Advanced Audit and Assurance (International) · Developments in sustainability assurance

ISSA 5000 and Sustainability Assurance Standards Explained

Updated 11 October 2026 · Fact-checked

ISSA 5000 is the IAASB's general standard for assurance on sustainability information. It works for limited or reasonable assurance, for any sustainability topic and any reporting framework. ISAE 3000 is the older general standard for non-financial assurance, and ISAE 3410 deals specifically with greenhouse gas statements. In the exam, apply the standard to the scenario.

Understand ISSA 5000 and Assurance Standards

Companies now report sustainability information such as emissions, climate risk, workforce data and supply chain practices. Investors and regulators want this information to be reliable. That creates demand for assurance: an independent practitioner gives a conclusion that increases users' confidence in the information.

The IAASB issues the standards. ISAE 3000 (Revised) is the umbrella standard for assurance engagements other than audits or reviews of historical financial information. It has been widely used for sustainability reports. ISAE 3410 is a specific standard for assurance on greenhouse gas (GHG) statements. ISSA 5000 is the IAASB's newer, dedicated standard for sustainability assurance. It is designed to be profession-agnostic, so it can be used by accountants and by other assurance providers who meet the quality and ethics requirements.

ISSA 5000 is framework-neutral and topic-neutral. It can be applied to information prepared under any suitable criteria, such as ESRS, ISSB standards (IFRS S1 and S2) or other frameworks. It covers both limited assurance and reasonable assurance. It also covers the whole sustainability information, or only parts of it, and information across the value chain where relevant. The practitioner must have suitable criteria, which are relevant, complete, reliable, neutral and understandable.

The difference in assurance level is about risk and evidence. Reasonable assurance gives a high, but not absolute, level of assurance. The conclusion is positive, such as 'in our opinion the information is prepared, in all material respects, in accordance with the criteria'. Limited assurance gives a meaningful level of assurance, lower than reasonable. It needs less evidence, and the conclusion is negative, such as 'nothing has come to our attention that causes us to believe the information is materially misstated'.

For the exam, keep the scheme simple. Know what each standard is for, how ISSA 5000 relates to ISAE 3000, and how to apply the engagement process: acceptance, planning, risk assessment, evidence, reporting. Check the current position of effective dates and transitions in ACCA's and IAASB's published material before the exam, because adoption by jurisdictions differs.

Key rules to remember

Reasonable assurance conclusion: Positive form: information is prepared, in all material respects, in accordance with the criteria; High level of assurance. Needs more evidence and more testing, including a fuller risk assessment.
Limited assurance conclusion: Negative form: nothing has come to our attention that causes us to believe the information is materially misstated; Meaningful but lower level of assurance. Procedures are mainly enquiry and analytical procedures, with less detailed testing.
Suitable criteria: Relevant + complete + reliable + neutral + understandable; A practitioner needs suitable criteria before accepting the engagement. Without them, the engagement cannot be an assurance engagement.
Which standard to use: General sustainability: ISSA 5000 | GHG statement: ISAE 3410 | Other non-financial assurance: ISAE 3000; ISSA 5000 is the dedicated sustainability standard. ISAE 3410 remains the specific GHG standard.
Assurance engagement elements: Three-party relationship + subject matter + criteria + evidence + assurance report; The three parties are the practitioner, the responsible party and the intended users.

How to solve ISSA 5000 and Assurance Standards questions

Use this method for any question on sustainability assurance standards. It keeps your answer tied to the scenario and covers the usual mark points.

1Read the requirement and identify the task: explain a standard, compare standards, advise on assurance level, or plan the engagement.
2Identify the subject matter in the scenario: a full sustainability report, a GHG statement, or one KPI. This tells you which standard fits.
3Name the standard and say why: ISSA 5000 for sustainability information, ISAE 3410 for GHG statements, ISAE 3000 for other non-financial assurance.
4State the assurance level asked for and what it means for evidence and the form of conclusion.
5Check preconditions: suitable criteria, competent practitioner, ethics and independence, quality management, access to information and a rational purpose.
6Apply to the facts: risks, evidence, use of experts, data systems and controls, estimates, value chain information and management's process.
7Finish with the conclusion: the form of the report, any modification, and the practical advice to the client or partner.

Quickest way: Standard, level, criteria, evidence

When to use it: Use this when you have little time and need a structured answer to a short requirement worth 5 to 10 marks.

Standard: name the one that matches the subject matter.
Level: limited or reasonable, and the matching conclusion wording.
Criteria: are they suitable and available to users?
Evidence: what procedures fit the level and the risks in the scenario.
Link each point to a fact in the scenario, then close with the practical consequence.

Common mistakes in ISSA 5000 and Assurance Standards

Saying ISSA 5000 replaces financial statement auditing or ISA standards.
Students see 'new IAASB standard' and assume it is all-purpose.
Fix: ISSA 5000 deals with sustainability information only. Financial statement audits still follow the ISAs.
Treating limited assurance as 'no testing' or 'a quick read'.
Students focus on the lower evidence level and forget that it is still assurance.
Fix: Limited assurance still needs planning, risk assessment and sufficient appropriate evidence for a meaningful level of assurance. Only the extent differs.
Using the wrong conclusion wording for the level.
Positive and negative forms are memorised loosely.
Fix: Reasonable assurance gives a positive conclusion. Limited assurance gives a negative-form conclusion.
Ignoring suitable criteria.
Students jump straight to procedures.
Fix: Always consider criteria first. If criteria are unsuitable or unavailable, acceptance is a problem.
Applying ISAE 3410 to all sustainability topics.
Students know it as 'the sustainability standard' from earlier study.
Fix: ISAE 3410 is for GHG statements only. Use ISSA 5000 for wider sustainability information.
Giving a generic list of procedures without linking to the scenario.
Students recall textbook lists under time pressure.
Fix: Tie each procedure to a named risk or fact, such as estimated emissions, a third-party data source or weak controls.

Worked examples

Example 1

Greenfield Co wants assurance on its annual sustainability report, which covers emissions, water use and workforce data prepared under a recognised reporting framework. The directors ask you which IAASB standard applies and whether limited assurance is acceptable. Advise them. (8 marks)

Show the solution

Subject matter: a broad sustainability report covering several topics, not only GHG emissions.
Standard: ISSA 5000 is the dedicated IAASB standard for sustainability assurance, and it is topic-neutral and framework-neutral. ISAE 3000 is the older general standard for non-financial assurance.
Assurance level: ISSA 5000 allows both limited and reasonable assurance, so limited assurance is permitted if the directors and intended users accept it.
Meaning of limited assurance: a meaningful but lower level of assurance, based on less evidence, mainly enquiry and analytical procedures, with a negative-form conclusion.
Preconditions: the recognised framework will normally provide suitable criteria. We also need independence, competence, quality management and access to information and people.
Advice: explain that users will get lower assurance than under reasonable assurance. If key stakeholders or regulators need more, the directors should consider reasonable assurance, perhaps on selected key metrics.

Answer: ISSA 5000 applies to the full sustainability report. Limited assurance is acceptable under it, provided suitable criteria exist and the preconditions are met. The directors should understand that the conclusion will be in negative form and offer lower assurance than reasonable assurance.

Example 2

Blue Harbour Ltd, a shipping company, has asked you to provide assurance on its statement of GHG emissions. The emissions figures use fuel-consumption data and emission factors, and some are estimated. Explain the standard to use and the main evidence procedures. (8 marks)

Show the solution

Standard: the subject matter is a GHG statement, so ISAE 3410 is the specific standard. ISSA 5000 is the wider sustainability standard and may apply where the GHG statement forms part of a wider sustainability report.
Risk: emissions are quantified using data and estimates. Risks include inaccurate fuel data, wrong emission factors, incomplete boundaries and measurement uncertainty.
Evidence on data: test fuel purchase records and logs to invoices and vessel records, and check that all vessels in the organisational boundary are included.
Evidence on factors: check that the emission factors come from a recognised source, are current and are suitable for the fuel types used.
Evidence on estimates: re-perform calculations, review the methods and assumptions, and assess management's disclosure of uncertainty.
Other points: consider whether an expert is needed, test the controls over data collection, and check that disclosures describe the boundary and methods used.

Answer: Use ISAE 3410 for the GHG statement, or ISSA 5000 if the emissions form part of a wider sustainability report. Key procedures: test fuel data to source records, check boundary completeness, validate emission factors, re-perform calculations and challenge estimates and their disclosed uncertainty.

Exam tips

Match the standard to the subject matter first. Many marks are lost by naming the wrong standard.
Always state the assurance level and the form of conclusion. Examiners expect both.
Do not quote effective dates or adoption status from memory without checking current ACCA and IAASB material. Focus on principles.
Tie procedures to scenario facts such as estimates, third-party data, value chain information or weak controls, and show scepticism.
For professional skills marks, give clear, practical advice to the client or partner, not just a list of definitions.

Practice questions from Developments in sustainability assurance

ISSA 5000 and Assurance Standards: frequently asked questions

What is ISSA 5000 in simple terms?

It is the IAASB's standard for assurance on sustainability information. It can be used for any sustainability topic and any suitable reporting framework. It covers both limited and reasonable assurance.

What is the difference between ISAE 3000 and ISSA 5000?

ISAE 3000 (Revised) is the general standard for non-financial assurance engagements. ISSA 5000 is built specifically for sustainability assurance and sets out requirements and guidance suited to that subject matter. Both deal with the elements of an assurance engagement, but ISSA 5000 is tailored to sustainability.

When is ISAE 3410 used?

ISAE 3410 is used for assurance engagements on greenhouse gas statements. It deals with issues such as emission factors, boundaries and measurement uncertainty. A GHG statement may also sit within a wider sustainability report where ISSA 5000 is relevant.

What is the difference between limited and reasonable assurance on sustainability information?

Reasonable assurance is a high level of assurance and results in a positive conclusion. Limited assurance is a lower, meaningful level with a negative-form conclusion. Limited assurance needs less evidence, but it is still a proper engagement.