Environmental Auditing

Your company produces environmental data every day — fuel, electricity, water, waste — but that data lives in silos. Finance has one version, operations another, compliance a third. When you file Form V in September, prepare BRSR for SEBI, build ISO 14001, or answer an EU customer's CSRD questionnaire, those silos create chaos.

Environmental auditing is the bridge. It starts with one consistent data layer — your actual operations — then serves it to every audience: regulator (Form V), stock exchange (BRSR Core, reasonable assurance ready), certifier (ISO 14001), investor (TCFD, IFRS S2), supply chain (CSRD, EcoVadis). One source. Multiple reports.

At a Glance

• Form V & SPCB Compliance: Annual statutory filing by 30 September covering water, raw materials, pollution, waste treatment; filed under Rule 14, Environment (Protection) Rules 1986.
• BRSR Core Assurance: GHG intensity, water, waste, energy metrics prepared under ISAE 3000 / 3410 standard for top 250 listed entities' reasonable-assurance requirement.
• ISO 14001:2015 EMS: Environmental management system covering context, leadership, planning, operation, performance evaluation; documented, internal audit included; certification-ready.
• GHG Scope 1 / 2 / 3 Inventory: GHG Protocol-aligned covering direct emissions (own boilers, vehicles), indirect (purchased electricity), and all other emissions (supply chain, travel, products).
• TCFD / IFRS S2 Climate Disclosure: Climate governance, scenario analysis (1.5°C / 2°C paths), transition and physical risk assessment; disclosure framework aligned to ISSB standards.
• CSRD & EU Supplier Readiness: ESRS E1-E5 double materiality assessment; supplier data questionnaire response to lock Indian entity into EU value chain.

What's New for FY 2026-27

The regulatory landscape for environmental reporting is tightening. Here's what has changed for your audit cycle.

• IFRS S2 Mandatory for Listed Entities (from 2025–26): ISSB's IFRS S2 Climate standard replaces ad-hoc TCFD; now a formal disclosure requirement for listed companies globally; India aligning via SEBI issuance.
• BRSR Core Scope Expanded; Assurance Mandate Tightens: Top 250 listed entities now require full reasonable assurance; top 1,000 move from optional to limited assurance or glide path; KPI definitions refined for Scope 3.
• CSRD Trickles to Indian Suppliers; EU Cascading Begins: EU parents now actively cascading ESRS E1-E5 questionnaires to non-EU suppliers; Indian entities face de-listing risk without Scope 3 data and value-chain control maps.
• GHG Protocol 2024 Refinements: Updated guidance on equity-share ownership thresholds, Scope 3 category boundaries, and renewable energy attribution; stricter data traceability required.

Why Environmental Auditing Matters

• Regulatory Risk — ₹50,000 to ₹5 Crore Penalty: Late Form V filing, misstatement, or inadequate waste management invites SPCB compounding, show-cause, and criminal liability; audit-ready evidence is your defence.
• Stock Exchange Pressure (SEBI BRSR): Listed entities cannot skip BRSR Core; unreliable KPIs trigger delisting queries, investor lawsuits, and credit rating downgrades; reasonable assurance is now non-negotiable for top 250.
• Lender & Investor Scrutiny: Banks, PE funds, and ESG-screening funds demand audited ESG data; unverified GHG, water, waste metrics are red flags; assurance report unlocks financing.
• EU Supply Chain Lock-In: Your EU customer will not renew procurement contracts without CSRD-compliant Scope 3 data; ESRS questionnaires are now standard; non-compliance means de-listing.
• ISO 14001 Certification Value: Certification signals to regulators, lenders, and certifiers that your EMS is credible; many insurers now require ISO 14001 for environmental liability coverage.
• Brand & License-to-Operate: Sustainability reports, EcoVadis scorecards, and third-party assurance protect your brand reputation; audited data prevents activist campaigns and NGO litigation.

How It Actually Works

Environmental auditing is a six-step journey from scattered data to auditable, multi-audience reporting. Here's the roadmap.

Step 1: Scoping & Audience Mapping

First, we map every audience your data will serve: regulator (Form V, SPCB), stock exchange (BRSR Core), certifier (ISO 14001), investor (TCFD, IFRS S2), customer (CSRD), and voluntary (GRI, EcoVadis). Each has different KPIs, timelines, and thresholds. We create a single KPI map — one source of truth — and assign responsibility for each data stream.

Step 2: Data Architecture & Emission Factors

Next, we define the organisational boundary (equity-owned, operated, financed), select the base year, and lock the emission factors: CEA grid (for Indian electricity), IPCC defaults (fuel), DEFRA (waste), WRI supply-chain tools (Scope 3). Activity data sources are validated — utility bills, procurement records, maintenance logs, travel receipts — and mapped to the emission calculation waterfall.

Step 3: Site Visits & Internal Control Testing

Our team conducts site visits to witness operations, inspect meters (CEMS, water flow), sample fuel delivery documentation, and trace hazardous waste manifests. We test the controls that underpin your KPI calculations — reconciliation of activity data, segregation of duties in approval, and exception handling. Non-conformities are documented; corrective actions are tracked to closure.

Step 4: Form V & Statutory Returns

Form V (Environment Statement) is filed by 30 September under Rule 14 of the Environment (Protection) Rules 1986. It covers water consumption, raw material usage, pollution generated, waste classification, treatment facilities, and remedial measures. SPCB inspection readiness is verified; CEMS / CEQMS data is validated; monthly / quarterly returns are reconciled to the audit trail.

Step 5: Assurance Engagement & Evidence File

If your company is in SEBI's top 250 (reasonable assurance), we prepare the evidence file: GHG inventory, Scope 3 screening, control documentation, audit trail, sample testing. The independent assurance provider's team reviews our work, performs additional testing, and issues their report under ISAE 3000 / 3410. We coordinate all walk-throughs and query responses.

Step 6: Disclosure & Multi-Platform Reporting

With audit-ready KPIs in hand, BRSR Core is uploaded to BSE / NSE, ISO 14001 certification audit is scheduled, TCFD / IFRS S2 disclosures are drafted for the annual report, GRI content index is mapped, and EcoVadis or CSRD questionnaire responses are compiled. One data layer, six outputs.

A Real Example: Mid-Size Electronics Manufacturer

Consider a 200-person electronics components factory in Gujarat, ₹50 Crore annual turnover, holding CFE/CFO and hazardous waste authorisation.

• The Old Approach: Finance reported power cost (₹2.5 Crore/year) to the CFO; operations logged diesel in a spreadsheet; EHS filled Form V by memory. BRSR KPIs used inconsistent emission factors; ISO 14001 'documentation' existed but operations didn't follow it.
• The Data Audit Found: Power consumption: 8.5 million kWh/year at CEA grid factor 0.71 kg CO2e/kWh = 6,035 tCO2e Scope 2. Diesel: 50,000 liters/year at 2.68 kg CO2e/L = 134 tCO2e Scope 1. Scope 3 (supplier transport, employee commute, business travel, waste treatment): 1,200 tCO2e. Water: 180 kL/month (2.16 ML/year) = 10.8 kL intensity per ₹1 Crore turnover.
• BRSR Core Reported: Scope 1+2 = 6,169 tCO2e; intensity = 123.4 kg CO2e per ₹lakh turnover. Water intensity = 432 kL per ₹Crore. Waste intensity = 0.4 tonnes per ₹Crore. Assurance provider signed off; BSE upload completed. ISO 14001 audit found energy and water controls in place; objectives set (15% intensity reduction by 2027–28).

This company now has auditable environmental data serving regulators, stock exchange, certifier, and lenders — all from one verified source. The audit cost (₹12,000) paid for itself in avoided penalties and unlocked supplier contracts.

After Filing: What Happens Next

Form V is filed, BRSR is uploaded, ISO 14001 audit is scheduled. But the work doesn't stop there.

Over the next 12 months, the regulatory landscape tightens: SPCB may conduct a follow-up inspection; SEBI may query the BRSR submission if KPIs are outliers compared to peers; lenders may request a sustainability scorecard update; your EU customer will send a CSRD / EcoVadis refresh questionnaire. We support all of these touchpoints.

Additionally, internal operations must lock in the improvements: Scope 3 emissions from commuting can be cut if you shift to electric buses; water intensity drops if you upgrade to closed-loop cooling; waste classification must be auditable daily, not once a year. The audit is the baseline; the annual improvement cycle is the business model.

Where It Goes Wrong

• Mixing Up Scope 2 Methods (Location-Based vs. Market-Based): Many companies report location-based Scope 2 (grid average) for BRSR but market-based (contract / PPA) for internal reporting, creating reconciliation chaos. Assurance provider flags the inconsistency; data credibility drops. Solution: lock one method, disclose both in notes if required.
• Incomplete Scope 3 Screening: Companies assume Scope 3 is 'too hard' and omit it, then BRSR Reasonable Assurance fails because Scope 3 data is mandatory for top 250. Others include 15 categories but with zero traceability — suppliers don't respond to questionnaires. Solution: conduct a proper Scope 3 materiality screen; prioritize 3–5 high-impact categories with traceable data.
• Form V Misstatement: Waste Classification Error: Operations reports 50 tonnes/year 'non-hazardous' waste, but auditor finds e-waste and PCB trimmings should be classified as hazardous under e-waste rules 2016. Form V filed with wrong data; SPCB compounding notice arrives. Solution: waste audit (third party) before Form V filing; segregation and tracking system in place.
• ISO 14001 'Paperwork Only' Trap: EMS manual is written by an external consultant, filed away, and never updated. Internal audit is a checkbox; management review is a one-hour meeting. Certification auditor finds procedures don't match reality; CAR (corrective action requests) issued; certification delayed. Solution: EMS owned by operations, not just compliance; monthly procedures review; operational metrics drive objectives.
• GHG Inventory Base Year Inconsistency: Company selected 2016 as base year because data existed, but 2016 was a plant expansion year; 2018–19 was more representative. Year-on-year comparisons are misleading; assurance provider questions the choice. Solution: base year should reflect pre-significant change, disclosed transparently, rarely changed (only for merger or major reorganisation).
• EcoVadis or CSRD Response with Unverified Claims: Company self-rates environmental controls as 'excellent' without third-party verification; EcoVadis auditor or EU customer follows up and finds controls are undocumented or inconsistent. Score tanks; contract risk increases. Solution: use BRSR assurance report and ISO 14001 certification as EcoVadis / CSRD backing.

What You Receive at the End

• Audited GHG inventory (Scope 1, 2, 3) with base year, organisational boundary, and emission factors locked
• Form V Environment Statement (Rule 14 compliant, filed with SPCB by 30 September)
• BRSR Core KPI calculations (GHG intensity, water, waste, energy per target unit) ready for SEBI submission
• ISO 14001:2015 Environmental Management System manual and documented information (context, leadership, planning, operation, performance evaluation, improvement)
• TCFD / IFRS S2 climate governance & scenario analysis summary (1.5°C, 2°C pathways; transition + physical risk metrics)
• CSRD / ESRS compliance checklist (E1-E5 double materiality, value-chain data flows mapped)
• Internal audit report with evidence file (site visit photos, control testing, non-conformities, closure evidence)
• Assurance readiness certificate or third-party assurance report (ISAE 3000 / 3410 format, suitable for top 250 SEBI filing)
• Annual sustainability report template (BRSR Core, GRI, TCFD sections pre-populated; EcoVadis scorecard response draft)
• Transition roadmap for FY 2027-28 (emissions reduction targets, water / waste improvement initiatives, regulatory change tracker)

How to Get Started

Contact us with your company profile: industry, size, annual turnover, locations, whether you are listed, and whether you hold a CFE / CFO or hazardous waste authorisation. We will send you a scoping questionnaire (10 questions, 15 minutes to complete) covering current data practices, regulatory status, and reporting audiences. Once returned, we will schedule a 90-minute kick-off call with your CFO, operations head, and EHS manager to walk the timeline, deliverables, and evidence requirements.

We work on a monthly retainer basis during the audit phase (typically 4–8 weeks for data collection and control testing), then transition to milestones: Form V filing, BRSR submission, ISO 14001 certification coordination, and assurance engagement. You retain full ownership of your data and audit trail; we act as your auditor and advisor. Payment is due in three instalments: 40% on project start, 40% on Form V filing, and 20% on final deliverable hand-off.