Indian Regulation Hub
Assurance vs. Assessment — the BRSR Core Requirement Explained
BRSR Core requires third-party assurance, not just an internal assessment. Here's the real difference, and why it matters for your budget and timeline.
TL;DR
Assessment is an internal or advisory review that helps you find gaps before you report — useful preparation, but it doesn't satisfy any BRSR requirement. Assurance is a formal, independent, third-party check that BRSR Core mandates for its ~49 KPIs, and it comes in two levels — limited and reasonable — with reasonable assurance being the only level SEBI accepts for the mandatory BRSR Core indicators. Don't confuse doing an internal readiness check with actually being assurance-ready.
Who this is for
Anyone preparing for BRSR Core who's seen the phrase "assurance or assessment" and assumed the two are interchangeable, lower-stakes options.
Plain explanation
Assessment happens early. It's a review — done internally or by a consultant — to map out what data you have, what's missing, and where your numbers might not hold up. It's genuinely useful preparation work, but it carries no formal weight: nobody signs off on it as proof your BRSR Core data is correct.
Assurance happens at the end, and it's formal. An independent third party — typically a chartered accountant or accredited assurance provider — reviews your data, tests how it was collected, checks whether it can be traced back to a real source, and issues a signed opinion. There are two recognized levels:
- Limited assurance — the reviewer checks for obvious errors and inconsistencies, but doesn't dig deep into your underlying systems. It's a lighter, faster review.
- Reasonable assurance — a much deeper review. The provider examines your data collection systems and processes, tests evidence, and issues a positive statement that the data is accurate based on that testing. This is a materially bigger undertaking than limited assurance.
India specifics
BRSR Core's mandatory indicators require reasonable assurance — not limited assurance, and not just an internal assessment. This is the higher bar of the two assurance levels, phased in by market-cap rank on the same glide path as BRSR Core itself:
| Financial year | Companies (by market-cap rank) needing reasonable assurance |
|---|---|
| FY 2023–24 | Top 150 |
| FY 2024–25 | Top 250 |
| FY 2025–26 | Top 500 |
| FY 2026–27 | Top 1,000 |
Value-chain disclosures (data your suppliers provide you, which you pass into your own report) are generally held to a lighter bar — limited assurance applies once value-chain reporting itself moves from voluntary to mandatory, rather than the reasonable-assurance standard applied to your own direct BRSR Core data.
Doing an internal assessment first is still a smart move. It's the cheapest way to find data gaps, fix broken collection processes, and avoid an expensive surprise when the actual assurance review begins — treat it as a rehearsal, not a substitute.
Worked example
Kavali Industrial Products, ranked around #230 by market capitalisation, realizes it needs BRSR Core reasonable assurance starting FY 2024–25. Six months before the deadline, its sustainability lead runs an internal assessment: pulling together emissions, water, and safety data, and discovering that two factories have been tracking electricity use in different units, and one site has no formal safety-incident log at all.
Fixing these gaps before the actual assurance review means the third-party assurance provider — engaged three months later — finds a clean, traceable dataset and issues reasonable assurance without delays. Had Kavali skipped the internal assessment and gone straight to the formal assurance engagement, those same gaps would likely have surfaced mid-review, costing time and possibly delaying the filing.
Checklist
- Confirm which assurance level applies to you: reasonable assurance for your own BRSR Core indicators, limited assurance for value-chain data (once mandatory).
- Run an internal assessment well before your assurance deadline — treat it as a rehearsal, not the real thing.
- Fix data-collection gaps (inconsistent units, missing logs) found during assessment before the formal assurance review begins.
- Engage an independent third-party assurance provider with enough lead time — reasonable assurance is a deeper, slower process than a quick internal check.
- Don't assume "we did an assessment" satisfies your BRSR Core obligation — only formal assurance does.
What to do next
Not sure which assurance year applies to you? Check your market-cap rank against the glide path.
Current as of: 22 July 2026. Assurance requirements and the glide path are set by SEBI circulars and reviewed periodically — verify against the current circular before committing to an assurance engagement timeline.
Sources: