Implementation Roadmap

Compliance scope — who is bound

UK SRS compliance applies to approximately 500 companies under the FCA's proposed mandatory scope in Consultation Paper CP26/5.
The scope covers listed issuers across five UK Listing Rules (UKLR) categories:

• UKLR 6 — Commercial companies (the largest category, including most FTSE companies)
• UKLR 14 — Secondary listings of overseas companies
• UKLR 15 — Depositary receipts
• UKLR 16 — Non-equity shares
• UKLR 22 — Transition category companies

Out of scope: UKLR 11 (closed-ended investment funds) and UKLR 12 (open-ended investment companies) are excluded from CP26/5 proposals.
Private companies are not currently in scope
but may be included in future under the Modernising Corporate Reporting (MCR) programme consultation expected later in 2026.

Compliance basis — what's mandatory vs comply-or-explain

The proposed UK SRS compliance framework follows a phased approach with different requirements for different standards:

UK SRS S2 (Climate-related Disclosures):

• Mandatory from accounting periods beginning on or after 1 January 2027
  
• All four pillars (governance, strategy, risk management, metrics and targets) required
  
• Scope 1 and 2 emissions mandatory
  
• Scope 3 emissions: comply-or-explain basis with optional one-year deferral (CP26/5 paragraph 4.6)

UK SRS S1 (General Requirements):

• Comply-or-explain from accounting periods beginning on or after 1 January 2027
  
• Optional two-year deferral available (so latest mandatory application 1 January 2029)
  
• Where climate-first relief is used, companies cannot assert full compliance with UK SRS S1
  and must disclose use of the relief (UK SRS S1 paragraphs 73A-73B)

Transition plan disclosures:

• Must state whether and where a transition plan has been published
  
• No requirement to publish a plan if one does not exist

Assurance disclosures:

• Must state whether voluntary assurance has been obtained (CP26/5 paragraph 7.6)
  
• No mandatory assurance proposed at this stage
  
• Where assurance is obtained, must disclose provider, scope, standards used, and location (CP26/5 paragraph 7.7)

Implementation timeline and readiness

Compliance governance — structures and oversight

Effective UK SRS compliance requires board-level governance with clear accountability and management structures:

Board oversight requirements (UK SRS S1 paragraphs 5-8, UK SRS S2 paragraphs 5-6):

• Oversight of sustainability-related (S1) or climate-related (S2) risks and opportunities
• Integration of sustainability oversight into existing governance structures
• Board skills and competencies relevant to sustainability matters
• How sustainability matters inform strategy, business model, and value creation

Management responsibility:

• Designated management roles for sustainability reporting
• Clear lines of accountability from board to operational teams
• Integration with existing risk management and internal control systems
• Regular reporting to board on sustainability performance and risks

Committee structures — practical options:

• Existing audit committee expansion — most common approach, leverages reporting oversight expertise
• Dedicated sustainability committee — appropriate for companies with significant sustainability exposures
• Risk committee integration — natural fit where climate and sustainability risks are material
• Nomination committee role — oversight of board sustainability competencies and succession

Documentation requirements:

• Terms of reference updated to include sustainability oversight
• Board and committee meeting minutes documenting sustainability discussions
• Skills matrices showing sustainability competencies
• Management reporting packs including sustainability metrics and risks

Compliance gap analysis — what to assess

A comprehensive gap analysis maps current sustainability reporting and governance against UK SRS requirements. Key assessment areas:

Current reporting baseline:

• Existing TCFD-aligned disclosures (most listed companies already have some climate reporting)
• Section 414CB Companies Act climate disclosures
• SECR (Streamlined Energy and Carbon Reporting) data
• Voluntary sustainability reports and frameworks (GRI, SASB, etc.)

UK SRS S2 gap assessment:

• Governance: Board oversight, management roles, skills, strategy integration
• Strategy: Business model impacts, scenario analysis, transition planning, financial quantification
• Risk management: Process integration, climate risk identification and assessment
• Metrics and targets: Scope 1/2/3 emissions, cross-industry metrics, industry-based metrics, targets

UK SRS S1 gap assessment (for comply-or-explain readiness):

• Materiality assessment processes and outcomes
• Sustainability topic identification beyond climate
• Four-pillar disclosure framework for non-climate topics
• Connectivity with financial statements and business model

System and process gaps:

• Data collection capabilities for UK SRS metrics
• Internal controls over sustainability information
• Management information systems and reporting cycles
• Document retention and audit trail procedures

Compliance data infrastructure — systems and processes

UK SRS compliance demands robust data infrastructure to collect, validate, and report sustainability information to financial reporting standards:

Scope 1 and 2 emissions systems:

• Energy consumption data collection (electricity, gas, fuel)
• Emissions factor databases and update procedures
• Facility-level data aggregation and consolidation
• Integration with SECR reporting systems where possible
• Monthly or quarterly data collection cycles for accuracy

Scope 3 emissions infrastructure (comply-or-explain basis):

• Supplier engagement programmes for Category 1 (Purchased goods and services)
• Logistics data for Categories 4 and 9 (Upstream and downstream transportation)
• Asset-level data for Category 2 (Capital goods) and Category 13 (Downstream leased assets)
• Customer usage data for Category 11 (Use of sold products) where applicable
• Financial institutions: financed emissions under Categories 15 and PCAF methodology

Cross-industry climate metrics (UK SRS S2 paragraphs 29(b)-(g)):

• Transition risk exposure and financial impact quantification
• Physical risk exposure including acute and chronic risks
• Climate-related opportunity identification and quantification
• Capital deployment tracking for climate-related investments
• Internal carbon price usage and application
• Executive remuneration linkage to climate performance

Data quality and controls:

• Source documentation and audit trails
• Data validation and reconciliation procedures
• Third-party data verification where material
• Management review and sign-off processes
• Error correction and restatement procedures

Technology considerations:

• Integration with existing ERP and financial reporting systems
• Sustainability-specific software platforms where needed
• Data warehouse and business intelligence capabilities
• Management reporting dashboards and analytics
• Document management and version control systems

Compliance reporting cycle — annual rhythm

UK SRS compliance operates on the same cycle as financial reporting, requiring integration with existing annual report production processes:

Year-end data collection (January-March):

• Finalise Scope 1 and 2 emissions for reporting period
• Complete Scope 3 data collection and validation
• Update scenario analysis and climate risk assessments
• Prepare cross-industry metrics calculations
• Conduct management review and sign-off on sustainability data

Annual report drafting (March-May):

• Integrate sustainability disclosures with Strategic Report
• Ensure connectivity between sustainability and financial information
• Draft governance, strategy, risk management, and metrics sections
• Coordinate with financial statement preparation and auditing
• Prepare management representation letters for sustainability information

Assurance process (April-June):

• Engage voluntary assurance providers where planned
• Provide assurance documentation and evidence
• Respond to assurance provider queries and recommendations
• Review assurance reports and management letters
• Update disclosures based on assurance findings

Publication and filing (May-July):

• Board approval of annual report including sustainability disclosures
• Publication via RNS and company website
• Filing with Companies House and regulatory authorities
• Communication to investors and stakeholders
• Post-publication review and lessons learned

Continuous improvement (August-December):

• Review disclosure effectiveness and stakeholder feedback
• Update systems and processes based on experience
• Monitor regulatory guidance and best practice developments
• Plan data collection improvements for following year
• Board and management capability development

Compliance documentation — records and audit trail

UK SRS disclosures are subject to the same documentation standards as financial reporting, requiring comprehensive audit trails and supporting evidence:

Source documentation requirements:

• Energy bills, fuel receipts, and consumption records for Scope 1 and 2 emissions
• Supplier questionnaires, invoices, and third-party data for Scope 3 emissions
• Board meeting minutes documenting sustainability governance discussions
• Management reports and analysis supporting strategy and risk management disclosures
• External research, scenario analysis, and modelling documentation

Internal control documentation:

• Policies and procedures for sustainability data collection and validation
• Data flow charts and system integration documentation
• Review and approval procedures at entity and consolidated levels
• Error correction and restatement procedures
• Management representation letters and certifications

Assurance documentation:

• Assurance provider engagement letters and scope agreements
• Management representation letters to assurance providers
• Assurance working papers and evidence files
• Assurance reports and management letters
• Management responses to assurance recommendations

Regulatory documentation:

• Materiality assessment documentation and updates
• Comply-or-explain justifications where reliefs are used
• Transition plan documentation where published
• Board skills assessment and capability development records
• Gap analysis reports and remediation plans

Retention requirements:

• Seven-year retention period consistent with financial records
• Secure storage with access controls and version management
• Regular backup and disaster recovery procedures
• Audit trail documentation for any changes or corrections

Compliance assurance — voluntary basis and ISSA (UK) 5000

UK SRS assurance is voluntary under the FCA's CP26/5 proposals, but disclosure about assurance is mandatory:

Assurance disclosure requirements (CP26/5 paragraph 7.6-7.7):

• Statement of whether third-party assurance has been obtained
• Where assurance is obtained: provider identity, scope of assurance, assurance standards used, location of assurance report
• No requirement to explain reasons for not obtaining assurance

ISSA (UK) 5000 framework:

• UK adaptation of international sustainability assurance standard ISSA 5000
• Effective for periods beginning on or after 15 December 2026
• Profession-agnostic: applies to audit firms, consultancies, and other assurance providers
• Covers both limited and reasonable assurance engagements

Practical assurance considerations:

• Scope selection: Focus on material metrics and forward-looking information
• Provider selection: Balance technical expertise with cost and availability
• Timing: Early engagement essential given provider capacity constraints
• Integration: Coordinate with statutory auditors on overlapping areas
• Cost: Budget £50,000-£200,000+ depending on scope and complexity

Assurance readiness steps:

• Implement robust internal controls over sustainability data
• Prepare comprehensive source documentation and audit trails
• Conduct management review and sign-off procedures
• Engage assurance providers during planning stage
• Develop expertise in assurance standards and expectations

Compliance risk management — penalties and safe harbour

UK SRS compliance involves regulatory enforcement risk balanced by statutory safe harbour protections:

FCA enforcement powers:

• Listing Rules enforcement including censure and financial penalties
• Market abuse investigation powers where disclosure failures are material
• Public censure with reputational impact and market consequences
• Potential suspension of securities in cases of serious non-compliance

Civil and criminal liability exposure:

• Directors' duties under Companies Act 2006 section 172 (stakeholder considerations)
• Strategic Report disclosure obligations under sections 414A-414D
• Potential civil claims where sustainability misstatements cause investor loss
• Criminal liability under Companies Act 2006 for knowingly false statements

Section 463 safe harbour protection: UK SRS disclosures benefit from statutory liability protection under Companies Act 2006 section 463:

• Protection applies to Strategic Report disclosures (where UK SRS content is located)
• Covers liability for compensation arising from untrue or misleading statements
• Excludes liability for statements known to be untrue or made recklessly
• Excludes criminal liability or directors' disqualification
• Only protects directors, not the company itself

Risk management strategies:

• Comprehensive internal controls over sustainability data quality
• Regular board review and oversight of sustainability reporting
• Management representation procedures and sign-off processes
• Professional advice on complex technical areas
• Voluntary assurance to provide additional comfort and credibility
• Director and officer insurance review to confirm sustainability reporting coverage

Compliance interaction with other regimes

UK SRS compliance does not replace other UK sustainability reporting requirements — companies must plan for parallel compliance:

SECR (Streamlined Energy and Carbon Reporting):

• Remains mandatory under SI 2018/1155 for large companies
• Annual energy and carbon disclosure in Directors' Report
• Different scope, metrics, and location from UK SRS
• Possible rationalisation: DESNZ committed to "consider" interaction but no changes confirmed
• Planning approach: Budget for full separate compliance with both regimes

Companies Act section 414CB climate disclosures:

• UK SRS S2 provides safe harbour: Government confirmed that companies reporting under UK SRS S2 satisfy existing section 414CB requirements
• Streamlines compliance burden for listed companies
• Private companies may still need separate 414CB compliance

TCFD-aligned disclosures:

• Replaced by UK SRS S2 for in-scope listed companies from 1 January 2027
• Current TCFD disclosures provide baseline for UK SRS gap analysis
• Companies can cease TCFD-specific compliance when UK SRS S2 becomes mandatory

ESOS (Energy Savings Opportunity Scheme):

• Phase 4 compliance required by 5 December 2027
• Data synergies: ESOS energy audits support UK SRS Scope 1 and 2 emissions baselines
• Timing coordination: ESOS qualification period (1 January 2027 - 31 December 2030) overlaps with UK SRS implementation
• Planning approach: Use ESOS energy data infrastructure to support UK SRS compliance

Overseas compliance (for international groups):

• EU Corporate Sustainability Reporting Directive (CSRD) for EU subsidiaries or operations
• ISSB-aligned requirements in other jurisdictions
• SEC climate disclosure rules for US-listed parents or subsidiaries
• Coordination opportunity: UK SRS alignment with IFRS S1/S2 reduces burden for multinational reporters

Preparing your compliance programme

Whether mandatory application begins in January 2027 or later, early preparation provides strategic advantages including longer development time, stakeholder positioning, and competitive differentiation.

Phase 1: Foundation (6-12 months before mandatory application)

1. Conduct comprehensive gap analysis against UK SRS S1 and S2 requirements
2. Establish board governance structures with clear sustainability oversight mandate
3. Design data infrastructure for sustainability metrics and internal controls
4. Engage professional advisers including legal, technical, and assurance support
5. Develop project management framework with clear timelines and accountability

Phase 2: Implementation (6-18 months before mandatory application)

1. Build data collection capabilities with emphasis on Scope 3 emissions infrastructure
2. Integrate sustainability governance into existing risk management and reporting systems
3. Conduct scenario analysis appropriate to business model and sector exposure
4. Prepare management information systems for board and committee oversight
5. Engage voluntary assurance providers and scope initial assurance approach

Phase 3: Testing and refinement (3-6 months before mandatory application)

1. Complete trial reporting against UK SRS requirements to identify gaps and issues
2. Test internal controls over sustainability data quality and validation
3. Review board and management capabilities for ongoing compliance and oversight
4. Finalise assurance arrangements with chosen providers and agreed scope
5. Update policies and procedures based on trial reporting experience

Phase 4: Go-live and continuous improvement (ongoing from mandatory application)

1. Deliver first mandatory reports integrated with annual report production cycle
2. Monitor regulatory guidance and policy statement developments from FCA
3. Review stakeholder feedback and disclosure effectiveness annually
4. Benchmark against peer companies and evolving market practice
5. Plan for future requirements including possible UK SRS S1 mandatory application

Industry-specific considerations

UK SRS compliance requirements apply consistently across the 515 in-scope companies, but implementation approaches vary significantly by sector:

Financial services firms (banks, insurers, asset managers):

• Financed emissions calculations under UK SRS S2 paragraphs B58-B63 require portfolio-level data
• PCAF Partnership for Carbon Accounting Financials data quality framework applies
• Existing PRA SS3/19 climate risk management provides governance foundation
• Climate stress testing capabilities support scenario analysis requirements
• Asset-level exposure data needed for transition and physical risk quantification

Manufacturing and industrial companies:

• Direct operational emissions typically well-established through existing SECR compliance
• Supply chain Scope 3 emissions require extensive supplier engagement programmes
• Energy intensity metrics and decarbonisation targets central to transition planning
• Physical risk assessment requires asset-level climate hazard analysis
• Industrial process emissions may require specialist measurement and verification

Retail and consumer goods:

• Value chain emissions spanning raw materials, production, distribution, and end-of-life
• Brand reputation considerations create heightened stakeholder scrutiny
• Customer behaviour assumptions critical for Scope 3 use-of-sold-products calculations
• Supply chain due diligence capabilities support Scope 3 data quality
• Store energy consumption and logistics emissions provide Scope 1 and 2 baseline

Real estate and construction:

• Building energy performance and embodied carbon central to business model
• Tenant engagement programmes necessary for complete emissions accounting
• Development pipeline climate resilience assessment for physical risk disclosure
• Green building certification integration with sustainability metric reporting
• Property valuation impacts from climate transition and physical risks

Technology and telecommunications:

• Data centre energy consumption and renewable energy sourcing central to emissions profile
• Product lifecycle assessment capabilities support comprehensive Scope 3 reporting
• Rapid business model evolution requires forward-looking scenario analysis
• Supply chain complexity particularly in electronics manufacturing
• Digital solution environmental benefits may feature in opportunity disclosure

Technology and systems architecture

Effective UK SRS compliance requires integrated technology architecture spanning data collection, validation, reporting, and governance:

Core sustainability data platform:

• Centralised repository for emissions data, scenario analysis, and sustainability metrics
• Integration with operational systems (ERP, procurement, facilities management)
• Automated data validation and quality scoring capabilities
• Audit trail functionality for regulatory and assurance requirements
• Version control for methodology changes and restatements

Leading platform providers include:

• Enterprise solutions: Workiva, Sphera, Enablon, SAP Sustainability Control Tower
• Specialist emissions platforms: Persefoni, Plan A, Greenstone, Watershed
• Financial services focused: Moody's ESG Solutions, MSCI ESG Research, Sustainalytics
• Integrated ERP modules: SAP S/4HANA Sustainability, Oracle Cloud Sustainability

Data architecture requirements:

• Real-time or near-real-time data feeds from operational systems
• Supplier portal integration for value chain data collection
• External data integration (climate scenarios, emission factors, regulatory databases)
• Management reporting dashboards with drill-down capabilities
• Integration with financial reporting consolidation systems

Security and governance controls:

• Role-based access controls aligned with data governance policy
• Data encryption in transit and at rest
• Regular backup and disaster recovery capabilities
• Change management procedures for system updates and methodology changes
• Documentation management for audit and assurance requirements

Cost planning and resource allocation

UK SRS compliance represents a significant incremental investment for most in-scope companies. Typical cost categories and ranges based on company size and complexity:

Personnel costs (typically largest component):

• Programme director/manager: £80,000-£150,000 annually plus benefits
• Technical specialist roles: £60,000-£120,000 annually for emissions/scenario analysis expertise
• Data analyst/coordinator roles: £40,000-£70,000 annually for data collection and validation
• Project management: £500-£1,500 per day for specialist programme coordination
• Incremental finance/IR/legal time: 15-25% FTE for integrated reporting preparation

Technology and systems costs:

• Enterprise sustainability platform licensing: £50,000-£500,000 annually depending on scope
• Implementation and integration: £100,000-£1,000,000 one-time depending on complexity
• Data platform development: £200,000-£2,000,000 for comprehensive integrated architecture
• Ongoing support and maintenance: 15-20% of initial implementation cost annually

External advisory and assurance:

• Legal and regulatory advice: £150,000-£500,000 for initial compliance design
• Technical implementation consultancy: £300,000-£1,500,000 for first reporting cycle
• Voluntary limited assurance: £75,000-£400,000 annually depending on scope
• Board and committee training: £25,000-£75,000 for comprehensive governance preparation

Total first-year programme cost ranges:

• FTSE 250 company: £800,000-£2,500,000 including systems, personnel, and advisory
• FTSE 100 company: £1,500,000-£5,000,000 for comprehensive compliance capability
• Complex multinational: £3,000,000-£10,000,000 including overseas coordination

Ongoing annual costs (years 2+):

• Personnel and operations: 60-70% of first-year total
• Technology maintenance: 15-20% of first-year technology investment
• Assurance and advisory: £200,000-£800,000 annually for established programmes
• Total ongoing: 40-60% of first-year investment for mature programmes

Programme maturity and performance indicators

Effective UK SRS compliance programmes benefit from structured maturity assessment and key performance indicators:

Governance maturity levels:

Level 1 — Basic compliance:

• Board awareness and basic oversight structures
• Compliance-driven approach focused on minimum regulatory requirements
• Limited integration with business strategy and risk management
• Reactive approach to stakeholder engagement and disclosure

Level 2 — Integrated management:

• Embedded governance with clear board and management accountability
• Integration with existing risk management and strategic planning processes
• Proactive stakeholder engagement and materiality assessment
• Systematic data quality and internal controls framework

Level 3 — Strategic leadership:

• Sustainability considerations integral to business strategy and decision-making
• Advanced scenario analysis and forward-looking target setting
• Industry leadership in disclosure quality and stakeholder engagement
• Innovation in methodology and technology for competitive advantage

Key performance indicators for programme effectiveness:

Data quality metrics:

• Data completeness percentage across Scope 1, 2, and 3 categories
• Third-party verification percentage for material data sources
• Restatement frequency and magnitude for prior period data
• Time to completion for annual data collection and validation cycle

Process efficiency indicators:

• Lead time from year-end to disclosure completion
• Number of manual data collection processes requiring automation
• Staff time allocation across data collection, analysis, and reporting activities
• Cost per unit of data quality (e.g., cost per verified tonne of CO2e)

Stakeholder engagement metrics:

• Investor feedback quality and engagement frequency on sustainability disclosure
• Rating agency scoring and benchmark positioning
• Regulator feedback and enforcement action absence
• Internal stakeholder confidence and capability assessment

Compliance risk indicators:

• Internal audit findings and management action completion
• External assurance qualifications or recommendations
• Board and committee time allocation to sustainability oversight
• Staff turnover and capability gaps in programme team

Common implementation challenges and solutions

Based on early UK SRS programme implementations, several challenges consistently emerge with proven solution approaches:

Challenge 1: Scope 3 data availability and quality

• Problem: Supplier engagement resistance and inconsistent data provision
• Solution approach: Structured supplier engagement programme with graduated requirements
• Best practice: Procurement contract integration and supplier capability building

Challenge 2: Scenario analysis sophistication

• Problem: Moving from qualitative TCFD narratives to quantified financial impact assessment
• Solution approach: Phased approach starting with sector-level analysis before asset-specific
• Best practice: Third-party specialist engagement for complex transition risk modelling

Challenge 3: Integration with financial reporting

• Problem: Sustainability and finance teams working in isolation with inconsistent data
• Solution approach: Joint working groups and integrated project management
• Best practice: CFO leadership of compliance programme with sustainability input

Challenge 4: Board and senior management capability

• Problem: Limited technical understanding of sustainability metrics and risk assessment
• Solution approach: Structured education programme and external expert advisory support
• Best practice: Non-executive director with relevant sustainability expertise

Challenge 5: Technology system integration

• Problem: Sustainability data systems operating independently from core business systems
• Solution approach: API-based integration architecture with master data management
• Best practice: Enterprise architecture approach treating sustainability as core business data

Challenge 6: Regulatory uncertainty and interpretation

• Problem: Evolving regulatory guidance and peer practice variation
• Solution approach: Active engagement with professional bodies and regulatory monitoring
• Best practice: Conservative interpretation with professional legal review for complex areas

The complexity of UK SRS compliance should not be underestimated, but the phased approach and existing TCFD baseline provide a foundation for systematic preparation. Companies that begin comprehensive planning now will be best positioned for successful mandatory reporting from January 2027.