Ask an underwriter where a counterparty’s flood exposure figure came from, and most can answer. Ask where its sustainability score came from, and the trail often goes cold somewhere between a spreadsheet and a survey response from two years ago.
That gap is about to become a live assurance problem, not a background one.
ISSA 5000, the new global baseline for sustainability assurance, applies to engagements on sustainability information reported for periods beginning on or after 15 December 2026. For the first time, sustainability disclosures will be tested with the same rigour, independence and documentation standard as financial audit.
Assurance Changes What “Good Data” Means
Under a principles-based assurance regime, a number on a page isn’t enough. Auditors will expect to trace it: what was the source, what method converted it into a score, and what happens when the source data is incomplete.
For insurers and reinsurers, this lands directly on portfolio risk work. Sustainability metrics increasingly feed into:
- Underwriting risk assessment and pricing models
- Solvency II and ORSA capital and reserving decisions
- SFDR, TNFD and TCFD-aligned disclosures to regulators and investors
If those inputs can’t be traced back to their evidence, the assurance conclusion sitting on top of them is at risk too.
The Provenance Problem in Private-Market Portfolios
Large listed counterparties publish audited disclosures. The private and mid-market companies insurers underwrite, reinsure and hold in investment portfolios mostly don’t, not because the information doesn’t exist, but because it sits fragmented across websites, filings and policy documents that were never built for comparability.
That fragmentation is where lineage breaks down. A risk team assembling scores from multiple manual sources, updated at different times by different people, usually can’t reconstruct, six months later, exactly which evidence sat behind which number.
What Defensible Lineage Actually Looks Like
Public Disclosure Analysis was built around this exact requirement. Every score sits on a 120-metric, SASB-aligned framework across 11 sectors and 77 industries, benchmarked against a sector baseline of double-verified data across a minimum of 1,000 companies per sector.
Where a company’s own reported evidence exists (disclosures, policy documents, sustainability reports) that evidence is the primary input. Where it doesn’t, a nearest-neighbour, best-fit similarity analysis fills the gap against comparable companies, and that substitution is flagged, not hidden. A risk or compliance team can always see which figures are the company’s own evidence and which are modelled estimates standing in for it.
What This Means for Insurance Portfolios
As assurance requirements tighten, the question shifts from “is the score plausible” to “can you show your working.” Portfolios built on scores without a visible evidence trail will be harder to defend under review, regardless of how the underlying number looks. Public Disclosure Analysis gives underwriting, risk and compliance teams a structured, auditable trail behind every metric: evidence type, source and disclosure strength, traceable back to source, not just a black-box score.
Explore Public Disclosure Analysis
Talk to our team about how Public Disclosure Analysis supports defensible, assurance-ready portfolio data.
