The Impact
Verification Gap

The 250 largest companies by revenue (G250) have substantially increased sustainability disclosure since 2005. Verification of that disclosure has grown too, but the type of verification matters. Most is limited assurance, a lower-level review engagement. Fewer than 5% of G250 companies receive any reasonable-grade assurance, the standard equivalent to a financial audit opinion.

Most analyses stop at whether a company receives "any" assurance. The more important question is what kind. Limited assurance is a review-level engagement: plausible, consistent with the data, but unverified. Reasonable assurance follows the same evidentiary standards as a financial audit opinion. One means a company says its data looks consistent. The other means an auditor has certified it is correct.

The SEC launched its Climate and ESG Task Force in March 2021. Enforcement escalated from sub-$2 million penalties against fund managers to a $19 million ESG penalty against DWS in 2023, then $17.5 million against Invesco in late 2024. Frankfurt prosecutors concluded their DWS probe in April 2025 with a separate €25 million fine. State attorneys general filed lawsuits against JBS and ExxonMobil. The cases share a pattern: sustainability claims made without the data infrastructure to support them.

Since March 2025, US federal ESG enforcement has effectively paused. The SEC voted to end defense of its Climate Disclosure Rule and has withdrawn several related proposals. European prosecutors and state attorneys general continue, but the federal pipeline has narrowed.

In early 2024 it looked like reasonable-grade assurance would arrive on a predictable schedule. Reading the 2026 regulatory landscape tells a different story. The EU's 2025 Omnibus package removed the CSRD obligation to transition from limited to reasonable assurance, leaving CSRD at limited indefinitely. The SEC voted to end defense of its Climate Disclosure Rule in March 2025. Singapore deferred its limited-assurance requirement to 2029. Australia pushed reasonable assurance to FY beginning July 2030. California's SB 261 was enjoined by the Ninth Circuit.

Three jurisdictions still plot reasonable-grade requirements (California SB 253 2030, Australia AASB S2 2030, Brazil CVM R.193 2026). None are the anchor markets for global institutional capital.

Sustainability assurance services were worth $1.8 billion globally in 2025, per Verdantix, growing at 18% CAGR toward roughly $4.9 billion by 2031. The Big Four accounting firms hold the dominant share of named engagements, but the majority of S&P 500 assurance work is still handled by non-CPA firms, including engineering consultancies, technical inspection firms, and specialist providers.

The growth rate has been revised down from earlier 27% projections. Part of the reason is the regulatory retreat above: when reasonable-assurance mandates slip or disappear, the demand curve for audit-grade capability flattens. Limited-assurance revenue continues to scale. Audit-grade infrastructure does not, because nothing is forcing its build-out.