CSR Advisory & Audits

CSR Advisory and Audits focus on planning, implementing, and evaluating Corporate Social Responsibility initiatives. This includes guiding companies on effective CSR strategies and conducting audits to ensure activities comply with legal requirements and create meaningful social impact.

Showing 1

26 Mar 2026

The night the ledger learned the word “society”It is late March. The office lights are still on. Coffee has stopped being a beverage and started behaving like a policy. A finance head, a CSR manager, and an anxious CFO are staring at the same figure—one that feels less like a number and more like a deadline.“Have we spent the CSR amount?” A pause follows. Then the quieter sentence that usually comes next, because it carries the weight of law.“If we don’t, we’ll have to disclose reasons.” “And if we still don’t?” “There are troubles ahead.”That single exchange captures the full arc of India’s mandated Corporate Social Responsibility (CSR) story: it began as a disclosure-first experiment and evolved into a tighter compliance-and-accountability regime—deadlines, designated accounts for unspent money, stronger reporting, and the expectation that impact can be measured, not merely described. Before the law: when CSR meant “philanthropy with a founder’s signature”Long before CSR became statutory, corporate giving in India often looked like a family tradition. A hospital near a plant. A school in a hometown. Scholarships for a district where the brand was born. Some of it was heartfelt, some reputational, but much of it lived outside a national framework. The absence of common standards created a predictable twin outcome: genuine work often stayed invisible beyond local memory, and superficial work could hide behind photo opportunities.Then came the turning point: Section 135 of the Companies Act, 2013, which made India one of the first countries to legally mandate CSR spending at scale. The legal core, in plain language: what the law actually asks companies to doIndia’s CSR design is deceptively simple to state and complicated to execute. If a company is sufficiently large—measured by financial thresholds—it falls under CSR obligations. The headline norm is equally blunt: eligible companies should spend at least 2% of the average net profits of the previous three years on CSR activities. The law nudges companies toward proximity and legitimacy by saying they should give preference to local areas around their operations. And it limits what qualifies as CSR by linking it to Schedule VII, a defined menu of themes—poverty, health, education, sanitation, environment, and allied social priorities. This became the architecture: thresholds, the 2% norm, a defined theme list, and board-level disclosure.A policy that refused to stay still: the decade-plus timeline of tighteningCSR became operational in the mid-2010s, but its real character emerged through iterative redesign. Early on, CSR often behaved like a “comply or explain” system: if you didn’t spend, you explained why in the board report. Over time, policymakers and observers saw the limits of explanation without enforcement. Then came the sharper phase. The Companies (Amendment) Act, 2019 introduced stronger discipline for unspent CSR amounts, including time-bound transfers—an attempt to stop CSR budgets from merely rolling over as an annual excuse. In January 2021, amendments to CSR Rules tightened definitions, formalised implementation norms, and pushed CSR from “best effort” to something that increasingly resembles an auditable process. By 2022, reporting became more structured through Form CSR-2, signalling that CSR would be treated not only as narrative, but also as standardised data. Mandated CSR, in other words, has behaved like a living system—repeatedly corrected by the realities it created. The “who” behind CSR: an ecosystem, not a departmentCSR is often described as “companies spending money.” In practice, it is an ecosystem. Boards and CSR committees approve policies and budgets; CSR managers negotiate between community need, business expectation, and compliance deadlines; implementing agencies—NGOs, trusts, Section 8 companies—turn budgets into work; auditors check whether the narrative aligns with the books; communities experience CSR not as policy but as a water tap, a classroom, a clinic, a livelihood tool—or as a promise that never arrived. As the rules tightened, the ecosystem became more formal. Compliance expectations for implementing entities hardened, including references to CSR-1 registration mechanisms in the evolving CSR architecture. The uncomfortable geography of CSR: money follows corporate comfortIf one wants to understand both the strengths and blind spots of CSR, one must look at maps, not brochures. CSR flows tend to cluster where corporate India clusters. Even within a state, CSR can concentrate heavily in a capital district while multiple districts receive nothing, revealing that CSR funding often follows operational presence and execution comfort more than development need. The preference-for-local-area principle is ethically intuitive—communities living beside industrial sites deserve a share of prosperity. Yet the same preference can reinforce inequality because corporate geography is not human-need geography.The ground reality: why early CSR “worked” and why it still felt thinIn the early years, CSR money flowed toward sectors where outcomes were visible and documentation was easier. Education and healthcare dominated. The pattern was almost cinematic in its repetition: a company adopts a government school, repairs classrooms, distributes learning devices, builds toilets, funds scholarships; another company equips clinics, runs health camps, supports mobile medical vans. Then the first twist arrived. CSR became efficient, but sometimes too shallow. NGOs reported a familiar constraint: short-term, tightly restricted funding with limited support for the organisational capacity that sustains impact. CSR often paid for outcomes without paying for the muscle needed to deliver outcomes reliably year after year. The pandemic chapter: CSR discovers the emergency laneWhen COVID-19 hit, CSR revealed its most valuable trait: speed. Companies pivoted toward healthcare infrastructure, resilience, and digital education, because needs were immediate and undeniable. The boardroom debates changed tone. CSR managers who once argued “education versus environment” began asking “oxygen plant or ICU beds?” NGOs that once wrote proposals for skill training wrote proposals for protective equipment, ration kits, and vaccination awareness. CSR became a rapid-response channel at its best. But the pandemic also made old questions louder: should CSR become a substitute for public expenditure, should corporate funds be routed into central pools or remain close to community delivery, and where does accountability sit when money moves fast? The limitations that forced redesign: why “explain” was not enoughA decade into mandated CSR, several persistent constraints stood out across policy discussions, audit observations, NGO experience, and public scrutiny. Unspent funds were too common; some companies treated CSR as a year-end scramble while others delayed due to project risk or weak partner availability. Measurement was thin; reporting often counted rupees and beneficiaries rather than verified outcomes. Geographic concentration stayed stubborn. Implementing ecosystems struggled with documentation burdens, delayed disbursements, and weak access to corporate networks. And CSR sometimes slid into branding—visibility rewarded more than substance. The summary was hard to ignore: CSR mobilised money, but money alone was not impact.The tightening cycle: how CSR became more auditable without killing initiativeThe redesign logic became clear: keep CSR flexible enough for innovation, but strict enough to prevent negligence and misuse. The 2019 amendment pushed time-bound treatment of unspent funds, often discussed through the lens of an “Unspent CSR Account” mechanism for ongoing projects. The 2021 strengthening of rules moved CSR closer to audit discipline. Penalties for defaults tied to unspent transfers became more explicit. Impact assessment became sharper—especially for large obligations. Reporting, via CSR-2, became more standardised, signalling a shift from “spend and report” to “spend, prove, and learn.” The current scale: big numbers, persistent questionsBy FY 2023–24, CSR spending had reached very large national scale. Parliamentary disclosures showed CSR expenditure totals rising from ₹27,141.45 crore in FY 2021–22 to ₹34,908.75 crore in FY 2023–24. Education and health remained dominant, while newer categories—culture, animal welfare, environment-linked work, contributions to specified funds—also appeared more visibly. This is the paradox of mandated CSR: it can generate reliable national funding, yet it must continuously fight the gravitational pull toward safe, familiar, easy-to-document interventions. The global mirror: how major democracies handle “CSR” without mandating “2% spend”To compare India with other democratic economies, one must first admit the definitional difference. In many jurisdictions, what India calls CSR spending is split into obligations that look more like risk governance than charity: director duties, modern slavery reporting, non-financial reporting, and supply-chain due diligence. The United Kingdom offers a clear example of responsibility embedded in governance. Under Section 172 of the Companies Act 2006, directors are expected to promote the success of the company while having regard to stakeholders—employees, suppliers, customers, community, and environment. That is not CSR spending; it is responsibility embedded into decision-making. The UK also tightened supply-chain accountability through Section 54 of the Modern Slavery Act 2015, requiring certain organisations to publish an annual statement describing steps taken to prevent modern slavery in operations and supply chains, with the commonly referenced turnover trigger. The strength is clarity and transparency; the weakness is equally obvious—statements can become performative if enforcement and market consequences are weak. Denmark is often cited for making CSR reporting itself mandatory for certain companies through its financial statements framework, effectively turning CSR into an accountability-through-disclosure regime rather than a spending mandate. This early institutionalisation of CSR reporting strengthened transparency, but it still relies on market and civil society pressure to convert reporting into transformation. France took a different route, treating responsibility as prevention. Its 2017 duty of vigilance law requires large companies to publish an annual vigilance plan to identify and prevent serious human rights and environmental impacts across operations and certain business relationships. Compared to India’s CSR, France is not saying “spend 2%.” It is saying “prove you are not causing serious harm—and show your plan.” Germany’s supply-chain approach similarly requires covered companies to maintain risk management systems, preventive and remedial measures, complaint procedures, and reporting focused on human rights and environmental harms. Germany also offers a caution that democracies repeatedly face: once responsibility becomes a compliance machine, debates about burden can trigger exemptions or redesigns. At the European Union level, responsibility is increasingly expressed through two big levers: sustainability reporting, where large and listed companies publish regular reports on social and environmental risks and impacts; and sustainability due diligence, with a directive that entered into force in July 2024 aiming to ensure companies identify and address adverse impacts across operations and value chains. The strength is comparability; the risk is checkbox compliance and the politics of scope and phase-ins. Australia’s Modern Slavery Act 2018 similarly uses a reporting-and-registry logic for entities above a revenue threshold, pushing supply-chain transparency through annual statements. Canada’s supply-chain framework, effective from January 1, 2024, follows the same directional philosophy: increase transparency and encourage responsible practices in relation to forced labour and child labour risks. The United States, by contrast, remains largely voluntary and market-driven on CSR: corporate giving and sustainability reporting exist, but there is no India-style statutory spending mandate at the federal level, and responsibility pressure comes through investor expectation, consumer trust, litigation risk, and sector-specific regulation. What India gets right, what India still struggles with, and what the world can learnIndia’s unique strength is predictability. Mandated CSR produces a steady flow of social funding that does not rely solely on leadership goodwill or brand strategy. It institutionalises corporate participation in social development. In voluntary CSR environments, philanthropic budgets can shrink sharply in downturns; India’s model is designed to resist that volatility.India’s core weakness is the temptation of “fast spend” over “deep change.” When the KPI feels like “spend by year-end,” there is a structural bias toward interventions that are easy to approve, disburse, and document—often necessary interventions, but not always transformative interventions. The global lesson is that democracies are converging on “responsibility as risk management.” India’s CSR focuses on outward contribution; many other frameworks focus on preventing inward harm and reporting it, especially across supply chains. These approaches are not rivals. They are complements. The direction of travel globally suggests that CSR-style spending alone will not satisfy expectations if core business operations generate social or environmental harm. The next decade: three futures for India’s CSROne future is already visible: CSR becomes more auditable, but not necessarily more impactful. India is moving toward auditable CSR through CSR-2 standardisation, stricter unspent handling, mandatory impact assessment for large obligations, and tighter control on administrative overhead. This increases integrity, but can also turn CSR into paperwork—especially for companies that treat it as a statutory irritant rather than a strategic instrument. A second future is possible and preferable: CSR becomes multi-year and evidence-led, with fewer but deeper programmes, better partner due diligence, stronger district-level diagnosis, and honest outcome measurement. A third future is structural: CSR merges into a broader responsibility regime. As global rules tighten on supply-chain accountability, Indian exporters and global suppliers will face external responsibility expectations regardless of domestic CSR rules. CSR spending may become one pillar of a wider responsible business architecture that includes human-rights diligence, climate transition planning, workforce protections, and governance transparency. Across all futures, the biggest roadblock is capacity: credible implementing agencies, reliable data systems, and internal governance maturity. Without these, CSR and due diligence frameworks can degrade into documents that look impressive and do little.  The India CSR checklistIf you are a company that crossed any one of the CSR thresholds in the immediately preceding financial year—net worth at or above ₹500 crore, turnover at or above ₹1,000 crore, or net profit at or above ₹5 crore—then CSR compliance is no longer optional. You are expected to compute the CSR obligation as 2% of the average net profits of the preceding three years, approve and follow a CSR policy, ensure spending is on eligible activities under Schedule VII themes, and make the prescribed disclosures in your board/annual reporting. If you are covered, you generally need a CSR Committee. However, you must pay attention to how the law relaxes committee requirements in specific situations. Where an independent director is not required under Section 149, the CSR Committee can be formed without an independent director. If your required CSR spend does not exceed ₹50 lakh in a financial year, the law allows you to skip constituting a CSR Committee; in that case, the Board itself discharges the functions of the CSR Committee. This is not an exemption from CSR—spend discipline, unspent handling, reporting, and compliance expectations still apply. If you implement CSR through an outside agency—an NGO, a trust, or a Section 8 company—you must treat eligibility and registration as non-negotiable compliance hygiene. Many categories of implementing entities are expected to have Income Tax registrations such as 12A and 80G and to be registered through the CSR-1 mechanism, so that the chain of accountability is traceable. If you are spending CSR, remember that CSR is not allowed to become an internal administrative empire. Administrative overheads must remain within the permitted cap and should not exceed 5% of total CSR expenditure for the financial year. If you are a large CSR obligor, impact assessment is no longer a matter of taste. Companies with an average CSR obligation of at least ₹10 crore in the three immediately preceding financial years face mandatory impact assessment expectations for projects above the specified outlay thresholds and with enough time elapsed after completion; the impact report must be placed before the Board and attached to CSR reporting. If you do not spend the full CSR amount in a financial year, you must treat “unspent CSR” as a compliance event, not a footnote. The rule operates on two tracks. If the unspent amount is not linked to an ongoing project, it must be transferred to specified funds under Schedule VII within the prescribed timeline. If it is linked to an ongoing project, it must be transferred to the “Unspent CSR Account” and spent within the permitted window; failing that, it must be transferred as required. Finally, reporting is no longer just narrative. Companies must file CSR disclosures in the prescribed format in board/annual reporting, and CSR-2 has been introduced as a structured reporting mechanism, with timelines governed by the applicable notifications. That is the compliance spine. The strategic question is what separates mature CSR from ritual CSR: whether the company builds multi-year programmes, invests in credible partners, measures outcomes honestly, and resists the temptation to treat CSR as a March transaction rather than a long social contract.   ...Read more