Regulatory Framework and Governance
Core concepts
Regulatory frameworks exist to reduce information asymmetry between insiders and outsiders and to protect stakeholders who cannot contract effectively on their own. Candidates must distinguish principles-based regimes (broad objectives, judgment-driven, e.g. substance-over-form standards) from rules-based regimes (bright-line tests, less judgment, more detail). Know the difference between statutory regulation (legislation and delegated rules with legal force) and self-regulation (professional bodies and exchange listing rules), and understand that most modern systems are hybrids: legislation sets the floor, self-regulators add detail, and enforcement powers sit with a statutory authority.
Governance content centers on the agency problem: separation of ownership and control lets managers pursue their own interests. Mechanisms that mitigate it include an independent board with a majority of non-executive directors, separation of chair and chief executive, audit and remuneration committees composed of independent members, internal audit reporting to the audit committee, external audit, disclosure obligations, and shareholder voting rights. Understand comply-or-explain versus prescriptive codes: comply-or-explain allows departure with reasoned disclosure, which preserves flexibility but complicates comparison across entities.
Traps
- Assuming a non-executive director is automatically independent; independence depends on tenure, fees, family and business ties.
- Confusing the audit committee's oversight role with management's responsibility for internal controls.
- Treating a governance code as law; codes are usually not statute.
- Mixing up the roles of board chair (process and board effectiveness) and chief executive (operations).
- Forgetting that the external auditor is appointed by and reports to shareholders, not management.
Worked example / rule of thumb
Rule of thumb: who monitors whom? Draw three arrows: shareholders monitor the board, the board monitors management, and the audit committee monitors both internal and external audit. If a question places any monitoring arrow pointing the wrong way (for example, management evaluating the external auditor), that option is wrong. Example: a company's chief executive chairs the nomination committee and selects new directors. This breaches independence because the person being monitored controls the monitoring mechanism; the correct remedy is an independent nomination committee chaired by a non-executive director.