BRSR Core for Top 1000 Listed: 9 Evidence Gaps to Close Before 31 March 2027

From 1 April 2026, SEBI's BRSR Core reasonable assurance becomes mandatory for the top 1000 listed entities by market capitalisation. The reporting period is FY 2026-27, with the first annual report under the new obligation due around the August - September 2027 AGM season. Assurance work begins in April-May 2027 and runs through to FY-end disclosure.

For finance teams in the newly-covered entities (those ranked 501-1000 by market cap on 31 March 2026), this is roughly 12 months to set up the data systems — not the assurance engagement itself, but the underlying evidence that the assurance provider will test.

This post walks through the 9 BRSR Core KPIs from the finance team's perspective — what evidence the assurance provider will ask for, where most companies don't have it ready, and what to set up in the next 12 months.

If you're a CA firm planning to provide BRSR Core assurance, see also the BRSR Core Assurance Playbook for the practitioner-side view.

---

Why this is harder than it looks

The full BRSR has ~1,000+ data points. BRSR Core is a 9-KPI subset that requires reasonable assurance (positive-form opinion, higher rigour than limited assurance).

The 9 KPIs are deceptively simple as questions: "What was your GHG emissions intensity?" "What was your water consumption?" "What's your gender diversity?"

But the underlying data infrastructure most companies have is built for internal management reporting, not for third-party reasonable assurance. The gap shows up in 9 specific places:

---

Gap 1: GHG emissions intensity — emission factors and meter calibration

KPI: tCO₂e per ₹ crore of turnover (Scope 1 + Scope 2)

What finance teams have: Annual electricity bill (kWh × emission factor) summed for the year. Fuel purchase amounts.

What the assurance provider asks for:

1. Source data — sub-meter readings, fuel consumption records reconciled to purchases, not just bills
2. Emission factors used — which CEA grid factor (year and version), which IPCC AR (4, 5, or 6) for fuels
3. Calibration certificates — for emission monitoring instruments
4. Reconciliation — physical output / turnover used as denominator against audited financials

Most companies fail on point 2 — using the wrong year's CEA emission factor (the grid factor changes annually as the energy mix shifts). And on point 1 — relying on aggregate bills rather than sub-meter readings (which fail when the bill includes consumption of an unrelated activity).

Fix in 12 months: deploy sub-meters per significant consumption point. Document the CEA factor version used annually. Establish an emissions log reconciled monthly.

---

Gap 2: Water consumption — withdrawal vs consumption confusion

KPI: KL withdrawn per ₹ crore of turnover

What finance teams have: Municipal water bill amounts summed for the year.

What the assurance provider asks for:

1. Total water withdrawn from ALL sources — municipal, borewell, tanker, surface water, rainwater harvested, recycled water
2. Withdrawal sub-metering — not just billed quantity but actual extracted volume
3. CGWA / state pollution control board permissions for borewells
4. Segregation of withdrawn vs consumed vs discharged vs recycled

The first error finance teams make: confusing "consumption" (a smaller number) with "withdrawal" (a larger number including recycled). BRSR Core requires withdrawal.

The second: ignoring tankers. A factory with municipal supply + emergency tanker deliveries often forgets to include the tanker quantity. The assurance provider will ask for the daily tanker logbook.

Fix in 12 months: install bulk withdrawal meters at all sources. Maintain a daily / weekly withdrawal log. Reconcile to bills.

---

Gap 3: Waste recycled — definitions and EPR double-counting

KPI: % of waste recycled or recovered

What finance teams have: Hazardous waste manifest data from the HWMR Form 10 returns.

What the assurance provider asks for:

1. All waste streams — hazardous + non-hazardous + plastic packaging (under EPR)
2. Recycled vs recovered vs disposed — distinct categories under HWMR 2016
3. Authorised recycler invoices + co-processing certificates for energy recovery
4. EPR credits — purchased separately from actual recycled volumes; can't double-count

The double-counting trap: a company purchases EPR credits to fulfill plastic packaging obligations under the Plastic Waste Management Rules, AND counts its own waste sent to recyclers. The two are different — credits are paper compliance; physical recycling is operational. The disclosure must keep them separate.

Fix in 12 months: maintain separate registers for hazardous, non-hazardous, and EPR. Get invoices stamped with destination (recycler / co-processor / disposal).

---

Gap 4: Renewable energy — REC vs PPA distinction

KPI: % of renewable energy in total energy consumption

What finance teams have: Solar rooftop generation, RE PPA volumes, REC purchases.

What the assurance provider asks for:

1. Consumption-side evidence — not just the RE source quantity, but that it was actually consumed in the period
2. PPA contracted quantity vs delivered quantity — delivery shortfalls reduce the RE %
3. REC certificate details — registry number, vintage year, retired status
4. Boundary — fuels (Scope 1 territory) vs electricity (Scope 2). RE % typically refers to electricity-side only, not total energy.

The most common error: claiming PPA contracted quantity rather than actually-delivered quantity. The 12-month fix is to invoice-match every PPA delivery and reconcile to RE generation certificates.

---

Gap 5: Energy intensity — captive consumption and denominator consistency

KPI: GJ per ₹ crore of turnover

What finance teams have: Electricity + fuel costs from the GL.

What the assurance provider asks for:

1. Energy in GJ, not ₹ — physical quantities (kWh × 3.6e-3 for electricity, joules × calorific value for fuels)
2. Captive consumption included — captive power plant electricity that doesn't go to the grid
3. Cross-period consistency — same denominator each year (e.g., net sales vs gross revenue)
4. Adjustments for activity changes — if new plant commissioned mid-year, document the period of consumption

Captive plant consumption is the recurring miss. Companies with their own captive power often track the plant operations separately from external grid bills, and the BRSR submission ends up incomplete.

---

Gap 6: Pollutant discharge — OCEMS vs lab sampling reconciliation

KPI: % within CPCB / SPCB consent limits

What finance teams have: Periodic ETP / STP outlet sampling reports.

What the assurance provider asks for:

1. OCEMS data (Online Continuous Emission Monitoring System) uploaded to CPCB / SPCB portal for major pollutants
2. Lab sampling reports from NABL-accredited labs as reasonableness check
3. Reconciliation between OCEMS and lab data — they should broadly match
4. Exceedance notifications to SPCB if any breaches occurred

If the OCEMS and lab data don't reconcile, the assurance provider treats this as a control gap. The investigation goes to which is more reliable and why.

The 12-month fix is to have a documented reconciliation process between OCEMS and sampling lab data, with explained variances.

---

Gap 7: Gender diversity — permanent vs non-permanent + contract workers

KPI: % female employees and workers, by category

What HR teams have: Permanent employee count from the HR master.

What the assurance provider asks for:

1. Both permanent AND non-permanent employees (contract, fixed-term, intern)
2. Workers (manufacturing / operational) separate from employees — typically a different population
3. Reconciliation with PF / ESI registrations for permanent staff
4. Manpower agency contracts for contract workers
5. Differently-Abled disclosure — separate principle in BRSR

The contract-worker miss is the most common: a factory has 200 permanent + 800 contract workers. The HR master shows 200. The BRSR Core gender diversity reported on 200 is meaningless and the assurance provider will reject.

Fix in 12 months: build a complete workforce register including all contract workers via manpower agencies. Track gender across the full population.

---

Gap 8: Gender pay parity — median, not mean

KPI: Median female remuneration vs median male remuneration, by category

What payroll teams have: Sum of compensation, average compensation per employee.

What the assurance provider asks for:

1. Median — not mean. BRSR Core specifies median.
2. By category — KMP, BOD, senior management, middle, junior, workers — each with own median
3. Variable pay included — bonuses, commissions, ESOPs (at fair value)
4. Reconciliation with audited employee benefits expense

Using mean instead of median is the most common reporting error. Median is less sensitive to outliers (high-paid executives) and gives a more honest distribution measure. The assurance provider can re-compute from payroll data and will catch the discrepancy.

---

Gap 9: CSR + employee wellness spend — mandatory vs voluntary

KPI: CSR ₹ + wellness ₹ as ratios

What finance teams have: Section 135 mandatory CSR amount.

What the assurance provider asks for:

1. Section 135 CSR as per the CSR Section 135 Calculator
2. Schedule VII activity-wise breakdown with ongoing project distinction
3. CSR-2 disclosure filing confirmation
4. Employee wellness — separately, covering insurance premiums, health check vendor costs, training, women safety initiatives, mental health programs

Wellness is typically tracked across multiple GL accounts. Aggregating it into one consolidated number takes work. The assurance provider expects the reconciliation showing the components.

---

What to do in the next 12 months

For finance / sustainability teams in entities ranked 501-1000 by market cap (the new FY 2026-27 cohort):

Now - June 2026 (T-12 to T-10):

• Confirm BRSR Core applicability (market cap as on 31 March 2026)
• Appoint internal owner (typically Group Financial Controller or Chief Sustainability Officer)
• Engage an assurance provider for FY 2026-27 (not the statutory auditor — Section 144 prohibition for the same firm)
• Run a gap-analysis against the 9 KPIs above

July - September 2026 (T-9 to T-7):

• Install sub-meters for water and energy
• Set up the gender / workforce register including contract workers
• Document emission factor methodology
• Maintain pollution OCEMS-to-lab reconciliation

October 2026 - March 2027 (T-6 to T-1):

• Run a dry-run report for half-year data (April-September 2026)
• Engage the assurance provider for a pre-engagement walkthrough
• Resolve gaps surfaced by the dry-run

April - August 2027 (live):

• Finalise FY 2026-27 data
• Assurance engagement Q1-Q2 of FY 2027-28
• Reasonable assurance report issued before AGM

---

How CORAA helps

For CA firms providing BRSR Core assurance, CORAA's Reconciliation module accepts the underlying evidence pack — meter readings, vendor invoices, payroll exports, lab reports — and generates calculation working papers per KPI with reconciliation against the audited financial statements. The denominator reconciliation (turnover, payroll, etc.) ties directly to the audited Schedule III line items.

For the assurance engagement workflow, the BRSR Core Assurance Playbook walks through the 10-step engagement-acceptance checklist anchored in SAE 3000 + SAE 3410.

For the substance of the standards (SAE 3000, SAE 3410, ISSA 5000), the playbook also covers the standards stack. ICAI is expected to issue a specific Implementation Guide on BRSR Core assurance over 2026, which will become the authoritative reference.

---

Bottom line

BRSR Core for top 1000 listed is not a documentation exercise — it's a data-systems readiness exercise. The 9 KPI evidence gaps above are not theoretical; they're the gaps assurance providers consistently see in companies new to mandatory assurance. The 12-month runway to FY 2026-27 reporting is enough — but only if work starts now.

For CFOs and Group Financial Controllers in the 501-1000 cohort, the action items are:

1. Confirm applicability — market cap on 31 March 2026
2. Run the 9-KPI gap analysis
3. Install instrumentation (sub-meters, register systems) by Q3 2026
4. Engage assurance provider by Q1 2027
5. First reasonable assurance report by AGM 2027

For CA firms positioning to provide BRSR Core assurance, see the BRSR Core Assurance Playbook. The market opportunity is roughly 750 newly-covered entities (top 1000 minus top 250 already covered) — a substantial new service line for firms with the capability stack.

Try CORAA → Reconciliation and Working Papers modules accept BRSR Core evidence packs and generate KPI-level working papers. India-hosted, audit-grade evidence trail. Talk to us · Browse all 23 calculators · BRSR Core Playbook.