Business Responsibility & Sustainability Reporting (BRSR)

BRSR (Business Responsibility and Sustainability Report) is a mandatory, standardised ESG disclosure that SEBI requires certain listed companies to file as part of their Annual Report. It replaced the older, narrative-style Business Responsibility Report (BRR) with a structured format that asks for specific quantitative data — emissions, energy and water use, workforce diversity, safety incidents, CSR spend — alongside qualitative disclosures on governance and policy, organised around nine principles of responsible business conduct.

BRSR became mandatory under SEBI LODR Regulation 34(2)(f) for the top 1,000 listed companies by market capitalisation, applicable from financial year 2022-23 onwards. The exact cohort is determined annually based on market capitalisation as of the end of the immediately preceding financial year, as notified by SEBI/stock exchanges. Companies outside this threshold may adopt BRSR voluntarily.

BRSR Core is not a separate report — it is a defined subset of high-priority, quantifiable KPIs drawn from the full BRSR disclosures, spanning nine ESG attributes (such as GHG emissions, energy and water intensity, employee wellbeing, and workforce representation). SEBI introduced BRSR Core via its circular dated 12 July 2023 and made these specific KPIs subject to mandatory independent reasonable assurance — a requirement that does not currently extend to the entirety of the full BRSR report.

SEBI phased BRSR Core assurance in by market-capitalisation tier. It began with the top 150 listed entities by market cap for FY 2023-24. SEBI's notified glide path widens the mandated cohort progressively in subsequent years, extending toward the top 1,000 listed entities by market cap by FY 2026-27. Companies should check their specific applicability each year against SEBI's current circulars and the relevant market-cap cohort, since the glide path and specific yearly thresholds are set by SEBI and can be refined.

The National Guidelines on Responsible Business Conduct (NGRBC), 2018, issued by the Ministry of Corporate Affairs, set out nine principles: (1) ethical, transparent, and accountable business conduct; (2) safe and sustainable goods and services across the life cycle; (3) employee wellbeing; (4) responsiveness to all stakeholders; (5) respect and promotion of human rights; (6) protection and restoration of the environment; (7) responsible engagement in public and regulatory policy advocacy; (8) inclusive growth and equitable development; and (9) engaging with and providing value to consumers responsibly. Section C of BRSR requires quantitative and qualitative disclosures against each.

Reasonable assurance is a higher level of assurance than limited assurance — it requires the assurance provider to perform more extensive procedures (similar in rigour to a financial statement audit) to reduce assurance risk to an acceptably low level, and results in a positively worded conclusion (e.g., 'in our opinion, the KPIs are fairly stated'). Limited assurance involves fewer procedures and results in a negatively worded conclusion (e.g., 'nothing has come to our attention that causes us to believe the KPIs are materially misstated'). SEBI's BRSR Core mandate requires reasonable assurance for the applicable cohort — the more rigorous of the two levels.

SEBI extended select BRSR Core disclosures to a reporting company's significant value-chain partners — material suppliers and customers — on a comply-or-explain basis starting from FY 2024-25 for the applicable top-tier reporting companies within SEBI's notified cohort for that year. Unlike the reasonable assurance required for the reporting company's own BRSR Core KPIs, SEBI requires only limited assurance for value-chain ESG disclosures. If your company is itself a significant supplier or customer to a large listed BRSR Core reporter, you may receive an ESG data request even though you are not directly within SEBI's own reporting mandate.

Scope 1 covers direct GHG emissions from sources owned or controlled by the company — fuel combustion in owned vehicles, boilers, or generators, and process emissions. Scope 2 covers indirect emissions from purchased electricity, steam, heating, or cooling consumed by the company. Both are calculated using the GHG Protocol methodology: activity data (litres of fuel, units of electricity) multiplied by an appropriate, documented emission factor, with a clearly defined organisational and operational boundary. BRSR Core requires Scope 1 and Scope 2 disclosure at minimum; Scope 3 (value-chain emissions) is increasingly requested by investors even where not yet a mandatory Core KPI for every company.

BRSR is filed as part of the Annual Report submitted to stock exchanges, so a missed filing is treated as a disclosure lapse under SEBI LODR, which can attract SEBI/stock exchange penal action applicable to LODR non-compliance generally. Materially inaccurate or unsubstantiated ESG claims within a filed BRSR expose the company to greenwashing scrutiny from SEBI, investors, and proxy advisory firms, and — for the BRSR Core cohort — can surface as a qualified or adverse assurance opinion, which is itself a matter of public record once filed.

Independence is a core assurance principle. Where PNPC has materially assisted with BRSR/BRSR Core preparation, we structure the engagement so that assurance is performed by an independent team within the firm, subject to appropriate safeguards, or we recommend a separate assurance provider entirely where independence cannot be adequately maintained — the same discipline we apply to statutory audit independence under the Companies Act.

For a first-time preparer, realistically 10–13 weeks from the applicability and materiality assessment through to filing — run in parallel with the broader Annual Report preparation cycle. Where BRSR Core assurance is also mandatory for the first time, add the assurance fieldwork and report-drafting time, and build in extra runway since data gaps discovered during the first assurance cycle often require remediation before the report can be finalised.

No. CSR reporting under Section 135 of the Companies Act (via Form CSR-2 and the Board's Report) is a separate, distinct compliance requirement with its own applicability thresholds, spending obligations, and filing mechanism to the Ministry of Corporate Affairs. BRSR Section A does require disclosure of CSR-related data (obligation and spend), so the two exercises are closely linked and should be coordinated, but BRSR does not substitute for the Section 135 filing.

It depends on your specific pressures. If you have no near-term IPO plan, no ESG-linked financing, and no anchor customer requesting ESG data, a full BRSR-format exercise may not be the best use of resources right now. If any of those apply — or if you expect to cross the market-cap threshold within the next 2–3 years — building BRSR-aligned data capacity incrementally is significantly cheaper than a compressed first-cycle sprint once the mandate applies.

Greenwashing is the practice of making environmental or social claims that are exaggerated, unsubstantiated, or misleading relative to the underlying evidence. In a BRSR context, this risk arises when a company discloses a favourable metric, a target, or a qualitative claim (e.g., 'committed to net-zero by [year]') without the underlying data, methodology, or governance to substantiate it. SEBI, institutional investors, and proxy advisory firms have all sharpened scrutiny of ESG claims, and an unsubstantiated claim discovered later is reputationally more damaging than a conservative, well-evidenced disclosure.

BRSR is India's own SEBI-mandated regulatory disclosure framework, built on the NGRBC's nine principles — it is not the same taxonomy as GRI Standards (a global voluntary framework) or the IFRS Sustainability Disclosure Standards issued by the ISSB (which are being adopted or referenced by a growing number of jurisdictions). Companies with international investors or cross-listings sometimes prepare a GRI-aligned or ISSB-aligned voluntary sustainability report alongside their mandatory BRSR filing, but the two are not interchangeable — the data points, materiality approach, and reporting boundary can differ.

For the top 1,000 listed companies (mandated to constitute a Risk Management Committee under SEBI LODR Regulation 21), the RMC's mandate explicitly includes reviewing sustainability-related risks, including ESG-related risks. In practice, many companies route BRSR governance oversight — policy approval, target-setting, and review of assurance findings — through the RMC or a dedicated ESG/Sustainability Committee, before matters reach the full Board.

BRSR requires headcount data disaggregated by gender across employee and worker categories (permanent and other-than-permanent), typically as at the end of the reporting period, alongside related metrics such as gender-wise turnover rate and gender pay parity (median remuneration ratio). This data must be sourced from the HR/payroll system, not estimated, and should be reconcilable to statutory filings such as PF/ESI records where headcount also appears.

Yes. Section C, under the employee wellbeing principle, requires disclosure of complaints filed under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 (POSH Act) — including complaints received, resolved, and pending as at the end of the reporting period — along with confirmation of the Internal Committee's constitution as required by the POSH Act.

Openness of business is one of the nine BRSR Core ESG attributes, generally covering disclosures such as the concentration of purchases and sales with trading houses, dealers, and related parties, and the extent of the company's engagement with small and marginal producers or local suppliers — intended to give stakeholders visibility into supply-chain concentration and transparency of business relationships.

Environmental KPIs (energy, water, waste, emissions) must typically be consolidated across all operational sites and, where applicable, subsidiaries within the reporting boundary. We first confirm the reporting boundary (standalone entity, or consolidated group, consistent with how the company defines its BRSR reporting scope), then build a site-level data template that rolls up into the enterprise figure, with each site's contribution separately retained as assurance-ready workpapers rather than only presenting a single blended total.

'Comply-or-explain' means a company must either comply with a disclosure requirement or explain why it has not, rather than compliance being strictly enforced with penalties. SEBI initially introduced full BRSR reporting on this basis for a transitional period for the top 1,000 companies before it became fully mandatory. Certain newer elements of the BRSR framework — such as aspects of value-chain reporting — have similarly been phased in on a comply-or-explain basis before moving toward a fully mandatory requirement; companies should check the current status of each specific disclosure element for the applicable reporting year, since SEBI has progressively tightened several of these requirements over successive cycles.

Yes, in principle — many ESG-linked financing instruments reference specific sustainability KPIs (energy intensity, emissions intensity, diversity ratios) as performance targets, and a company's own BRSR/BRSR Core disclosures are a natural, already-assured (where applicable) data source for lender or bond-investor reporting. Using consistent, independently assured figures across both the BRSR filing and the financing covenant reporting avoids the risk of reporting different numbers for the same metric to different audiences.

A statutory financial audit under the Companies Act results in an opinion on whether financial statements give a true and fair view, governed by the Standards on Auditing. BRSR Core assurance is a separate, distinct assurance engagement focused specifically on the designated non-financial ESG KPIs, performed under the assurance standards applicable to non-financial/sustainability information, and results in its own assurance report filed alongside the BRSR. The two engagements, while both bringing audit-grade rigour, are scoped, standard-governed, and reported entirely separately.

A qualified opinion means the assurance provider found that one or more KPIs could not be assured without exception — due to a scope limitation, a data gap, or a material misstatement identified during the engagement. Because the assurance report is filed with stock exchanges alongside the BRSR, a qualification becomes a matter of public record, and can draw attention from investors, proxy advisory firms, and potentially SEBI, particularly if the qualification recurs across multiple reporting cycles without remediation.

Where an Indian listed company's BRSR reporting boundary includes a UAE subsidiary or operational site, that site's environmental and workforce data must be captured and consolidated on the same basis as Indian sites. Our Dubai office coordinates local data collection — energy and water consumption records, WPS payroll and workforce data, and any UAE-specific ESG or Corporate Tax filings — directly with the India-based BRSR preparation team, so the group-level BRSR is consolidated coherently rather than assembled from a disconnected overseas data request.

The BRSR filing obligation itself sits with the listed entity. However, where the listed entity's BRSR reporting boundary is defined on a consolidated basis (covering subsidiaries), data from unlisted subsidiaries must still be captured and rolled into the parent's disclosure for the KPIs where a consolidated boundary applies — meaning the unlisted subsidiary effectively participates in the data-collection process even though it does not file its own separate BRSR.

There is no single statutorily prescribed owner, but effective practice generally places overall coordination with a designated ESG/Sustainability function or a senior finance/company secretarial owner, with named data contributors from HR, EHS (Environment, Health & Safety), procurement, CSR, and legal/compliance — each responsible for their principle-specific data. The CFO or Company Secretary typically signs off on the final report before Board presentation, given its status as a regulatory filing.

PNPC scopes BRSR preparation and BRSR Core assurance as separate, clearly defined engagements with a fixed, agreed fee confirmed in writing before work begins. Fee drivers include the number of operational sites/subsidiaries in the reporting boundary, whether this is a first-time or repeat cycle, whether value-chain data collection is in scope, and whether reasonable assurance is required this cycle. We do not price BRSR as an undifferentiated add-on to statutory audit — it is scoped on its own merits.

Ideally, at the start of the financial year — not after year-end. Several BRSR Core KPIs (energy consumption, water use, safety incidents, emissions) are naturally cumulative across twelve months, and retrospectively reconstructing a full year of consistent, source-traceable data at year-end is materially harder and less reliable than capturing it in real time through monthly or quarterly internal tracking.

If a material error is identified after filing, the company should assess it through its usual disclosure-correction and materiality lens (similar in principle to correcting other regulatory filings), which may involve restating the figure in the next cycle with an explanatory note, or in more significant cases, engaging with the stock exchange on the appropriate corrective disclosure. The specific mechanism depends on the nature and materiality of the error — this is a scenario best discussed directly with your CA and company secretarial advisor rather than assumed.

Scope 3 emissions (indirect emissions occurring in a company's value chain, both upstream and downstream) are not uniformly a mandatory BRSR Core KPI for every reporting company today, but disclosure expectations in this area are moving quickly — driven by investor pressure, international frameworks like the ISSB standards, and SEBI's own value-chain reporting extension. Companies with a mature BRSR programme increasingly disclose Scope 3 voluntarily, at least for the most material categories (e.g., purchased goods and services, or downstream product use), even where not yet a strict mandatory requirement.

We document the full data architecture — source systems, calculation methodologies, emission factors used, and named responsibilities — as a standing internal reference document (not just embedded in an individual's working files), specifically so that a change in the ESG team, HR head, or EHS manager does not mean the next reporting cycle starts from scratch trying to reconstruct 'how we calculated this last year.'

A boutique ESG consultancy may bring strong sustainability-domain knowledge but typically cannot also provide independent assurance, statutory audit, tax, CSR-2 filing coordination, and the broader compliance calendar your listed entity already relies on a CA firm for. PNPC brings CA-firm assurance discipline — evidence-based, source-traceable, standards-governed — to BRSR preparation, and can either provide independent BRSR Core assurance directly (with appropriate independence safeguards) or coordinate cleanly with a separate assurance provider, all while keeping your BRSR data internally consistent with your audited financials, MGT-7, and CSR-2 filings.