AASB S2 Group 2 Climate Reporting Assurance in Australia 2026: What Businesses Must Know

From 1 July 2026, a new wave of Australian businesses became subject to mandatory climate-related financial reporting under the Corporations Act 2001. These Group 2 entities — mid-to-large organisations meeting specific size thresholds — must now produce sustainability reports aligned with AASB S2 Climate-related Disclosures, and those reports must be independently assured from the very first year.

For directors, CFOs, and audit committee members, this is not a future obligation to plan for — it is a current compliance requirement with full legal liability attached. Understanding what assurance is required, who can provide it, and how to choose the right auditor is now a board-level priority.

Understanding the AASB S2 Group 2 Reporting Regime

Australia's mandatory climate disclosure framework is structured in three groups, phased by entity size. Group 1 (the largest entities) commenced reporting from 1 January 2025. Group 2 entities — those meeting at least two of three criteria — began their first mandatory reporting period on 1 July 2026.

The three Group 2 size thresholds are: consolidated revenue of $200 million or more, consolidated gross assets of $500 million or more, or 250 or more employees. If your organisation meets two of these three criteria, you are in scope.

AASB S2 requires disclosure across four pillars: Governance (how the board oversees climate risk), Strategy (how climate risk affects the business model), Risk Management (how climate risks are identified and managed), and Metrics and Targets (including Scope 1, 2, and eventually Scope 3 greenhouse gas emissions).

Group 2 entities must lodge their sustainability report alongside their annual financial report with ASIC. The report carries full legal liability for governance disclosures and Scope 1 and 2 emissions from the first year. A three-year modified liability period applies to forward-looking statements, scenario analysis, and Scope 3 disclosures.

Assurance Requirements Under ASSA 5000 and ASSA 5010

Unlike voluntary sustainability reporting, mandatory AASB S2 reports require external assurance from the first reporting period. The Australian Auditing and Assurance Standards Board (AUASB) has issued two standards that govern this process.

ASSA 5000: General Requirements for Sustainability Assurance

ASSA 5000 is the overarching standard for sustainability assurance engagements in Australia. It sets out the practitioner's responsibilities for planning, evidence gathering, and reporting on sustainability information. For Group 2 entities in their first year (FY27), ASSA 5000 requires limited assurance over Scope 1 and 2 emissions, governance disclosures, and selected strategy components.

Limited assurance is a lower level of assurance than the reasonable assurance provided on financial statements. The auditor performs analytical procedures and inquiries rather than the full substantive testing required for reasonable assurance. The conclusion is expressed in negative form: "nothing has come to our attention to suggest that the disclosures are not prepared in accordance with AASB S2."

ASSA 5010: Climate-Related Financial Disclosures

ASSA 5010 is a specific standard for climate-related financial disclosures, providing additional guidance on assuring the quantitative and qualitative information required by AASB S2. It addresses the unique challenges of climate assurance, including the use of estimates, scenario analysis, and forward-looking information.

The assurance scope expands progressively. In years two and three, assurance extends to all AASB S2 disclosures. From 1 July 2030, Group 2 entities will be required to obtain full reasonable assurance over all climate-related financial disclosures — the same level of rigour applied to financial statements.

Key Considerations When Choosing a Climate Assurance Auditor

Not all auditors are equipped to provide AASB S2 assurance. The combination of financial audit expertise, sustainability knowledge, and climate science literacy required is genuinely specialised. When selecting an auditor for your climate disclosures, consider the following.

• ASIC registration and independence — The assurance provider must be an ASIC-registered company auditor (RCA) or an appropriately qualified assurance practitioner. Independence requirements under APES 110 apply equally to sustainability assurance.
• ASSA 5000 and ASSA 5010 competence — Ask specifically whether the firm has trained practitioners in these standards and has completed AASB S2 assurance engagements for Group 1 entities.
• Integration with financial audit — ASIC expects the sustainability assurance to be integrated with the financial audit where possible. Using the same auditor for both reduces duplication and ensures consistency between financial and sustainability disclosures.
• Emissions data verification capability — Scope 1 and 2 assurance requires verification of underlying emissions data, including utility bills, fuel records, and activity data. The auditor must have the tools and expertise to assess this evidence.
• Sector-specific experience — Climate risk and emissions profiles vary significantly by industry. An auditor with experience in your sector will understand the relevant emission factors, regulatory requirements, and disclosure expectations.

Common Mistakes and Red Flags

ASIC's early observations from Group 1 reports have identified several recurring problems that Group 2 entities should actively avoid.

• Vague governance disclosures — ASIC expects specific, named governance structures (e.g., "the Board Risk Committee reviews climate risk quarterly") rather than generic statements about board oversight. Vague disclosures attract regulatory scrutiny.
• Disclaimers that undermine the report — Using broad disclaimers that effectively negate the statutory purpose of the sustainability report is not acceptable. ASIC has warned that such disclaimers may constitute misleading conduct.
• Inadequate evidence trails for emissions — Assurance over Scope 1 and 2 emissions requires robust underlying records. Entities that cannot produce utility bills, fuel logs, and activity data for the reporting period will face qualified assurance opinions.
• Treating assurance as a tick-box exercise — Engaging an auditor at the last minute without adequate preparation time is a common mistake. Climate assurance requires significant lead time for evidence gathering and auditor access.
• Ignoring Scope 3 planning — While Scope 3 emissions carry a one-year grace period for Group 2 entities, the data collection and supply chain engagement required for Scope 3 reporting takes years to establish. Starting now is essential.
• Selecting an auditor without ASSA 5000 experience — Engaging a general auditor who has not been trained in ASSA 5000 and ASSA 5010 creates significant risk of a non-compliant assurance opinion.

Australian Regulatory Context

The mandatory climate reporting regime is administered by ASIC under the Corporations Act 2001, as amended by the Treasury Laws Amendment (Financial Market Infrastructure and Other Measures) Act 2024. ASIC has issued Regulatory Guide 280 (RG 280) to assist entities with their obligations, and has signalled active enforcement of the regime.

The Australian Accounting Standards Board (AASB) issued AASB S2 as the Australian equivalent of the IFRS S2 Climate-related Disclosures standard, with modifications for the Australian context. The AUASB issued ASSA 5000 and ASSA 5010 to govern the assurance process.

Directors face personal liability for sustainability reports under the same framework that applies to financial statements. A director who signs off on a materially misleading sustainability report may face civil penalties, disqualification, and reputational consequences. The three-year modified liability period for forward-looking statements provides some protection, but governance and emissions disclosures carry full liability from day one.

ASIC has also indicated that it will monitor the quality of assurance opinions and may take action against assurance providers who fail to meet the standards. This creates a strong incentive for entities to engage auditors with genuine ASSA 5000 competence rather than those who are learning on the job.

Practical Checklist for Group 2 Entities

If your organisation is a Group 2 entity that commenced mandatory reporting on 1 July 2026, the following checklist will help you assess your readiness.

• Confirm your Group 2 status by checking the three size thresholds against your most recent financial statements.
• Engage an ASIC-registered auditor with demonstrated ASSA 5000 and ASSA 5010 competence as early as possible in the reporting period.
• Establish robust data collection processes for Scope 1 and 2 emissions, including utility bills, fuel records, and refrigerant logs.
• Document your governance structures for climate risk oversight, naming specific committees, roles, and review frequencies.
• Prepare a climate risk assessment covering physical risks (floods, heat, drought) and transition risks (carbon pricing, regulatory change, technology disruption).
• Begin supply chain engagement for Scope 3 data collection, even though Scope 3 reporting is not mandatory until FY28.
• Review ASIC's RG 280 and early Group 1 observations to understand what ASIC considers adequate disclosure.
• Ensure your sustainability report is lodged alongside your annual financial report within the required timeframe.

How MyMoney® Can Help

Finding an auditor with genuine AASB S2 and ASSA 5000 expertise is not straightforward. The pool of practitioners with both financial audit credentials and climate assurance experience is limited, and demand is growing rapidly as Group 2 entities enter the regime.

MyMoney® connects Australian businesses with qualified auditors who have the credentials, experience, and sector knowledge to deliver compliant AASB S2 assurance. Whether you need a first-year limited assurance engagement or are planning for the transition to reasonable assurance, our marketplace makes it easy to find the right professional.

Post a Brief to describe your climate assurance requirements and receive competing proposals from vetted auditors. Or Browse Auditors to explore profiles, qualifications, and client reviews. The right auditor will not just sign your report — they will help you build the evidence and governance structures that make your disclosures defensible.