Commercial Bank of Ceylon PLC: A Disclosure Profile of Sri Lanka’s Largest Private-Sector Bank

Commercial Bank of Ceylon PLC is the largest listed bank in Sri Lanka by market capitalisation and the largest private-sector bank by assets, which makes its first mandatory sustainability filing the natural reference point for how the sector is adopting the new standard. This is the Bank’s 57th annual report and its first prepared under the mandatory SLFRS S1 and S2 regime.

This profile assesses the quality of the disclosure — whether the report meets the requirements of SLFRS S1 and S2 — not the Bank’s underlying sustainability performance, which no published report can certify. It is based on Commercial Bank’s Integrated Annual Report 2025 for the year ended 31 December 2025, and on the independent assurance reports published alongside it. Every finding below concerns what the report does and does not say.

Commercial Bank is a licensed commercial bank incorporated in 1969 and listed on the Colombo Stock Exchange since 1970, operating in Sri Lanka, Bangladesh, the Maldives (through a subsidiary), and Myanmar (through a microfinance subsidiary and a representative office). For the year ended 31 December 2025, the Bank reported gross income of Rs.354.8bn, profit before tax of Rs.89.4bn, and profit after tax of Rs.58.5bn, with total assets of Rs.3,258bn and a return on equity of 19.51%. It remained comfortably above regulatory capital minima, with a total capital ratio of 16.70% and CET1 of 13.04%. The Bank employs 5,726 people. Scale is why its disclosure matters: a balance sheet of this size carries the sector’s largest concentration of financed activity, which is precisely what SLFRS S2 is designed to make visible — and precisely what a first-year filing is permitted to defer.

Commercial Bank states that its sustainability-related disclosures are prepared “in accordance with” the SLFRS Sustainability Disclosure Standards as issued by CA Sri Lanka — the strong compliance formulation, rather than the softer “with reference to.” The disclosures are anchored in the Integrated Reporting <IR> Framework, indexed against the GRI Standards at the Comprehensive level (Annex 4), and mapped to the UN SDGs. Materiality is assessed on a double-materiality basis: financial materiality applied per the SLFRS S1 principle — with quantitative and qualitative thresholds set out in the report — and impact materiality mapped alongside it, a wider lens than SLFRS’s single financial-materiality requirement. The materiality methodology was reviewed and approved at the Board and BIRMC levels.

On assurance, the Bank assembles a three-part stack and is candid about its limits. KPMG audits the financial statements. Ernst & Young provides limited assurance over the SLFRS S1 and S2 disclosures — the governance, strategy, risk-management and metrics content — under SLSAE 3000 (Revised), concluding on 27 February 2026 that it was “not aware of any material modifications” needed for the disclosures to accord with the standard. Separately, the Sri Lanka Climate Fund verifies the Scope 1 and Scope 2 GHG inventory to a reasonable level in accordance with ISO 14064-1:2018 and ISO 14064-3:2019. The honest reading is that the emissions numbers carry a higher grade of assurance than the surrounding narrative, and that no single reasonable-level opinion yet spans both the words and the numbers — a limitation the report does not hide.

Commercial Bank measures and discloses its greenhouse gas emissions in accordance with the GHG Protocol Corporate Standard, ISO 14064-1:2018, and SLFRS S2, using the financial control approach consistent with its financial statement consolidation. On a Bank basis, it reports Scope 1 (direct) emissions of 862 tCO₂e — up from 630 in 2024 — and Scope 2 (location-based, purchased electricity) emissions of 6,173 tCO₂e, down from 6,669. Utility power consumption underlying Scope 2 was 48,941 GJ. The Scope 1 and Scope 2 inventory is verified by the Sri Lanka Climate Fund at a reasonable assurance level — the higher of the two SLSAE tiers — a meaningful credibility marker for the numbers that anchor the environmental disclosure. On a Group financial-control basis, the combined total is 7,398 tCO₂e.

Scope 3 is where the report exercises the standard’s flexibility. The Bank discloses only Scope 1 and Scope 2, applying the transitional relief under SLFRS S2 (Appendix C, Section C4(b)) to defer Scope 3 for its first two mandatory reporting periods, and explicitly cross-referencing the deferral to Note 9. This is the right way to use relief: stated plainly, dated, and mapped to the clause that permits it, rather than left as a silent gap. For a bank, the material Scope 3 is financed emissions — the carbon embedded in its loan book — and the report signals that this work has begun: the Bank joined PCAF in 2025 and has started establishing a financed-emissions baseline and analysing the loan portfolio for high-emitting sectors. The disclosure is therefore an absence with a plan attached, which is the most a first-year filing can honestly claim.

At the Bank level, Commercial Bank employs 5,726 people, of whom 33.11% (1,896) are women. The social disclosures are indexed to the GRI Standards at the Comprehensive level and presented with multi-year comparatives in Annex 5, improving readability. These metrics fall outside the SLFRS S1/S2 climate scope and the EY assurance boundary, and are not third-party verified; ESGNexus records them as company-stated.

Governance is the strongest area in this filing, and the disclosure is specific rather than aspirational. The Board comprises 11 directors, of whom 9 (81.82%) are independent non-executive directors and 2 are executive (the Managing Director/CEO and the Director/Chief Operating Officer); 3 directors (27.27%) are women. No single controlling shareholder is disclosed. Most relevant to the standard, the Bank established a Board Sustainability Committee in 2025 to provide strategic guidance on its sustainability strategy, roadmap, targets and KPIs. It oversees climate and broader environmental and social risk through the Board Integrated Risk Management Committee. Climate risk has been integrated into the Internal Capital Adequacy Assessment Process (ICAAP) and the enterprise risk-management framework. The Board’s activity on climate — reviewing and approving the Climate Risk Management Policy and Procedure, a Financed Emissions Framework and the SLFRS materiality methodology — is set out concretely in the disclosure. This is the kind of board-level climate governance SLFRS S1 and S2 ask for: a named committee, a defined mandate, and a documented trail of decisions, rather than a paragraph asserting that “the Board takes sustainability seriously.”

ESGNexus grades disclosure completeness against a published, equal-weighted, page-referenced checklist of seven criteria drawn from SLFRS S1 and S2 (Disclosure Grading Methodology v1.1). We assess what the report does and does not disclose — not the Bank’s underlying performance. Each criterion is scored Present (1), Partial (0.5) or Absent (0), or N/A where it genuinely does not apply. Under the v1.1 first-year reliefs rule, a quantified Scope 3 disclosure scores Present, an explicit dated deferral under the transitional relief scores Partial, and silence scores Absent. The full checklist below is reproducible: the same report and this rubric should yield the same result.

Alongside the checklist, we characterise the disclosure on four qualitative dimensions — completeness, comparability, credibility and candour — each rated against cited evidence. These carry the nuances the checklist score does not, including the assurance split and the first-year deferrals.

On completeness of own-operations reporting, the filing leads: Scope 1 and Scope 2 are quantified using a stated methodology and carry reasonable-level third-party verification. On governance and integration, it is strong — a purpose-built Board committee, climate risk wired into the ICAAP, and all disclosures placed within the mainstream Integrated Annual Report, with compliance, GRI, and assurance indices attached. On forward-looking disclosure, it lags by design: climate scenario analysis is roadmapped but not performed, and Scope 3 and financed emissions are deferred — both under the transitional reliefs the standard itself provides, and both disclosed as explicit, dated deferrals. On targets, it is partial: a dated green-finance growth target exists, but the emissions side lacks a quantified reduction target with a baseline year and a deadline, and the net-zero own-operations ambition is undated. The result is a report that honestly discloses what it has done and plainly states what it has deferred — the profile of a credible first-year adopter rather than a finished one.

For investors, the report provides verified own-operations emissions and a genuine governance structure, but not yet the two disclosures that most affect a bank’s climate risk — financed emissions and scenario-tested resilience — so any climate view formed on this filing is necessarily provisional, and next year’s report will carry the weight. For peers, it sets a workable first-year template: use the transitional reliefs, but date them, cross-reference the enabling clause, and pair the deferral with visible groundwork (here, PCAF membership and a baseline in progress). For regulators, the filing marks exactly where the SLFRS regime will have to tighten as the reliefs expire — Scope 3 for financial institutions, scenario analysis, and quantified, dated decarbonisation targets — and shows that a large bank can meet the governance and Scope 1–2 requirements in year one while those harder elements are phased in.