What it means
Every organisation larger than one person has to answer three questions: who has authority, how is that authority limited, and to whom are the people holding it answerable. Governance is the structured answer, usually written down in a constitution, board charter, delegation matrix and set of policies.
The classic mechanism is a board of directors that sits above management and represents the owners. The board sets strategy and appetite for risk, appoints and can dismiss the chief executive, and satisfies itself that what management reports is actually true.
In practice governance is felt through unglamorous machinery: approval thresholds, segregation of duties so that the person who raises a payment cannot also authorise it, an audit committee that can talk to the auditors without management present, and a conflicts register. These controls exist because incentives drift, and structure catches drift earlier than good intentions do.
Governance is not only a large company concern. A five-person business with two founders and an outside investor still needs clarity on who signs what, how deadlock is broken and what information the investor receives, and the absence of those agreements is a leading cause of avoidable disputes.
The term has widened over time to cover environmental, social and governance reporting, data governance and IT governance. The common thread remains constant: someone must own the decision, someone independent must be able to review it, and the trail must be documented well enough for a third party to follow.
In practice
Real-world examples.
Example
A family manufacturing business brings in two independent non-executive directors before a bank refinancing. The bank had asked for evidence that major spending decisions were reviewed by someone other than the majority shareholder, and the change was a condition of the facility.
Example
A charity discovers that a trustee's consultancy has been paid for three years of website work without the arrangement ever being declared. The trustee is asked to step down, and the board adds a standing conflicts of interest item to every agenda alongside a rule requiring competitive quotes above $10,000.
Example
A software scale-up separates the roles of chief executive and chair ahead of a funding round. Investors wanted an independent chair to run board meetings so that performance against plan could be challenged without the founder effectively marking their own homework.
Case study
Seen in the real world.
Bramblewood Utilities is an illustrative, entirely fictional regional water company used here to show what weak governance looks like from the inside. It had a board, a set of policies and an annual audit, so on paper it was well run.
In reality the same executive who negotiated maintenance contracts also approved the invoices, the audit committee had not met without management in the room for two years, and the risk register had not been updated since the previous chief executive left. When a supplier overbilled by roughly $600,000 across eighteen months, nothing in the system caught it; the discrepancy surfaced only when a new financial controller compared contracted rates against paid invoices as part of a routine handover.
The illustrative failure was not fraud on a grand scale but the absence of a second pair of eyes. Bramblewood's remedy cost very little: split the negotiation and approval roles, require the audit committee to meet the auditors privately twice a year, and refresh the risk register each quarter with named owners for each item.
Watch out
Common mistakes.
- Confusing governance with management. Management runs the organisation day to day while governance sets the boundaries and checks the results, and blurring the two removes the independence that makes oversight worth anything.
- Treating governance as a document exercise. A policy nobody follows offers no protection, and auditors, regulators and courts look at what actually happened rather than at what the manual said should happen.
- Assuming small or private companies do not need it. Founder disputes, investor fallouts and undetected errors are more common in small organisations precisely because the structures that would catch them early were never put in place.
Questions
People also ask.
Who is responsible for governance in a company?
Ultimately the board of directors, though management is responsible for operating the controls the board sets and every employee has a role in following them.
What is the difference between governance and compliance?
Governance is the framework of decision rights and oversight the organisation chooses for itself, while compliance is meeting rules imposed from outside by law or regulation, and good governance normally produces compliance as a by-product.
How much governance is appropriate for a small business?
Enough that authority is clear, spending above a defined threshold needs a second signature, and financial information is prepared by someone other than the person spending the money, which is achievable in a business of ten people.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%