AI Won't Fail Your ASRS Audit. These 5 Gaps Will.

Updated:
October 2026

What do the experts think...

Ask a general-purpose AI tool to draft the governance section of your AASB S2 disclosure and you will get something good. Fluent, well structured, confidently compliant. That is exactly the problem.

AI rarely fails ASRS reporting by being obviously wrong. It fails in five predictable ways: it loses the trail back to source, it describes things that never happened, it sounds certain when it is guessing, it does not know your business, and it cannot know what your auditor will ask for. Each one is fixable, and none of them is a reason to stop using AI.

We see these patterns across more than 40 AASB S2 engagements and in the assurance feedback that follows them. If you want the broader view of what you can run yourself, start with our guide to using AI for climate disclosure. This post goes one level down: the failure modes themselves, how to spot each one in your own draft, and what to do about it.

1. The provenance gap: a right answer your auditor cannot use

Your auditor does not test your reported total. They pick individual line items and follow each one back to the document it came from. A number can be completely correct and still fail, because the path from source to disclosure was never recorded.

A chat window is not a working paper. Paste twelve months of electricity bills into a general assistant, ask for a total, and you may well get the right figure. What you will not get is anything an auditor can open, check and recalculate. The conversation is gone the moment the tab closes, and nobody can show which bill produced which line.

How to tackle it

  • Make every extracted value carry its source. When AI pulls figures from documents, instruct it to return the file name and page next to each one, and reject any output that does not.
  • Keep the calculation somewhere an auditor can open. Let AI write the formula or check the logic, but run the calculation in a spreadsheet or platform that persists.
  • File the AI work like any other working paper. Save the inputs, the prompt and the output alongside the evidence, the same way you would keep a version of a spreadsheet.
  • Automate high-volume work inside tooling that logs the chain. Emissions data is where volume is highest and provenance matters most, so this is where purpose-built tooling pays for itself.

2. The evidence gap: AI cannot make something have happened

The provenance gap is a broken chain. The evidence gap is worse: there is nothing at the end of the chain at all.

Generative AI is designed to fill gaps with plausible text. Ask it for a governance section that "complies with AASB S2" and it will describe the oversight a compliant company would have: regular board consideration of climate risk, director training, climate factored into capital allocation. If those things did not happen at your company, you now have a well-written description of a company that is not yours.

This matters most in governance, which is assured in full from year one and is the one area where you generally cannot fix things next year. Once the reporting period closes, the window to create the evidence closes with it.

How to tackle it

  • Draft from what happened, not from what the standard describes. Before you write a word, list the meetings, minutes, training sessions and decisions that actually took place this period, and give the model only that list.
  • Tell the model what it is not allowed to do. Instruct it not to describe any process, meeting or control that is not in the attached documents, and to flag gaps with a marker such as [EVIDENCE NEEDED] instead of filling them.
  • Use AI to audit its own claims. Ask it to extract every factual claim in your draft into a table. Next to each one, record where the evidence sits. Anything left blank either needs evidence created now, while the period is still open, or needs to come out.
  • If you are a Group 2 reporter, act on governance this quarter. Put climate on the next board agenda and minute it. It is the cheapest fix in the whole disclosure, and the only one with a hard deadline.

3. The plausibility trap: confidence is not a source

General AI tools sound exactly as certain when they are guessing as when they are right. In most work that is an annoyance. In climate reporting it is a liability, because the output looks finished.

Scenario analysis is where this bites hardest. The scenario sets everyone cites, from NGFS to IPCC pathways to the IEA, are revised periodically. A model can cite a superseded version, or produce scenario names and parameters that sound right and do not exist, in the same assured tone. The better the prose, the less likely a busy reviewer is to question it.

"Do not confuse rigour with complexity. A simple methodology that is consistently applied, documented and understood is infinitely more valuable than an overly complex model nobody really understands."
Tom Nisevic, CFO, Metro Trains Sydney

How to tackle it

  • Treat AI output on risk and scenarios as a hypothesis, not a finding. It is a starting point for your team to test, not text to paste.
  • Verify sources yourself. Ask the model to name the source for every parameter, then check that the source exists and is the current version. A citation from the model is not verification.
  • Turn AI into the challenger. Prompt it to argue why a risk is not material, or to list the questions an auditor would ask about a section. It is far more useful attacking your draft than writing it.
  • Keep the method simple enough to explain. If nobody on your team can walk through how a number was reached, it does not matter how authoritative it reads.

4. The context gap: AI does not know your business

A general assistant has read a great deal about climate risk. It has never seen your asset register, your risk appetite statement or the risks you already track. It also does not have the licensed, current datasets that serious climate work depends on, from up-to-date emission factors to location-specific physical risk data.

Without that context, AI produces the climate risk list for your sector, not for your company. It cannot tell you that a flood risk matters more to you than a carbon price because three of your largest sites sit in the same catchment. The same problem runs through the climate-related metrics, where deciding which assets are vulnerable to transition or physical risk is entity judgement with no external methodology to check against.

How to tackle it

  • Give it your documents, not just your question. Risk register, asset locations, strategy papers, risk appetite statement. Generic in, generic out.
  • Define the criteria yourself, then let AI apply them. Decide what "vulnerable to physical risk" means for your business, then use AI for the first pass of tagging assets against it, with a person checking.
  • Keep the ranking with your people. Which risks are material is your board's judgement, and the standard expects to see yours.
  • Get current data from tooling, not from the model's memory. Emission factors and climate datasets change, and a model's training data does not.

Get this right and the speed gains are real. With AI tooling working on its own data, SEE Group cut its climate risk assessment from 13 weeks to 2.

5. The audit expectations gap: the rules nobody publishes

This is the hardest gap to close, because the information does not exist anywhere AI could find it. What counts as acceptable proof of director training, how much documentation an excluded risk needs, how emissions working papers should be laid out: these vary between assurance firms and often between engagement teams within the same firm.

Auditors arguably have more influence over how ASRS works in practice than anyone else, and their interpretive differences are often what separates a smooth assurance process from a painful one. No model can tell you what your particular team will push on.

How to tackle it

  • Ask before you draft. Book a walkthrough with your assurance team early and bring specific questions: what evidence they will want for governance claims, how they want judgements documented, what format suits them for emissions workings.
  • Turn their answers into instructions. Record what they tell you and give it to the model as constraints for every draft. That is how you get AI working to your auditor's expectations rather than generic ones.
  • Write down every judgement as you make it. Including the risks you excluded and why. One sentence written at the time is far cheaper than reconstructing a rationale under audit pressure.
  • Get a review from someone who has seen assurance from the inside. Experience of a completed Group 1 assurance cycle is the closest substitute for knowing what your auditor will ask.

Run your own sample before your auditor does

All five gaps fail the same way: a claim that reads well with nothing a person can stand behind. So test it the way your auditor will. Pick five claims from your draft at random, and ask the person who owns each one to walk you from the sentence back to the source document. If they can, that claim is ready, whatever mix of AI and people produced it. If they cannot, you have found a gap while there is still time to fix it.

For the full breakdown of which parts of AASB S2 to own, automate or get help with, including the internal hours each resourcing model really takes, download our guide ASRS: To DIY or not to DIY? And where to use AI?

If you want a second pair of eyes on your draft before your auditor's first one, book a 30-minute call with the Trace team and we will run that sample with you.

Frequently asked questions

What are the main risks of using AI for ASRS reporting?

There are five: provenance gaps, where a correct number has no recorded path back to source; evidence gaps, where AI describes activity that never happened; the plausibility trap, where confident output is unverified; context gaps, where AI lacks your company data and licensed datasets; and audit expectations gaps, where it cannot know what your specific auditor wants.

Can AI-generated emissions figures be used as audit evidence?

Not on their own. Auditors sample individual line items and trace each back to a source document such as an invoice or fuel card statement. A figure produced in a chat session has no persistent trail for them to follow. AI can extract and check data, but the calculation and the link to source need to live somewhere an auditor can open and recalculate.

Can ChatGPT do climate scenario analysis for AASB S2?

It can help research and draft, but it should not supply the scenarios or parameters. Scenario sets such as NGFS, IPCC pathways and the IEA are revised periodically, and general AI tools cannot reliably tell you whether they are citing the current version. They can also produce plausible parameters that do not exist. Verify every source independently and keep the judgement with your team.

How do I find out what my auditor expects for ASRS?

Ask them directly, and early. Book a walkthrough before you start drafting and bring specific questions about governance evidence, how judgements should be documented and how emissions workings should be presented. Expectations vary between firms and engagement teams, and none of this is published, so the conversation is the only reliable source.

Can we fix governance evidence gaps after the reporting period ends?

Generally, no. Governance is assured in full from year one, and evidence that was not created at the time usually cannot be recreated afterwards. If climate oversight is not yet on your board agenda and minuted, the time to fix that is before the period closes, not when the auditor asks.

Trace is a climate reporting platform specialising in ISSB and AASB standards, helping businesses navigate mandatory climate disclosure with clarity and confidence.

Free ASRS resources to help you upskill & prepare

Just learning about ASRS

The ASRS Strategy On A Page

Start here if you're new to ASRS. Get a complete overview of what's required, key deadlines, and your step-by-step compliance roadmap in one visual guide.
Download now
See what others are doing?

The ASRS Pulse Report 2025

See how other Australian businesses are preparing. Benchmark your readiness against industry peers and learn from early adopters' experiences and challenges.
Download now
Ready to start implementing

The ASRS Prep pack 2025

Ready to take action? This comprehensive toolkit includes templates, checklists, and practical frameworks to begin your ASRS implementation immediately.
Download now
Asses your current position

AASB readiness assessment (free!)

Know exactly where you stand. Take this 5-minute assessment to identify your compliance gaps and get a personalised action plan for your business.
Download now

✉️ Newsletter: Climate Reporting Simplified.


This monthly edition unpacks what mandatory climate reporting really requires and how to minimise cost, disruption & confusion.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Newsletter:  Climate Reporting Simplified.
This monthly edition unpacks what mandatory climate reporting really requires and how to minimise cost, disruption & confusion.

💚 Don’t worry, we won’t spam!

London - Sydney

© Copyright 2026 Trace | All Rights Reserved