LEARNING HUB · 7 min read
Three terms, used interchangeably in Sri Lankan boardrooms, that mean genuinely different things. One is a company’s values. One is a measurement standard. One is the umbrella over both — and only one of them is now written into Sri Lankan reporting law.
By the ESGNexus Editorial Team · July 2026 · Estimated reading time: 7 minutes
| IN A NUTSHELL
CSR (Corporate Social Responsibility) is what a company commits to and does voluntarily — its values in action, often philanthropic, and largely self-regulated. ESG (Environmental, Social, and Governance) is how that performance is measured and disclosed — a set of criteria used by investors, lenders, and regulators to evaluate a company, increasingly through mandatory reporting. Sustainability is the broadest of the three: a company’s overall role in creating long-term value while managing its environmental and social impact. The simplest way to hold them apart: CSR is the intention, ESG is the measurement, sustainability is the destination. In Sri Lanka, the distinction is no longer academic — ESG-aligned disclosure became legally mandatory for the top 100 CSE-listed companies from FY2025. |
Ask three sustainability professionals in Colombo to define ESG, CSR, and sustainability, and you will likely get three overlapping answers and a shared shrug. The terms are used interchangeably in annual reports, press releases, and job titles across Sri Lanka’s corporate sector. For most of the past two decades, that imprecision carried no cost. It does now. With SLFRS S1 and S2 making ESG-aligned disclosure a legal requirement for listed companies, knowing which term means what — and which one a regulator can hold you to — has become a practical necessity, not a semantic nicety.
Why the Confusion Exists
The three terms emerged at different times, from different communities, to address different problems — and their meanings then bled into one another as sustainability moved from the margins of business into the mainstream.
CSR is the oldest of the three business concepts, with roots in mid-20th-century debates about corporate social obligations, and was formalised internationally in 2010 when the International Organization for Standardization published ISO 26000, a guidance standard on social responsibility. ESG is much younger: the acronym was coined in a 2004 UN Global Compact report, “Who Cares Wins,” specifically to help investors factor environmental, social, and governance risks into financial analysis. Sustainability, as a term applied to business, draws on the older idea of sustainable development — famously defined in the 1987 Brundtland Report as meeting present needs without compromising the ability of future generations to meet their own.
Source: ISO, ‘ISO 26000 — Social Responsibility,’ 2010 — iso.org; Who Cares Wins, UN Global Compact, 2004 — documents1.worldbank.org
Because all three touch on the same underlying concerns — the environment, people, and ethical conduct — they are easy to conflate. But conflating them obscures a distinction that matters commercially: two of the three are largely voluntary, while one is now enforceable.
CSR: What a Company Commits To
Corporate Social Responsibility describes a company’s voluntary efforts to operate ethically and contribute positively to society. In practice, CSR is where philanthropy lives: funding a rural school, running a health camp, sponsoring a reforestation drive, and matching employee volunteering hours. It is values-led and largely self-regulated — a company decides for itself what its responsibilities are and how far to take them.
The defining international reference point is ISO 26000, published in 2010 after five years of multi-stakeholder negotiation. Crucially, ISO 26000 is a guidance standard — it cannot be certified to. There is no such thing as being “ISO 26000 certified,” and any claim to that effect is a misuse of the standard. That non-certifiable nature captures the essence of CSR: it is a statement of intent and best practice, not a measurable pass-or-fail test.
Source: ISO, ‘ISO 26000 — Social Responsibility,’ 2010 — iso.org; Wikipedia, ‘ISO 26000’
This is also where CSR is vulnerable. A company can run a visible CSR programme — the school, the health camp, the tree-planting — while its core operations quietly cause more harm than its philanthropy offsets. Without measurement, a strong CSR narrative can coexist with weak performance. That gap is precisely what ESG was built to close.
ESG: How Performance Is Measured
ESG refers to a set of measurable criteria — across the Environmental, Social, and Governance dimensions — used to assess how effectively a company manages the sustainability risks and opportunities that affect its value. While CSR asks “what is this company doing for society?”, ESG asks “how does this company’s environmental, social, and governance performance measure up, and what does it mean for risk and return?”
The distinction that matters most is the audience and the discipline. CSR communicates with employees, communities, and the public. ESG reports to investors, lenders, and regulators — and it demands data. Greenhouse gas emissions in tonnes. Board independence as a percentage. Lost-time injury frequency rates. Where CSR is qualitative and self-defined, ESG is quantitative and externally assessed, often scored by ratings agencies and, increasingly, mandated by disclosure standards.
This is why ESG has largely displaced CSR in capital markets’ language over the past decade. Investors could not act on CSR narratives; they can act on ESG data. As one widely cited formulation puts it: CSR aims to make a business accountable, while ESG makes that accountability measurable.
Source: Kogod School of Business, American University, ‘What’s the Difference Between CSR and ESG?’ — kogod.american.edu; TechTarget, ‘ESG vs. CSR vs. Sustainability’ — techtarget.com
Sustainability: The Umbrella Over Both
Sustainability is the broadest and least precisely bounded of the three. Applied to a company, it describes its overall role in creating long-term value while managing its environmental and social impacts — positive and negative — across a wide range of stakeholders. MIT frames the distinction clearly: ESG focuses on screening companies for investment by assessing how environmental and social issues affect the business; sustainability is a much broader concept, centred on a company’s role in society and how it creates value by managing its impacts over the long term.
Source: MIT, quoted in Cority, ‘ESG vs CSR vs Sustainability: What’s the Difference?’, 2026 — cority.com
In that sense, sustainability is the umbrella. CSR is one expression of it (voluntary action on social and environmental responsibility). ESG is another (the measurement and disclosure of material sustainability performance). A company can pursue sustainability as a strategic goal, use CSR programmes as one vehicle towards it, and use ESG as the framework for measuring and reporting progress. The three are not competitors. They are layers.
The Three, Side by Side
| ESG | CSR | Sustainability | |
| In one line | The measurement | The intention | The destination |
| Core question | How does performance measure up? | What does the company do for society? | What is the company’s long-term role? |
| Primary audience | Investors, lenders, regulators | Employees, communities, public | All stakeholders |
| Nature | Quantitative, data-driven | Qualitative, values-driven | Broad, strategic |
| Status in Sri Lanka | Mandatory for listed firms (SLFRS S1/S2) | Voluntary | Voluntary / strategic |
Note: definitions of these terms vary across sources; the framing above reflects the mainstream distinction drawn by academic and standard-setting bodies. In practice, companies and even departments use the terms loosely and sometimes interchangeably.
Why the Distinction Matters for Sri Lanka
For most of the past twenty years, all three terms were, in Sri Lanka, effectively voluntary. A company could label a page in its annual report “CSR,” “Sustainability,” or “ESG” more or less at will, because nothing legally hinged on the choice. That has changed.
The Institute of Chartered Accountants of Sri Lanka (CA Sri Lanka) has made ESG-aligned disclosure mandatory through SLFRS S1 and S2 — the localised versions of the global ISSB standards. The top 100 CSE-listed companies by market capitalisation were required to comply from FY2025; all Main Board-listed companies must comply from FY2026. This critical shift, now obscured by three-way confusion, is that a company can no longer satisfy a regulator by pointing to a philanthropic CSR programme. What is required is measurable, disclosed, financially material ESG data — the quantitative, externally assessed kind, not the voluntary narrative kind.
Source: ESGNexus, ‘Sri Lanka’s Mandatory Sustainability Reporting Is Here,’ June 2026 — esgnexus.lk
The practical consequence for a Sri Lankan finance director or company secretary is worth stating plainly. If your board still treats sustainability as a CSR communications exercise — the school, the health camp, the annual-report photo spread — it is measuring against the wrong standard for the obligation it now faces. CSR remains valuable, and sustainability remains the right strategic ambition. But the thing a regulator can now hold a listed company to is ESG disclosure. Knowing which of the three words carries legal weight is the difference between compliance and exposure.
Related Reading on ESGNexus
- What Is ESG? A Complete Guide for Sri Lankan Businesses
- Sri Lanka’s Mandatory Sustainability Reporting Is Here — What Every Listed Company Must Know
- SLFRS S1 vs SLFRS S2: A Plain-English Guide for Sri Lankan Finance Teams (forthcoming)
Sources & Further Reading
ISO — ‘ISO 26000 — Social Responsibility,’ 2010 — iso.org
Wikipedia — ‘ISO 26000’
Who Cares Wins: Connecting Financial Markets to a Changing World, UN Global Compact, 2004 — documents1.worldbank.org
Kogod School of Business, American University — ‘What’s the Difference Between CSR and ESG?’ — kogod.american.edu
TechTarget — ‘ESG vs. CSR vs. Sustainability: What’s the Difference?’ — techtarget.com
Cority — ‘ESG vs CSR vs Sustainability: What’s the Difference?’ (citing MIT), 2026 — cority.com
ESGNexus — ‘Sri Lanka’s Mandatory Sustainability Reporting Is Here,’ June 2026 — esgnexus.lk
ESGNexus — ‘What Is ESG? A Complete Guide for Sri Lankan Businesses,’ July 2026 — esgnexus.lk
| About ESGNexus
ESGNexus is Sri Lanka’s independent platform for ESG, CSR, and sustainability intelligence. We track company-level ESG performance, regulatory developments, and sustainability data across Sri Lanka’s listed companies, large unlisted corporates, and state-owned enterprises. All editorial content is independently produced. Sponsored content is clearly labelled. Data disclaimer: Information in this article is sourced from publicly available documents. ESGNexus does not independently verify company disclosures. Errors and omissions excepted. |