ASRS Group 2 Reporting Starts July 2026: What Mid-Market Companies Need to Do Now

I had a conversation in January with the CFO of a mid-sized logistics company in Brisbane. Around 280 employees, just over $200M revenue. He'd heard about ASRS but figured it was "a big company thing." When I walked him through the Group 2 thresholds, he went quiet for about ten seconds. Then: "So we're already behind."

He's not alone. Financial years starting on or after 1 July 2026 trigger mandatory climate disclosures for Group 2 entities, and that date is now about sixteen weeks away. These disclosures aren't buried in some CSR annex nobody reads. They go inside your annual financial report. Directors sign off on them under the same liability provisions that apply to your profit and loss statement.

That last part deserves repeating because I don't think it's fully sunk in across the mid-market yet. Same liability framework. Same personal exposure for directors. The Corporations Act penalties go up to $15 million or 10% of annual turnover — whichever is larger.

Are you actually caught by Group 2?

Worth checking before you panic. You qualify if you meet two out of three: $200M+ consolidated revenue, $500M+ gross assets, or 250+ employees.

But here's the bit that keeps catching people. There's a second pathway — through the NGER Act. If your corporate group is already a registered NGER reporter (thresholds: 50 kt CO2-e scope 1 and scope 2, or 200 TJ energy), you're automatically Group 2 even if you miss the size tests above. ASIC's Regulatory Guide 280 from March 2025 covers this in detail. I'd specifically look at the section on determining reporting obligations — it's about four pages long and fairly readable, which is unusual for ASIC.

Asset owners with $5 billion or more under management also get pulled in, though that's a narrower group.

The NGER pathway catches people because a company can have relatively modest revenue and headcount but still trigger NGER through energy-intensive operations. I know of a food processing business in regional Victoria — maybe 180 staff, $120M turnover — that reports under NGER because of their gas consumption. They're Group 2 now and didn't realise it until November.

What went wrong with Group 1

Group 1 entities (500+ employees, $500M+ revenue, or $1B+ gross assets) began reporting for financial years from 1 January 2025. By early 2026, their first sustainability reports were landing alongside annual financials.

Oxford Economics published an analysis of the early results that flagged three recurring problems. I've heard versions of each from auditors and sustainability consultants across Sydney and Melbourne, so this isn't theoretical.

Problem one: the consultant trap. Companies spent big — I've heard numbers ranging from $150K to north of $400K — to get consultants to build their first-year climate disclosure. The deliverable was a model, often in Excel, that produced the required disclosures for one specific year. Come year two, the consultant's gone, the Excel model makes assumptions nobody internal understands, and you're essentially starting over. One Big Four partner described this to me as "buying a house of cards."

Problem two: scenario analysis that floats in space. A lot of Group 1 entities grabbed the IEA Net Zero by 2050 scenario, or one of the NGFS pathways, and wrote their strategy section around it. The issue is these are global scenarios. Auditors started asking uncomfortable questions: how does a 1.5°C pathway translate to your specific revenue streams in Australia? What does it mean for your asset valuations in Western Australia versus Tasmania? If you can't bridge from the global pathway to your actual P&L line items, the assurance provider will flag it. Several did.

Problem three: numbers that moved under assurance. This one is the most damaging. Some companies' financial impact estimates changed materially once an assurance provider started testing them. That immediately raises questions about methodology. If your numbers shift when someone checks your work, what were they based on in the first place? A CFO I know put it bluntly: "We'd have been better off spending half the money on getting the data right and nothing on making the report look pretty."

First-year disclosure requirements (the actual list)

AASB S2 organises climate disclosures into four pillars. Rather than describe each one generically, I'll flag where I've seen Group 2 companies get stuck.

Governance. The standard wants evidence that your board actually oversees climate risks — not that you created a committee and listed it on page 47 of your annual report. Assurance providers want to see board minutes, see agenda items, understand how climate feeds into capital allocation decisions. If the honest answer is "it doesn't yet," that's a problem you need to fix in the next sixteen weeks, not paper over.

Strategy and scenario analysis. This is where Group 1 burned the most cash, as mentioned above. Expect to spend $50K-$100K on external scenario analysis if you don't have in-house capability. My advice (and yes, I'm biased toward DIY approaches): start with two scenarios — a 1.5°C aligned pathway and a higher-warming scenario in the 2.5-3°C range. Map each to three or four of your most material revenue and cost lines. Don't overcomplicate it in year one. The standard expects improvement over time.

Risk management. How you identify and assess climate risks, and critically, how that process connects to the risk register your board already reviews. Climate risk can't live in a sustainability silo that reports to the marketing department. If your Chief Risk Officer hasn't been involved in this work yet, you have a governance gap.

Metrics: Scope 1 and Scope 2 emissions. This is the one with zero safe harbour protection (more on that below). Your emission numbers need to be right. Not directionally correct. Not roughly estimated. Right. Calculated using the GHG Protocol, with auditable source data for every figure.

One piece of genuine good news: Scope 3 emissions reporting is deferred for your first year. You don't have to disclose them until your second reporting period.

I'd still recommend starting Scope 3 data collection now, though. We've been working on our own Scope 3 methodology for months and some categories — purchased goods and services in particular — are genuinely difficult to get right. The supplier data quality problem alone could fill an entire article. Starting twelve months early gives you a baseline, even a messy one, which is infinitely better than starting from nothing.

The assurance piece

External assurance is mandatory from year one for Group 2. It's limited assurance (essentially a review, not a full audit) covering your governance disclosures, climate risk strategy, and Scope 1 and 2 emissions. Reasonable assurance — the full audit — phases in from financial years beginning 1 July 2030.

Don't let the word "limited" relax you. I sat through a presentation from a mid-tier assurance firm in December where they walked through their engagement process. For a Group 2 entity with, say, ten facilities and a vehicle fleet, they estimated 80-120 hours of engagement time. They test your calculation methodology. They trace individual emission figures back to source documents. They interview management about governance processes.

Three questions that keep coming up in every assurance engagement I've heard about:

Where did this specific number come from?
Show me the source document — the actual PDF, not a cell in a spreadsheet.
Walk me through how you got from the source document to the number in your report.

If your current process involves someone downloading utility bills from email, typing figures into Excel, and then running calculations across multiple tabs — and look, that's most mid-market companies right now — then question number two is going to be painful. The source document might be in someone's deleted items folder. The calculation might reference a cell that references another cell that references a lookup table someone built two years ago. Auditors hate this and I don't blame them.

This is the specific problem we built our AI document processing system to solve. Every data point extracts from the source PDF and maintains a link back to it. The calculation chain is logged. When an assurance provider asks "where did this 847 MWh figure come from," there's a direct trail from the number in the report to the AGL bill from Q2 that shows 847 MWh. No digging through email. No reconstructing spreadsheet logic.

Liability: the scary headlines and the actual detail

The $15M penalty figure gets thrown around a lot. Directors can be personally liable under the Corporations Act for misleading climate statements. That's real.

But the government recognised that this is new territory and built in transitional protection. A modified liability period runs from 1 January 2025 through 31 December 2027. During that window, private litigants cannot bring civil claims relating to your Scope 3 emissions, scenario analysis, or transition plan disclosures. Only ASIC can take enforcement action on those specific elements, and even then, ASIC's remedies are capped at injunctions and declarations — no monetary penalties for those particular items during the safe harbour window.

For Group 2 entities starting in July 2026, your first reporting period falls entirely within this transitional window.

Here's what the safe harbour doesn't cover, though. Your Scope 1 and 2 emissions. Your governance disclosures. Any climate-related statements you make outside the sustainability report — in a directors' report, an investor presentation, a press release, or even comments at an AGM. And it doesn't protect statements that are genuinely misleading or deceptive, regardless of where they appear.

Read that paragraph again. Your core emission numbers have no transitional protection. Getting them wrong exposes you from day one. This is why data quality matters so much — it's not an operational nice-to-have, it's a legal shield.

What you'll actually spend

I'll give you the ranges we hear most often from mid-market companies going through this.

Fractional Chief Sustainability Officer (external): $8,000 to $15,000 per month. That's $96K-$180K annually. Some companies are hiring permanent sustainability managers instead, which runs $140K-$180K fully loaded for someone competent in the Melbourne or Sydney market.

Assurance engagement (limited): $30,000 to $80,000. Depends heavily on how many facilities you have, how clean your data is, and which firm you engage. The Big Four are more expensive but some Group 2 companies prefer mid-tier firms that have more availability and sometimes more pragmatic engagement styles.

Scenario analysis (if outsourced): $50,000 to $100,000 for two scenarios across your material business lines.

Software and data systems: varies enormously. We've seen everything from $0 (the "we'll do it in Excel" approach, which works until it doesn't) to $50,000+ for enterprise platforms.

Total realistic first-year spend for a Group 2 entity: $200,000 to $350,000 all-in. And this recurs every year, which is the part that makes the "hire consultants to build a one-off model" approach so expensive over time.

Where we see the fastest dollar-for-dollar return on automation is in data collection. The grunt work of extracting kWh and GJ figures from utility bills, fuel receipts, and supplier invoices — a company processing 150-300 documents a quarter can compress that from weeks of manual work to a few hours. Our NGER compliance approach plugs directly into ASRS because the Scope 1 and 2 data is identical under both frameworks.

A sixteen-week plan that's honest about the timeline

I won't pretend sixteen weeks is comfortable. It's not. But I've seen companies pull it together in less when they're focused.

February to mid-March. Confirm your Group 2 status — really confirm it, including the NGER pathway. Engage an assurance provider now. I'm hearing that mid-tier firms are already booking up for Group 2 engagements. BDO, Grant Thornton, Pitcher Partners — call them this week, not next month.

March to April. Inventory your emissions data sources. Write down every facility, every utility account number, every fuel supplier, every fleet management system. The goal is a complete map of where your Scope 1 and Scope 2 data physically lives. Start identifying gaps early — a missing gas account or an unmetered fuel supply is easier to sort out now than in September.

April to May. Stand up your data collection system and run a historical test. Process six to twelve months of back data to verify your calculation methodology works end-to-end. This is where problems surface — emission factors applied incorrectly, unit conversions that don't match, consumption figures that look wrong compared to prior periods. Better to find these now.

May to June. Document governance processes, run scenario analysis, and draft disclosures. Get your assurance provider to review early drafts. They'll tell you where the holes are. Fix what you can, flag what you can't, and make sure your board has seen and discussed the disclosures before they go into the annual report.

Is this doable? Yes, if you actually start this week. Not "start thinking about it." Start as in: call an assurance provider, assign an internal project lead, and set up weekly check-ins. The companies that'll struggle are the ones where ASRS is still an agenda item at monthly meetings rather than an active workstream.

Group 1 showed us what happens when preparation slips. Consultants working weekends in November. Assurance providers finding basic data errors in December. Boards signing off on disclosures they don't fully understand because the deadline is tomorrow. Nobody wants to be in that position.

Your reporting period starts 1 July. Do something about it today.