ESG Audit & Assurance Services
By CA V. Viswanathan — FCA, ACS, CFE, IBBI Registered Valuer (IBBI/RV/03/2019/12333). Updated for FY 2025-26.
Environmental, Social and Governance (ESG) audits provide independent assurance over a company's sustainability disclosures. With investor capital increasingly tied to ESG performance and regulators (SEBI, RBI, IFRS) mandating disclosure standards, an unaudited sustainability report is no longer credible. Virtual Auditor offers reasonable assurance under SSAE 3000 for BRSR Core indicators, limited assurance for full sustainability reports, and gap-assessment services for first-time reporters preparing for assurance readiness.
Why ESG Audits Matter
Three regulatory drivers have made ESG audits mandatory or near-mandatory in India. First, SEBI's BRSR Core assurance requirement applies to top 250 listed companies in FY 2024-25 and expands to top 500 (FY 25-26) and top 1,000 (FY 26-27). Second, RBI's Disclosure Framework on Climate-related Financial Risks for regulated entities requires phased disclosure aligned with TCFD. Third, India's adoption of IFRS Sustainability Disclosure Standards (IFRS S1 and S2) from FY 2027-28 will make climate and sustainability disclosure part of mainstream financial reporting. Lenders are also adding ESG covenants to syndicated loans. An ESG audit is therefore not optional — it is now part of normal business hygiene.
Frameworks We Audit Against
We provide assurance against multiple recognised frameworks depending on client need: (i) BRSR and BRSR Core — SEBI mandated for listed companies; (ii) GRI Standards 2021 — global voluntary framework, widely used by international subsidiaries; (iii) IFRS S1 (general sustainability) and IFRS S2 (climate); (iv) TCFD recommendations — required by RBI for regulated entities; (v) ISO 14064-3 — GHG inventory verification; (vi) SASB sector standards; and (vii) UN Global Compact COP. For companies subject to multiple jurisdictions, we offer a unified disclosure architecture that satisfies all applicable frameworks without duplicating data collection.
Reasonable vs Limited Assurance — Which Do You Need?
Reasonable assurance is a high level of assurance — the auditor expresses a positive opinion that the disclosures are 'in all material respects' consistent with the criteria. SEBI mandates reasonable assurance for BRSR Core. Limited assurance is a lower level — the auditor expresses negative assurance ('nothing has come to attention to suggest the disclosures are misstated'). Limited assurance is appropriate for first-time disclosures, voluntary reports, and indicators outside BRSR Core. Reasonable assurance engagements typically cost 2-3x limited assurance and require more extensive testing — site visits, recalculations, third-party data verification, and management letter procedures.
Our ESG Audit Methodology
Phase 1 — Pre-engagement: scope, materiality threshold, applicable framework, data architecture review. Phase 2 — Risk assessment: identify high-risk indicators (Scope 3 emissions, supply-chain labour data, governance metrics) and design substantive procedures. Phase 3 — Walkthroughs and control testing: verify the data flow from source systems to disclosure, including controls over completeness, accuracy, and cut-off. Phase 4 — Substantive procedures: site visits, sample-based recalculation, third-party verification (utility bills, supplier confirmations, HR records), analytical procedures. Phase 5 — Reporting: independent assurance report addressed to the audit committee, management representation letter, and management letter with control improvement recommendations.
Common ESG Disclosure Failures We Encounter
First-time BRSR filers consistently struggle with five issues: (1) Scope 2 emissions calculated using state-grid emission factors that have changed (CEA publishes updated factors annually); (2) gender pay-ratio calculations that exclude variable pay components, contractors, or split-payroll structures; (3) waste generation reported in volumes but disclosure required by mass; (4) water 'consumption' incorrectly reported as withdrawal; (5) Scope 1 emissions excluding fugitive refrigerant leakage (HFC-134a, R-22) which is often material. Our pre-assurance gap analysis identifies these issues before they become disclosure errors.
Engagement Pricing and Timeline
Limited assurance for a single-entity company with ~10 indicators: typically ₹4-8 lakhs, 4-6 weeks. Reasonable assurance for BRSR Core (9 indicators) at a multi-site listed company: ₹15-30 lakhs, 8-12 weeks. Full GRI assurance with value-chain coverage: ₹25-50 lakhs depending on size. Costs scale with the number of operational sites, third-party data sources, and prior-period restatements required. We provide fixed-fee quotes after a free 1-hour scoping call.
How Virtual Auditor Delivers This
Virtual Auditor's CA-CS-IBBI Valuer team handles esg audit & assurance services as an integrated engagement — no hand-offs between firms, single point of accountability, fixed-fee transparency. CA V. Viswanathan (FCA, ACS, CFE, IBBI RV) personally reviews every engagement deliverable. Offices in Chennai, Bangalore, and Mumbai serve clients across India. Free 30-minute scoping consultation available — no obligation.
Get Started — Free Consultation
Call +91 99622 60333 or email support@virtualauditor.in to schedule a free 30-minute consultation with CA V. Viswanathan. No obligation. We will give you a clear scope, timeline, and fixed-fee quote within 24 hours of the call.
Frequently Asked Questions
Can our statutory auditor also do our ESG audit?
Technically yes for limited assurance, but not best practice. SEBI requires the BRSR Core assurance provider to be independent of the statutory audit firm to avoid conflict of interest. We recommend the same separation for voluntary reports.
Do unlisted companies need ESG audits?
Not by SEBI mandate, but increasingly by lender requirements. RBI-regulated NBFCs with public-debt exposure, large private companies seeking ECB or syndicated loans, and companies preparing for IPO commonly commission voluntary ESG assurance to support investor disclosure and credit ratings.
How long does an ESG audit take?
Limited assurance: 4-6 weeks. Reasonable assurance for BRSR Core: 8-12 weeks. Full multi-framework assurance for a multi-site listed company: 3-4 months. Timeline depends on data readiness and prior-year baseline.
What qualifications must an ESG assurance provider have?
There is no single statutory qualification. ICAI, ICSI, ICMAI member firms with relevant training, accredited verification bodies (UKAS, NABCB), and Big-Four assurance teams are commonly accepted. SEBI and stock exchanges have not prescribed specific accreditation but expect technical competence and independence.
Will ESG assurance be mandated for unlisted companies?
IFRS S1/S2 adoption from FY 2027-28 may extend to large unlisted companies through Companies Act amendments. RBI's climate disclosure framework already covers all regulated entities phased over FY 2024-26.
How do we prepare for a first-time ESG audit?
Start with a gap assessment 6 months before the assurance engagement. Identify data owners, build collection systems, document policies, and prepare a baseline-year inventory. Most failures stem from inadequate data infrastructure, not from poor performance.