The ESG Readiness Gap: Why Most Sri Lankan Listed Companies Are Behind Schedule

Sri Lanka's listed companies are facing a compliance deadline most are not prepared for. With the CSE mandate extending SLFRS S1 & S2 requirements to all main board companies from January 2026, the readiness gap in the market is significant — and for most organisations, the gap is wider than leadership realises.

Understanding exactly where companies are falling short — and why — is the first step toward closing that gap before it becomes a regulatory and reputational problem.

The scale of the gap

Research into ESG reporting among Sri Lankan listed companies reveals a market that has largely treated sustainability disclosure as voluntary, supplementary, or aspirational. The shift to mandatory, structured, and financially-material disclosure under SLFRS S1 & S2 represents a fundamental change in what is required — and most companies have not yet made that shift.

A striking indicator: across all listed companies in Sri Lanka, only around 54 corporates have the data systems and processes in place to report Scope 1 (direct) greenhouse gas emissions with confidence. Scope 1 disclosure is among the most basic requirements under SLFRS S2. If fewer than 54 companies can report this one data point reliably, the readiness gap across the full set of disclosure requirements is substantial.

ESG reporting in Sri Lanka has historically been self-regulated and voluntary. Many listed companies include a section on corporate social responsibility or community initiatives in their annual reports, but this is not the same as a structured, auditable sustainability disclosure under SLFRS S1 & S2. The jump between the two is significant.

The five failure points

1. No systematic data collection

SLFRS S2 requires quantitative disclosures on energy consumption, greenhouse gas emissions (Scope 1 and 2 at minimum), water use, and waste. Most Sri Lankan companies have never collected this data systematically. It exists in invoices, utility bills, and operational records — but has never been aggregated, converted into standard units, or tracked over time.

Without historical data, there is no baseline. Without a baseline, there are no targets. Without targets, there is no disclosure of progress. The data problem is upstream of everything else.

2. Governance not on paper

SLFRS S1 requires companies to disclose how the board oversees sustainability risks and how management identifies, assesses, and manages them. This is a governance documentation requirement, not just a reporting one.

In most Sri Lankan listed companies, sustainability governance exists informally — a board member may have personal interest in the topic, or the CEO may direct relevant initiatives. But the formal structures that SLFRS S1 requires — board committee mandates, risk register integration, documented management processes — have not been put in writing. What is not documented cannot be disclosed.

3. Sustainability work not connected to financial materiality

SLFRS S1 & S2 are financially-oriented standards. They require companies to disclose sustainability-related risks and opportunities that could affect the company's financial position, performance, and cash flows. This is materially different from listing CSR activities.

Many Sri Lankan companies have genuine sustainability work underway — renewable energy investments, waste reduction programmes, community development initiatives. But this work has not been assessed for financial materiality and has not been connected to strategy, risk management, or investor-relevant outcomes. The standard requires that connection. Most companies have not made it.

4. No cross-functional ownership

ESG reporting draws on data and decisions from multiple departments: finance (energy costs, capex on sustainability initiatives), operations (energy consumption, emissions), HR (workforce data, health and safety), procurement (supply chain risk), and facilities (waste, water). Without a designated owner who can coordinate across these functions and hold the process together, the data collection does not happen.

In practice, ESG reporting often gets assigned to corporate communications, legal, or the company secretary — functions that do not have the operational reach or technical background to gather the data the standard requires. The result is a disclosure that covers what is available, not what is required.

5. Confusing "ESG communication" with "ESG disclosure"

There is a meaningful difference between writing about sustainability and making a structured ESG disclosure. A narrative describing the company's commitment to the environment is not a disclosure. A structured section that identifies material climate risks, explains how they are managed, and reports progress against quantitative targets is a disclosure.

Many companies — and many advisers — have conflated the two. The result is annual reports that have an ESG "section" but do not contain SLFRS-compliant disclosures. Regulators and investors are increasingly able to distinguish between the two.

Greenwashing: the reputational risk layer

The readiness gap creates a secondary risk beyond non-compliance. Companies that publish ESG claims they cannot substantiate — either because their data is weak or their governance is informal — face growing reputational and legal exposure as scrutiny of ESG claims increases globally and locally.

The Securities and Exchange Commission of Sri Lanka has issued guidance on ESG investing. Institutional investors are increasingly applying ESG screens. And assurance providers — auditors engaged to provide limited or reasonable assurance on sustainability disclosures — will flag unsubstantiated claims in ways that are publicly visible.

The safe path is not to claim less, but to disclose what is true, documented, and verifiable — and to present it in the structured format the standard requires.

What does "ready" actually look like?

A company that is genuinely ready for SLFRS S1 & S2 compliance has the following in place:

• A documented data collection process for Scope 1 and Scope 2 GHG emissions, energy consumption, water, and waste — with at least one year of historical data.
• A board-level governance structure for sustainability oversight — whether through a dedicated committee, a board mandate, or documented board agenda items — that is written down and auditable.
• A materiality assessment identifying which sustainability topics represent financially material risks or opportunities for the specific business.
• A documented risk management process showing how climate and sustainability risks are identified, assessed, and managed — and how this connects to the company's broader enterprise risk framework.
• Draft disclosure sections — not just data — that structure the above into the four-pillar format (governance, strategy, risk management, metrics and targets) required by SLFRS S1 & S2.

Most listed companies in Sri Lanka can tick none of these boxes today. Some can tick one or two. Very few can tick all five.

Closing the gap before the deadline

The 2026 deadline is immediate for companies with a January–December financial year. A full ESG readiness engagement — gap assessment, data collection support, governance documentation, and disclosure writing — typically requires 8–16 weeks. That leaves no room for companies that are starting from zero to delay further.

The companies that will produce credible, compliant disclosures for their 2026 annual reports are the ones that start the process now: identifying gaps, assigning ownership, beginning data collection, and getting their governance structures on paper.

The ESG readiness gap in Sri Lanka is real and well-documented. But it is also closable — with the right process, the right expertise, and enough lead time to do the work properly.