Part Two
What applies to you
Uganda's sustainability reporting dates are fixed in ICPAU's roadmap for adopting IFRS S1 and S2: the global baseline for disclosing sustainability and climate-related risks and opportunities alongside the financial statements. Which date applies depends on the entity. The evidence behind a published claim takes far longer to build than the claim takes to write. We walk the whole journey with you, then leave you able to run it without us.
Listed companies, banks, microfinance deposit-taking institutions and insurers are in the first mandatory group, so your first report is FY2028.
In most organisations, sustainability reporting sits with one person rather than a team. Much of the work is asking six departments for figures none of them were keeping for that purpose.
Holds fuel and power spend in shillings. The report needs litres and kilowatt-hours.
Holds signed attendance sheets. The report needs a count, by course, by month.
Holds production logs. The report needs waste, water and energy intensity per unit.
Holds purchase orders. The report needs to know which suppliers were screened, and on what.
Holds maintenance dockets. The report needs meter readings against a baseline.
Holds the minute book. The report needs proof the board decided something.
That is not a performance problem. It is a design problem, and design problems can be fixed.
One can be produced in an afternoon. The other must be built. This is the translation the work usually comes down to: what a report says, and what would have to exist behind it for the sentence to be true.
A report is a record of something that happened. It is not itself a thing that happens.
Being open to reporting and being able to evidence it are two different things.
Federation of Uganda Employers, Environmental, Social and Governance (ESG) State of Play in Uganda: Awareness, Practices, Risks and Opportunities, November 2024.
The willingness is already there. The evidence is not. Building it with you is the whole of what we do.
ICPAU’s roadmap makes the standards mandatory for accounting periods beginning on or after 1 January 2028. On a calendar year that is FY2028. The data must be flowing from the first day of that period, which means everything behind it is live before the period opens. Public sector entities sit in a separate phase, with a date still to be determined by ICPAU.
Not in any of these groups? The next section is written for you →
Starting earlier costs less than starting late.
Your organisation may sit outside every group in the roadmap. That changes who asks, and when. It does not change what they are asking for.
Environmental and social conditions attached to the facility itself, tested before money moves. A body that channels funds onward carries the same duty down its own chain, and answers at appraisal rather than at a national deadline.
Supplier due diligence, often carrying European requirements behind it, answered under time pressure from whatever is already on file.
Consolidation into a group report, usually under GRI, on the group calendar rather than Uganda’s.
Diligence before the money moves, and reporting conditions after it.
No date, but no notice either. The organisations that ask do not publish a calendar.
A manufacturer holds a planting day. Staff turn out, the community is pleased, the photographs are good. Six months later one sentence appears in the annual report, and everything in it is a problem except the trees.
“Through our reforestation programme we offset 2,400 tonnes of CO₂e during the year, moving us closer to carbon neutrality by 2030.”
Sequence under Uganda's National Climate Change (Climate Change Mechanisms) Regulations, 2025 (SI 2025 No. 9). The letter of no objection precedes the feasibility study; registration of the credits sits near the end; international transfer needs a further authorisation of its own.
“We planted 10,000 indigenous seedlings across 12 hectares of degraded land. Survival at twelve months, independently sampled, was 71%. Because the project was never approved as a carbon project under the Regulations, we report this as a community and biodiversity initiative and make no carbon offset claim.”
Costs nothing extra. Survives assurance. A better story, because every figure in it can be produced on request.
The trees are real. The offset claim is not. A claim not yet made is far easier to fix than one already published.
This is a constructed illustration, not a client engagement.
Every one is a constructed illustration built the same way: a sentence an organisation could publish in good faith, taken apart document by document, and rewritten so that each figure in it can be produced on request. The sector differs. The gap rarely does.
Not one of them involves bad intent. In every case the work was done and the record was not.
Each is a constructed illustration, not a client engagement. Ask for any of them and we will send it.
The request arrives in the middle of something routine. Five moments, usually in this order. None of them is hostile, which is exactly why none of them comes with notice.
The first four cost you money. The fifth costs you the belief of your own staff, which takes far longer to rebuild.
Frameworks differ in what they ask you to present. They draw on the same underlying measurements. Build the evidence once and each framework becomes a presentation of the same file.
Adopted by ICPAU. Listed entities, financial institutions and insurers are in the first mandatory group, from FY2028. Sustainability-related financial disclosure, sitting inside your integrated report, on financial materiality.
Impact reporting on a broader topic set, for subsidiaries reporting up to a group, and for organisations answering to communities and civil society as well as investors.
What a listed issuer publishes about itself reaches the market on the exchange’s terms, and a sustainability claim in the annual report sits inside those obligations. For a bank or an insurer, your own regulator asks the same question of the same file.
Supplier questionnaires and due diligence, often carrying European requirements behind them, answered on the buyer’s timetable rather than yours.
Reporting three times is expensive. Measuring three times is worse. A figure with a source, an owner and a written method serves every framework that asks for it. What changes between them is the presentation, the boundary and the topic list, not the measurement.
IFRS S1 and S2 work on financial materiality. GRI and the IRA guidelines for insurers look wider, and the IRA applies double materiality. Its ESG Statement already sits on the same four pillars IFRS S1 uses, so building for the Authority builds most of what the roadmap asks for.
Who is asking changes what the evidence has to look like. It does not change the measurement underneath it.
Two organisations, the same reporting deadline. One starts with the template, one starts with the meter. Both file on time, and in year one the two reports look about the same. The difference shows up in year two.
Into strategy, process, supply chain and culture. Not written alongside them.
Baselines, indicators and evidence files that hold up when somebody checks them.
To IFRS S1 and S2, in a form that survives independent assurance.
Disclosure is the last step in the work and the first line in the budget.
We will not arrive, write, present and leave. Every figure we hand over has to stand up when the assurer asks where it came from.
We prepare you for assurance. We never provide it, because assurance providers must be licensed by ICPAU. So we have no reason to tell you you're ready when you aren't.
Somewhere in your organisation there may already be an ESG strategy, a materiality assessment or a first report. The date on it now matters, for two separate reasons: what it was built to satisfy, and what has been collected since.
ICPAU published its roadmap adopting IFRS S1 and S2. Work produced before it was built against different assumptions about what would be required.
An intention to measure is not a baseline. A baseline has a year, a boundary and a calculation somebody else could repeat.
Or does it name the organisation? Commitments assigned to everyone are collected by no one.
These look similar on paper and are entirely different in an evidence file.
Monthly or quarterly, by a named person, in a form somebody could hand to an assurer.
Not how many are planned. How many are sitting somewhere now, complete, with a source behind them.
The deadline is not for the report. It is for the data behind it, and that has to be flowing before 2028 begins.
→Two hours settles it. If the answers above are not immediately obvious, the Traceability Test below finds out.
It does not matter where you currently are. Whether ESG is a board paper nobody has actioned or a report already published, the route is the same, because everything after the first gate depends on numbers that exist, whatever standard you end up reporting against. That includes organisations that have already commissioned ESG work: a document is not a baseline, and only a baseline can carry a report. ICPAU makes a readiness assessment compulsory before an entity publishes its first sustainability disclosures.
A gate is not passed until the deliverable exists and someone on your side signs for it. That is what stops a strategy ending up on a shelf, and it is why you always know exactly what you have paid for.
Root-cause diagnostic, material topic screening, a data availability check and current-state measurement.
The ESG strategy mapped line by line onto the corporate strategy, with policies, targets and roles, and the screen built into the gates where money is committed.
One part of the business runs the new mechanism for a full cycle, with real data.
Workbooks, data collection routines, a dashboard and reporting templates, plus the emissions inventory calculated to protocol.
Training, mentoring, written procedures and a named internal ESG owner who has been assessed.
The disclosure drafted to IFRS S1 and S2, and the evidence file assembled the way an assurance provider will read it.
Your team runs the system. We maintain the instrument, stay reachable, and keep the workbooks and dashboard current as the standards move.
Each gate is commissioned on its own, not as a bundle, and we will advise you when a given gate can wait and when it cannot.
Every gate leaves something behind. That is what we would want to be judged on.
A firm is defined as much by the work it turns down as by the work it takes.
A report without a baseline behind it is the exposure, not the remedy.
Assurance providers must be licensed by ICPAU and independent of the entity they assure.
A firm cannot advise you and then sign off on what it advised.
You become fully independent in running the system. We stay responsible for keeping the workbooks, the dashboard and the method current as the standards move. That is the whole of the ongoing relationship, and it is the only part we charge for by the year.
The test is not the report we hand over. It is the first one your team produces on its own.
The topics you report on, the reasoning behind each, and who was consulted.
Targets with an owner, a budget line and the business objective each one serves.
Every published figure traced to the source document it came from, with the calculation written beside it.
Scope 1 and 2, with the boundary, the factors and the assumptions recorded.
One person, in their actual job description, not a committee.
What is collected, when and by whom, and what catches a figure that quietly stops arriving.
ESG criteria inside the appraisal template and the procurement checklist.
Your indicators and your data, on your own reporting rhythm.
How the cycle runs, step by step, so it survives staff turnover.
The people who ran it with us, now running it without us.
What will not survive a review, in writing, before anyone else finds it.
Prepared to IFRS S1 and S2, and to GRI or any other framework you report under, with every figure traceable to the register.
We would rather be judged on how much of this is still working two years from now.
We ask clients to make each published figure traceable to the document behind it. The same standard applies to this page. These are the instruments the dates, groups and deadlines above are drawn from, so you can check them before you speak to us.
The phased adoption calendar, the compulsory readiness assessment across twelve areas, and the assurance timetable running to 2032.
Open at the issuer →The standard ICPAU has adopted for sustainability assurance in Uganda, covering both limited and reasonable engagements and any reporting framework. It is what your assurance provider will work to, and the reason the evidence file has to exist before they arrive.
Open at the issuer →The general requirements. Governance, strategy, risk management, metrics and targets, applied on financial materiality.
Open at the issuer →The climate standard, including Scope 1, 2 and 3 emissions and the industry-based metrics that sit behind them.
Open at the issuer →Two proportionality tiers, double materiality, and an annual ESG Statement to the Authority within six months of the financial year-end. The Statement is built on the same four pillars IFRS S1 uses, so building for the Authority builds most of what FY2028 asks for. Described by the Authority as soft guidelines, issued to prepare the sector.
Open at the issuer →Four workstreams: ESG governance, sustainable finance, ESG risk management, and reporting and disclosure, with data sources, gaps and proxies addressed directly.
Open at the issuer →Each link opens the issuer’s own copy, not a version held here, so you are always reading the one currently in force.
There is no need to commit to a programme to find out where you stand.
You name the claim. We ask for the document behind it, the person who owns that document, and the method that would produce the same figure again next year.
We do not publish the questions. A question you can prepare for tells you nothing, and the claims are yours, chosen on the day.
The gap is usually visible within the first hour. If the evidence is already there, we say so and leave, and that is a better thing to learn from us than from a lender.