Sign in Subscribe
ISSB IFRS

The SLFRS era has begun. For Sri Lankan boardrooms, the time to act is now.

Sri Lanka’s SLFRS S1 and S2 requirements have moved sustainability reporting from a future consideration to a boardroom priority. This analysis examines what the new standards mean for companies and why boards need to act now.

Nachiketa Das

Nachiketa Das

— 10 min read
Share

In March 2024, the Institute of Chartered Accountants of Sri Lanka (ICASL) adopted SLFRS S1 (General Requirements for Sustainability-related Financial Information) and SLFRS S2 (Climate-related Disclosures) – Sri Lanka's version of the IFRS Sustainability Disclosure Standards issued by the International Sustainability Standards Board (ISSB). For the top 100 listed companies on the Colombo Stock Exchange (CSE), first mandatory reporting period began on 1 January 2025.

As of 1 January 2026, for the top 100 cohort, the year-one transitional relief based on a climate-first approach has ended and GHG Scope 3 reporting is live. SLFRS S1/S2 adoption now extends to all CSE Main Board companies. Remaining CSE-listed entities, excluding the Empower Board, must comply from 1 January 2027. Specified business enterprises (SBEs) with turnover exceeding Rs. 10 billion (for two consecutive years) come under mandatory reporting from 1 January 2028, followed by companies exceeding Rs. 5 billion from 1 January 2029. Empower Board entities and smaller businesses have until 2030 (see Figure 1).

Article content
Figure 1. SLFRS S1 & S2: phased mandatory adoption (2025 to 2030)

The CSE formalised these requirements through Circular No. 05/2024, effective 18 February 2025, amending Rule 7.53(i) to require SLFRS disclosures in annual reports, with approval from the Securities and Exchange Commission of Sri Lanka.

The real question is not whether SLFRS is coming, but how many Sri Lankan companies are genuinely ready for this level of investor-grade reporting?

The SLFRS S1/S2 are based on IFRS S1/S2 and structured around the four TCFD-aligned pillars: Governance, Strategy, Risk Management, and Metrics and Targets. They apply a financial materiality lens wherein disclosure is required for sustainability-related risks and opportunities that could reasonably be expected to affect an entity's cash flows, access to finance, and cost of capital.

Sri Lanka's exposure is not theoretical and there is strong case for urgency in adoption. The country is among the most climate-vulnerable in South Asia. Rising temperatures, extreme weather events, water scarcity, and coastal degradation are already affecting agriculture, tourism, apparel, and diversified conglomerates. At the same time, European regulatory requirements are restructuring market access for Sri Lankan exporters. The EU Deforestation Regulation (EUDR), the Corporate Sustainability Due Diligence Directive (CSDDD), and the Carbon Border Adjustment Mechanism (CBAM) are already live or approaching fast – and they are shaping commercial terms.

Global Movement Towards Standardisation

Sri Lanka is not acting in isolation. As of April 2026, 28 jurisdictions have adopted or are implementing IFRS S1 and S2 on a mandatory or voluntary basis, with a further 12 having committed to future adoption.

Australia mandated AASB S1/S2 from 1 January 2025, with its second group of entities (revenue above AUD 200 million) entering the mandatory cycle from 2026. Singapore's SGX mandated ISSB-aligned climate reporting for all listed issuers on a phased basis. Hong Kong's HKEX adopted HKFRS S1 and S2 for Main Board issuers from FY2025, with full mandatory reporting from 2026. In Asia, Korea's Sustainability Standards Board issued KSDS 1 and KSDS 2 in February 2026, directly based on IFRS S1 and S2. Brazil's securities regulator, the CVM, mandated ISSB-aligned climate disclosures for listed companies from FY2026. Chile, Qatar, and Mexico implemented ISSB-aligned rules effective 2026. Nigeria and Turkey have adopted them outright. The UK, Japan, Canada, and Malaysia are in active mandatory cycles.

SLFRS is not a peripheral experiment. ISSB-aligned disclosures are becoming the common language institutional investors use to assess emerging and frontier market exposures.

Sri Lankan companies that build credible SLFRS-aligned disclosures are, by definition, building toward the standard that institutional investors, credit rating agencies, and global supply chain counterparties are using as their primary lens for sustainability risk assessment.

Three Regulatory Obligations, One Data Infrastructure

For Sri Lankan companies with European customers, investors, or counterparties, the sustainability reporting challenge is not one standard. It is an intersecting set of requirements and understanding how they connect is strategically important.

SLFRS S1/S2 are direct adoptions of IFRS S1/S2. This means Sri Lankan companies can directly apply the formal interoperability guidance published by the IFRS Foundation and EFRAG in May 2024. That guidance maps IFRS S1/S2 requirements against the European Sustainability Reporting Standards (ESRS) underpinning the EU's Corporate Sustainability Reporting Directive (CSRD). The mapping shows that companies meeting IFRS S1/S2 requirements substantially satisfy ESRS 2 general disclosure requirements and ESRS E1 climate disclosures.

A single report built to SLFRS standard covers most of what European counterparties require.

One difference that matters. ESRS applies double materiality: both impact materiality (the company's effects on people and environment) and financial materiality (sustainability effects on the company). SLFRS and IFRS apply only financial materiality. Sri Lankan companies with European supply chain exposure will need supplemental impact materiality disclosures to satisfy European counterparties, beyond what SLFRS alone requires. The ESRS social standards on workforce, supply chain workers, affected communities, and consumers have no IFRS equivalent and represent an additional disclosure layer for companies supplying into European markets. The revised ESRS framework, targeting application from financial years beginning 1 January 2027, brings these standards closer to the IFRS S1/S2 structure, but gaps remain.

The CBAM exposure sharpens the urgency further. The EU Carbon Border Adjustment Mechanism entered its definitive compliance phase on 1 January 2026, ending the transitional period that ran from October 2023. Importers of iron and steel, aluminium, cement, fertilizers, electricity, and hydrogen into the EU must now purchase certificates corresponding to the embedded carbon content of their goods. Where actual embedded carbon cannot be demonstrated, default emission values apply – values that rose 10% in 2026, will rise 20% in 2027, and 30% from 2028.

Relying on default emission values is not a neutral option. It is a cost escalation path with a defined upward trajectory.

Currently the apparel sector, Sri Lanka’s primary export to the EU, remains outside of CBAM scope. But on 12 June 2026, the EU Council agreed to extend CBAM to selected downstream manufactured products, with anti-circumvention measures. Organic chemicals and polymers, including plastics, are widely seen as potential candidates for CBAM expansion in the medium term; further widening exposure for Sri Lanka's industrial exporters who process CBAM-covered materials in their production chains.

Scope 1 and 2 GHG data required by SLFRS S2 is exactly the carbon accounting that CBAM demands at a product and process level. Building that infrastructure to SLFRS S2 standard addresses both requirements. Sri Lankan companies that recognise this will build once and satisfy multiple regulatory demands simultaneously. Those that do not will end up funding two separate remediation exercises.

What Sri Lankan Companies Will Actually Face: Lessons From BRSR Core Implementation In India

The assurance clock is running in parallel, and most companies are not ready. The Sri Lanka Standard on Sustainability Assurance 5000 (SLSSA 5000), based on ISAE 5000 published by IFAC in November 2024, becomes effective for periods beginning on or after 15 December 2026. The first cohort of mandatory reporters will face an independent assurance within twelve months of their initial disclosures. Most companies have not begun preparing for this.

India is the closest comparator of the implementation challenges that Sri Lanka can expect. SEBI mandated BRSR Core on a phased basis: the top 150 companies by market capitalisation from FY2023-24, top 250 from FY2024-25, top 500 from FY2025-26, and top 1,000 from FY2026-27. Critically, India requires reasonable assurance on BRSR Core metrics, placing it among the most rigorous ESG assurance regimes globally.

Three cohorts of Indian companies have now completed the exercise, and these are some key learnings.

Data governance and traceability. The largest underestimated challenge has been quality and traceability of underlying data. Indian companies found that sustainability metrics (GHG emissions, energy consumption, water use, workforce safety data) were scattered across operational systems, managed by different functions with inconsistent definitions and methodologies. When auditors asked for the evidence trail behind an individual KPI – who collected it, by what method, when, verified by whom – many companies could not answer. Data existed. Data governance did not. Auditors are specifically assessing not just reported figures, but the systems, controls, and documentation trails behind each disclosure. Who owns the data, how it is collected, how it is verified at source, and how errors are detected and corrected.

Existing enterprise systems were not configured for sustainability data. Most enterprise systems used by companies were not built to capture non-financial operational data at the granularity sustainability reporting requires. Energy consumption by facility, water use by process, emissions factors by fuel type, waste quantities by disposal route; these need purpose-configured data pipelines, not manual spreadsheets. Companies that built sustainability reports from spreadsheets found the audit trail insufficient for assurance purposes. The infrastructure gap runs deeper than most finance teams expect when they first engage with it.

Value chain complexity. Initially, SEBI required the top 250 listed companies to obtain assurance on value chain BRSR Core disclosures from FY2024-25. In practice, this proved unworkable. First-tier suppliers lacked the awareness, systems, or capacity to provide accurate data. Based on industry consultation, SEBI made value chain disclosures voluntary for FY2025-26, deferring assurance or assessment requirement to FY2026-27. Sri Lankan apparel companies supplying into Europe face similar value chain data demands from buyers that will arrive ahead of any local regulatory requirement. Deferring value chain readiness is not a strategy Sri Lankan companies can afford to replicate.

Assurance provider quality varied significantly. Without standardised training or recognised ESG assurance credentials, some third-party opinions were technically compliant but not investor-grade. The quality of the assurance opinion is a direct reflection of the quality of the underlying control environment; and both require deliberate construction, not assumption.

A South Asian Federation of Accountants (SAFA) study, drawing on 182 respondents across South Asia, corroborated these findings at a regional level: financial and HR limitations, technological constraints, data gaps, and cultural resistance were the most cited barriers, with manufacturing sector entities facing significantly greater difficulty than service sector companies.

The Assurance Challenge Is Deeper Than It Looks

Financial reporting rests on infrastructure built over decades: a defined chart of accounts, established cut-off procedures, audit trails from transaction to ledger to financial statement, and a three-lines-of-defence governance model. Sustainability reporting has none of this by default. It must be constructed.

The first line: management controls that collect data accurately at source, with defined ownership, documented methodology, and contemporaneous evidence. The second line: risk and compliance functions that independently check data quality before disclosure. The third line: internal audit with the scope, technical competence, and mandate to test sustainability controls with the same rigour applied to financial processes.

Data quality step-change required for credible assurance is substantial. Defining consistent methodologies for each sustainability metric and building automated data collection pipelines that reduce reliance on manual compilation. Establishing formal review and sign-off processes at operational level and creating reproducible audit trails. And most importantly training the finance function to own sustainability data with the same discipline as financial data. This is an 18-to-24-month infrastructure build, not a quarter-end exercise.

Sri Lankan companies that engage their external auditors and internal audit functions now – before the SLSSA 5000 effective date forces the conversation – will have the option of co-designing a control environment that is both credible and efficient. Those that wait will be building under pressure, with higher remediation costs and greater risk of a materially qualified first disclosure.

Addressing The Challenges: Build For Credibility, Not Compliance

Compliance is the floor, not the ceiling.

Only 20% of a company's market capitalisation is typically represented by the net assets on its balance sheet. The remaining 80% (brand, customer relationships, regulatory standing, ESG positioning) is intangible and is increasingly priced by investors and lenders. SLFRS S1/S2 changes how it is disclosed and tested. Companies that have navigated ISSB-aligned implementation well share one trait. They did not treat this as a reporting project. They treated it as a data and governance transformation.

For Sri Lankan companies seeking SLFRS S1/S2 compliance, this is what your 5-point roadmap should look like:

  1. Starting point is a structured materiality assessment that is owned by the board. SLFRS S1's financial materiality threshold is specific: disclosure is required for risks and opportunities that could reasonably affect an entity's prospects. Identifying what meets that threshold and building the evidence to justify the assessment is a strategic exercise that sets the scope for everything that follows.
  2. Second step is a data gap assessment. Mapping current disclosure capability against SLFRS S1/S2 requirements will identify where data does not exist, where proxies are needed in the near term, and where systems investment is required. SLFRS provided first-year reliefs to create a manageable runway. The relief period is over and there is no substitute for building the underlying data infrastructure for subsequent years.
  3. Governance cannot wait for data readiness. Boards need formal oversight of sustainability risk with a direct link to financial strategy. CFOs need to own sustainability data quality the way they own financial reporting quality. In companies that have done this well, sustainability is not a separate reporting track. It is integrated into the enterprise risk management and financial planning cycle.
  4. Interoperability opportunity is concrete. Sri Lankan companies with European exposure should use the ESRS-IFRS Foundation mapping to understand exactly where SLFRS disclosures satisfy European counterparty requirements, and where supplemental impact materiality disclosures are needed. Build Scope 1 and 2 GHG data to SLFRS S2 standard in parallel with CBAM carbon accounting requirements — one investment, two obligations.
  5. Finally, engage external auditors and internal audit before SLSSA 5000's effective date, not after it forces the conversation.

The SLFRS implementation window will not remain open indefinitely. For export-facing companies, the commercial case is direct, and the early-mover advantage is tangible: more credible data, stronger governance and broader access to sustainability-linked capital.

For Sri Lanka's top 100 CSE-listed entities, the SLFRS era began in January 2025. For the rest, the countdown is already running.

References

Read more