MCA CSR and Insurance Disclosure for Listed Indian Companies 2026: Annual Report Treatment and Audit Implications

Insurance spend at a typical listed Indian commercial group runs INR 8 crore to INR 250 crore annually depending on size, line mix, and risk exposure. The accounting and disclosure treatment is not handled by a single regulation. It sits at the intersection of four texts, each with its own purpose, format, and inspection regime.

First, the Companies Act 2013 carries the foundational books and accounts requirements under Section 128, the Schedule III presentation rules for the balance sheet and statement of profit and loss, and the Section 134 board report content rules. Insurance line items appear in the Schedule III presentation as prepaid expenses on the asset side and as insurance premium under operating expenses in the statement of profit and loss.

Second, the Section 135 Corporate Social Responsibility (CSR) regime brought in by the 2013 Act and operationalised through the Companies (CSR Policy) Rules 2014 with successive amendments through 2024 carries specific treatment for insurance spend that qualifies as CSR. Group health insurance premiums for employees do not qualify (per the implementation guidance), but project-tied insurance that supports a CSR programme (such as crop insurance premium for an agricultural-development project, or accident insurance for beneficiaries under a livelihood programme) can qualify with the appropriate documentation.

Third, the SEBI (LODR) Regulations 2015 under Regulation 34 require listed entities to file an annual report with the stock exchanges, and the Regulation 17(8) board responsibility statement, the Regulation 27 corporate governance report, and the Schedule V management discussion and analysis collectively carry the insurance-related risk disclosure expectations. The Regulation 27 corporate governance report and the board report filings must address insurance as part of the risk management framework.

Fourth, the SEBI Business Responsibility and Sustainability Reporting (BRSR) framework applies in its core and detailed formats to the top 1,000 listed entities by market capitalisation for FY 2025-26 onwards, with mandatory reasonable assurance from FY 2026-27 onwards. The BRSR Principle 6 covers environmental, social, and governance dimensions where insurance figures as a risk-treatment mechanism, and Principle 9 covers customer welfare where product-liability and recall insurance enter the response.

The four texts do not always agree on the unit of account, the presentation, or the disclosure depth. A listed Indian commercial group must reconcile the four texts in a single annual report production, with the auditor reviewing each strand for consistency and inspection-readiness. The cost of misalignment, in MCA observations and SEBI adjudication penalties, is material. Insurance and CSR misclassification is a recurring theme in MCA and ROC inspection observations and in chartered-accountant practice commentary, with insurance categorisation errors frequently driving Section 134 board report observations. The pattern is consistent enough that finance and company secretarial teams should treat it as a standing inspection risk rather than an exception.

Section 135 of the Companies Act 2013 requires every company with net worth of INR 500 crore or more, or turnover of INR 1,000 crore or more, or net profit of INR 5 crore or more to spend at least 2 percent of average net profits of the three immediately preceding financial years on CSR activities. The CSR spend is reported in a dedicated section of the board report, with itemised disclosure of activities, beneficiaries, and amounts.

The insurance categorisation question is whether a given insurance premium qualifies as CSR spend. The MCA general circular dated 18 April 2020 and the Companies (CSR Policy) Amendment Rules 2021 clarified that activities undertaken in the normal course of business do not qualify as CSR. This excludes most insurance spend because group health, motor, fire, and liability programmes serve the company's own operations and employees.

Where insurance can qualify as CSR

Three categories of insurance spend can qualify as CSR with proper documentation and structuring.

1. Project-tied beneficiary insurance. Premium paid for accident, life, or health cover on beneficiaries of a CSR project (rural livelihood programmes, skill-development trainees, project-tied workers). The insurance must be incidental to the project rather than the project itself, and the beneficiary base must be CSR-eligible (typically rural poor or specified-category vulnerable populations).
2. Crop and weather insurance for agricultural CSR programmes. Premium subvention on Pradhan Mantri Fasal Bima Yojana (PMFBY) or weather-index products for farmers benefiting from a CSR agricultural-development project. The corporate spend must be on the premium share that supports CSR-eligible farmers, not on the corporate's own crop or input risk.
3. Health-camp or community-health insurance. Premium on community-health insurance schemes covering rural or vulnerable populations served through a CSR programme, distinct from the company's own employee health cover.

The documentary support required for any insurance-CSR categorisation is more demanding than for typical CSR spend. The board's CSR Committee should approve the insurance categorisation specifically, with reference to the underlying CSR project and the beneficiary linkage. The board report disclosure should describe the insurance element with the same specificity as other CSR project elements.

Where insurance does not qualify (the more common case)

Four categories of insurance spend at listed Indian commercial groups do not qualify as CSR even though they are often raised as candidates.

1. Group health insurance for own employees and dependants. This is a business expense and a Schedule III operating-cost item. It does not qualify as CSR.
2. Workers compensation and Employees State Insurance (ESI) contributions. These are statutory and operational. Not CSR.
3. Director and officer liability insurance. A governance-cost item under Schedule III. Not CSR.
4. Property, fire, marine, engineering, and liability insurance on the company's own operations. Business expense, not CSR.

Schedule III to the Companies Act 2013 prescribes the format of the balance sheet and the statement of profit and loss for listed and unlisted Indian companies. The presentation of insurance premium has a specific operational logic that affects both the balance sheet position and the period-to-period profit and loss.

The prepaid expense convention

Most commercial insurance policies are annual contracts with premium paid in advance for the policy period. Under accrual accounting and the Ind AS 1 presentation principle, the premium expense is recognised over the policy period, with the unexpired portion held as a prepaid expense on the balance sheet. The prepaid expense line typically appears under the Other Current Assets sub-classification in the balance sheet.

For a listed Indian commercial group with multi-line cover renewing across the year, the prepaid-insurance balance at year-end can be material. A group with INR 50 crore in annual insurance spend, with mixed-renewal dates across the year, can carry INR 18 crore to INR 30 crore in prepaid insurance at the balance sheet date. The auditor reviews this balance for correct unexpired-premium calculation, with attention to long-term policies (engineering construction-all-risks or marine open covers) where the unexpired portion is more complex.

Expense recognition in the profit and loss

Insurance premium recognised in the profit and loss is presented as an operating expense, typically classified under Other Expenses in the Schedule III format. Specific sub-classifications used in practice include insurance premium as a stand-alone line for material spend, or insurance as part of a broader administrative expenses caption for smaller spend.

The presentation choice affects analyst readability of the financial statements but does not affect the underlying accounting. Larger listed groups disclose insurance as a stand-alone line item in Note to Other Expenses to give analysts visibility into the risk-treatment cost. The disclosure typically distinguishes property and engineering insurance, liability and management liability insurance, marine and transit insurance, and employee benefit insurance (group health, group personal accident, workers compensation).

Special situations in Schedule III treatment

Four situations carry treatment complexity that the auditor's work programme typically tests.

1. Mid-term cancellation and refunds. When a policy is cancelled mid-term and a refund is received from the insurer, the refund must be set off against the prepaid expense, with any residual treated as a reduction in the period's insurance expense. Misclassification as income is a common error.
2. Premium financing arrangements. Where the company funds premium through a premium-financing facility (typical for large global programmes), the financing expense is recognised separately as finance cost, and the premium itself follows normal prepaid-expense treatment. The two should not be netted.
3. Multi-year policies. Long-term construction-all-risks or marine cargo open covers with policy periods exceeding one year carry the unexpired portion as long-term prepaid expense beyond the 12-month current-asset boundary. Schedule III requires bifurcation between current and non-current prepaid balances.
4. Captive cession premium and reinstatement premium. Premium paid to a captive insurer (for groups operating captives in GIFT City IFSC or Bermuda or Singapore) carries the same prepaid treatment as third-party premium, with the related-party-transaction disclosure overlay discussed in the later section on the related-party angle. Reinstatement premium on excess-layer property cover is a separately classified line item.

The statutory auditor's work programme on insurance accounting and disclosure draws on multiple Standards on Auditing (SA) issued by the Institute of Chartered Accountants of India (ICAI). The specific SAs that drive insurance audit work are SA 315 (risk assessment), SA 330 (auditor response to assessed risks), SA 500 (audit evidence), SA 540 (auditing accounting estimates), SA 550 (related parties), and SA 580 (written representations).

The SA 580 written representations on insurance

SA 580 requires the auditor to obtain written representations from management on matters where alternative audit evidence is not reasonably available. For insurance, the standard representation items are:

1. Disclosure of all material insurance contracts including off-balance-sheet covers, contingent covers, and side letters or endorsements that modify the standard policy terms.
2. Completeness of insurance expense recognition for the period, including premium-financing arrangements, late-billed renewals, and captive cessions.
3. Accuracy of prepaid-insurance computation with the underlying basis (premium amount, policy period, expired and unexpired portions).
4. Disclosure of all known claims and potential claims including FNOL notifications to insurers, surveyor appointments, claim reserves, and insurer dispute correspondence.
5. Adequacy of insurance cover relative to insurable interest with confirmation that material exposures are appropriately covered and material uninsured exposures are disclosed.

The written representations are obtained near the end of audit field work and become part of the audit file. The auditor's reliance on the representations is calibrated against the corroborating evidence available from other procedures (insurer confirmation letters, broker certificates, policy schedules, premium-payment trail, claims correspondence).

Insurer confirmation as substantive evidence

A core substantive procedure on insurance is third-party confirmation from the insurer. The auditor sends a confirmation request to the insurer covering the policy list, the premium status, the claim status, and any specific items relevant to the audit. The confirmation is direct external evidence and carries higher weight than internally generated evidence.

In practice, insurer confirmation response quality varies. Lloyd's syndicates and well-organised Indian insurers respond within 20 to 30 days with structured confirmations. Smaller insurers and overseas insurers without dedicated audit-confirmation teams can take 60 to 90 days or longer, with confirmations that are incomplete or non-specific. The auditor's response to weak confirmation evidence is to extend other substantive procedures (review of premium-payment evidence, broker certificates, policy documents) and document the audit conclusion.

The SA 540 estimation work on claim reserves

For companies with significant self-insurance or large insured claims under settlement, the auditor's work under SA 540 (auditing accounting estimates) addresses the claim reserve estimation. The relevant estimates are insurance receivables (for claims under settlement), captive insurance reserves (for groups with captives consolidated into the listed entity), and uninsured-loss provisions (for known incidents not yet finalised).

The SA 540 work programme includes evaluating management's estimation methodology, testing key inputs, assessing management's estimation bias, and considering alternative outcomes. For large insured claims (above the broker's working threshold of INR 10 crore), the auditor typically requests an independent loss-adjuster or forensic accountant opinion to corroborate management's estimate.

The SA 550 related-party work on captives and group covers

Where the listed entity operates a captive insurer (typically through a wholly-owned subsidiary in GIFT City IFSC, Bermuda, or Singapore) or participates in a group master policy with related-party cession arrangements, the auditor's SA 550 work programme tests the related-party transaction disclosure under both the Companies Act 2013 Section 188 and the SEBI LODR Regulation 23. The disclosure must address the nature of the transaction, the arms-length basis (where relied upon), the audit-committee approval evidence, and the materiality test outcome.

Regulation 34 of the SEBI (LODR) Regulations 2015 requires every listed entity to submit an annual report containing the board report, the financial statements (audited), the auditor's report, and the management discussion and analysis. The annual report becomes the principal investor-facing document, and the insurance disclosure across its elements draws SEBI inspection attention.

Where insurance appears in the board report

The board report under Section 134 of the Companies Act 2013, as supplemented by the SEBI LODR requirements, addresses insurance in five primary places.

1. The risk management section. The board report must address material risks and the risk management policy. Insurance is the principal risk-transfer mechanism for material insurable risks (property, casualty, business interruption, cyber, management liability, marine, motor). The section typically describes the insurance programme structure, the lines covered, the broker and insurer counterparties, and any material changes during the year.
2. The internal financial controls section. The board confirms the adequacy of internal financial controls under Section 134(5)(e). Insurance forms part of the operational-risk-control mosaic, particularly for property and casualty exposure. The disclosure typically references the insurance programme as a control element.
3. The directors' responsibility statement. Among other things, the directors confirm the maintenance of proper records and the safeguarding of company assets. Insurance documentation forms part of the safeguarding evidence.
4. The CSR section. As discussed earlier, any insurance spend categorised as CSR appears in the CSR section with project-tied detail.
5. The related-party transaction disclosure. Captive cession transactions and group master policy arrangements where applicable carry related-party disclosure.

SEBI inspection observations across 2024 to 2026

SEBI annual inspection reports publish summarised observation themes. Insurance-related themes that recur in inspections of listed entities across the 2024 to 2026 period include:

1. Inadequate risk management disclosure where the board report describes insurance in general terms without specifying material exposures, sum-insured adequacy, or programme structure.
2. Missing related-party transaction disclosure where the listed entity participates in a group master policy with cession or recharge to other group entities, with the related-party angle not addressed.
3. Weak BRSR Principle 6 risk-treatment disclosure where environmental and climate-related risks are described without the corresponding insurance response.
4. Insurance receivable disclosure gaps where significant claims under settlement are not addressed in the management discussion or in the financial statement notes.

The SEBI inspection findings can result in formal observations, adjudication proceedings, or settlement orders depending on severity and pattern. The penalty exposure under the SEBI Act for a failure to furnish documents, returns or reports runs up to INR 1 crore under Section 15A (INR 1 lakh for each day the failure continues or INR 1 crore, whichever is less). The much higher cap of up to INR 25 crore (or three times the unlawful gain, whichever is higher) applies under Section 15HA to fraudulent and unfair trade practices, and under Section 23E of the Securities Contracts (Regulation) Act to failures to comply with listing conditions, not to ordinary disclosure-furnishing defaults.

Insurance as a topic in the MD&A

The management discussion and analysis (MD&A) under Schedule V of the SEBI LODR Regulations is the principal narrative document accompanying the financial statements. Insurance discussion in the MD&A typically addresses the programme overview, year-over-year premium changes, claims experience, and any material changes in coverage scope. The MD&A tone should be balanced (acknowledging both adequacy and any residual exposure) rather than promotional, with consistency between the MD&A narrative and the risk section of the board report.

The SEBI Business Responsibility and Sustainability Reporting (BRSR) framework applies to the top 1,000 listed entities by market capitalisation in its core and detailed formats. The framework is structured around nine principles, each addressed in standardised question formats. Insurance figures across multiple principles as a risk-treatment mechanism, and the BRSR disclosure must address both the qualitative and the quantitative dimensions.

BRSR principles where insurance is directly relevant

Three principles carry direct insurance content.

1. Principle 3 (Employee well-being). The principle covers employee welfare initiatives, with specific questions on health and accident insurance coverage. The BRSR Core format asks for the percentage of permanent employees covered by group health insurance, accident insurance, and similar covers, with separate disclosure for male and female employees and for contractual workers.
2. Principle 6 (Environment). The principle covers environmental risk management. The insurance response includes environmental liability insurance, business interruption from natural catastrophe events, and climate-risk-related coverage. The BRSR detailed format asks for the company's approach to climate-related financial risk management, with insurance as part of the response.
3. Principle 9 (Customer welfare). The principle covers product responsibility and customer protection. The insurance response includes product liability insurance, product recall insurance, and customer-facing liability covers. The BRSR asks for the company's approach to product safety and the related insurance arrangements.

Quantitative disclosure expectations

The BRSR Core format requires specific numerical disclosures on employee insurance coverage:

1. Percentage of permanent employees covered by group health insurance, with breakdown by gender.
2. Percentage of permanent employees covered by group accident insurance.
3. Percentage of permanent employees covered by maternity benefit (separate from insurance, but operationally linked).
4. Percentage of contractual workers covered by the same categories where applicable.

The disclosure runs through reasonable assurance starting from the FY 2026-27 filing cycle, meaning the underlying data must be auditable. The data sources typically include the HR information system (employee roster), the broker certificate of insurance (coverage list), and the policy schedule (sum insured per employee, dependants covered). Reconciliation among these sources is the operational discipline that supports assurance readiness.

Qualitative disclosure expectations

Beyond the numerical data, BRSR asks for narrative on the company's approach to insurance and risk management. The narrative should address:

1. The risk-treatment philosophy (transfer vs retention) for material exposures.
2. The insurance programme structure including line mix, sum insured logic, deductible levels, and reinsurance arrangements where applicable.
3. The integration of insurance with broader risk management (enterprise risk framework, business continuity, supply chain resilience).
4. The climate-risk component including catastrophe modelling, geographic concentration, and parametric or index-based covers where used.
5. The cyber-risk component including cyber insurance, incident response, and integration with the DPDP Act 2023 framework.

Common BRSR disclosure failures

The SEBI BRSR observations published through 2024 to 2026 identify recurring failure patterns:

1. Generic risk-treatment disclosure without specific insurance programme description.
2. Inconsistency between BRSR Principle 3 employee coverage numbers and the HR-system or broker-certificate underlying data.
3. Climate-risk disclosure that does not address the insurance response, leaving the risk management description incomplete.
4. Cyber-risk disclosure that addresses the technical controls but omits the insurance treatment, breaking the alignment with the IRDAI Information Security Guidelines 2023 framework.

The Ministry of Corporate Affairs runs structured inspection programmes against listed entity annual filings, with the Registrar of Companies (ROC) running the front-line review and the Regional Director or Serious Fraud Investigation Office (SFIO) taking up matters that surface as material. The inspection observation patterns publicly aggregated from compliance advisory and chartered accountant practice reports through 2024 to 2026 give a clear picture of the failure points listed groups should pre-empt.

Observation theme 1: Section 134 board report deficiencies

The board report under Section 134 attracts the most insurance-related observations. The recurring failure points are:

1. Risk management section describing insurance in generic terms (a sentence noting that the company maintains adequate insurance) without specifying programme structure, material exposures, or year-on-year changes.
2. CSR section with insurance items included without clear linkage to the CSR project and the beneficiary base.
3. Director responsibility statement that does not address the safeguarding of assets adequately, with insurance as part of the safeguarding evidence.
4. Related-party transaction disclosure that omits captive cession transactions or group master policy participation.

The pre-emption is structured drafting of the board report sections, with cross-checking against the financial statement notes, the related-party disclosure, and the BRSR narrative.

Observation theme 2: CSR misclassification

The CSR rule on activities in the normal course of business is repeatedly violated through inclusion of employee insurance premium under CSR. The MCA inspection treats this as a material misstatement of the CSR spend computation, with potential reclassification of the spend and triggering of unspent-CSR-account remediation under the 2021 amendment rules.

The pre-emption is a clear CSR policy that excludes employee insurance from the CSR ambit, a CSR Committee review of any borderline insurance categorisation, and documentary support for any CSR-eligible insurance with the underlying project linkage.

Observation theme 3: Schedule III presentation errors

The Schedule III format errors observed at inspection include:

1. Current vs non-current misclassification of long-term prepaid insurance.
2. Netting of refunds against expense without the offset against the prepaid balance first.
3. Aggregation of insurance into general administrative expenses without separate disclosure where the amount is material.
4. Premium financing treated as a single insurance line without separation of the finance cost.

The pre-emption is a year-end Schedule III review by the finance team with the auditor, with focus on the larger and more complex insurance balances.

Observation theme 4: Insurance receivable and contingent asset treatment

Where a company has an insurance claim under settlement at year-end, the accounting treatment requires care. Ind AS 37 (Provisions, Contingent Liabilities and Contingent Assets) addresses recognition of insurance receivables (recoverable claims) only where the reimbursement is virtually certain. In practice, this means the receivable is recognised on the balance sheet only where the insurer has accepted liability in writing and the only outstanding matter is quantum (and even then, the recognition is at the conservatively estimated quantum).

The MCA inspection observations on this topic include premature recognition of insurance receivables before the insurer has accepted liability, and inadequate disclosure of significant contingent insurance assets that do not yet meet the virtual certainty test.

Observation theme 5: Captive and IFSC cession arrangements

For listed groups that operate captives in GIFT City IFSC or offshore (Bermuda, Singapore, Mauritius), the cession arrangements between the operating subsidiaries and the captive carry related-party transaction disclosure requirements. The observations include incomplete disclosure of the cession arrangement, missing audit-committee approval evidence, and inadequate justification of the arms-length basis where the captive premium is set against a benchmark.

Pre-emption checklist for the FY 2025-26 annual report cycle

A structured pre-emption checklist for the listed group finance and company secretarial team is:

1. Conduct a Section 134 board report drafting workshop in October to November, ahead of the December board meeting cycle.
2. Reconcile the insurance disclosure across the financial statements, the board report, the BRSR, and the related-party disclosure for consistency.
3. Document the CSR-insurance categorisation with CSR Committee review.
4. Run a Schedule III review on prepaid insurance, expense recognition, and current vs non-current bifurcation.
5. Prepare the insurance audit pack for the statutory auditor with all supporting evidence.
6. Run a mock BRSR Principle 3 assurance exercise covering employee coverage data and supporting evidence.
7. Review insurance receivable recognition against the Ind AS 37 virtual certainty test.
8. Reconcile captive cession arrangements with the Section 188 and LODR Regulation 23 related-party disclosure.

A finance and company secretarial team running this checklist consistently will materially reduce the inspection observation count and the related remediation cost. The investment is modest, typically INR 18 lakh to INR 60 lakh annually for a mid-cap listed group, against potential SEBI adjudication exposure (up to INR 1 crore under Section 15A for a disclosure-furnishing failure, and substantially higher penalties of up to INR 25 crore under Section 15HA of the SEBI Act or Section 23E of the SCRA where the failure amounts to a fraudulent practice or a breach of listing conditions) and MCA prosecution risk under the Companies Act.