability reporting architectures. If your organization is navigating the BRSR Core mandatory assurance requirement and seeking a structured, expert-led approach, we invite you to connect with our advisory team for a complimentary readiness diagnostic.</em></p>
Actionable Recommendations
Conduct a BRSR Core data readiness assessment immediately — map each mandatory KPI to its data source, owner, and current quality status to identify critical gaps before your assurance engagement begins.
Appoint a cross-functional BRSR Assurance Steering Committee comprising the CFO, CSO, Chief Compliance Officer, and Head of Internal Audit to provide unified governance over the assurance readiness programme and eliminate siloed execution.
Engage your external assurance provider no later than Q2 of the reporting year — given constrained capacity among qualified sustainability assurance providers in India, early selection and onboarding is essential to avoid timeline compression and cost escalation.
Integrate BRSR Core KPI mapping with GRI Standards and IFRS S1/S2 requirements now to build a single, globally aligned ESG data architecture that serves multiple reporting obligations and maximises return on your sustainability data infrastructure investment.