Governance Failure at a County Water Corporation

1. Composition and independence. Five of nine directors being relatives or associates of the chairperson destroys independence and creates a self-perpetuating board. Principle: the board must be balanced in skill, experience and independence, and the chair must be able to rely on directors who can challenge executive and shareholder interests. Remedy: an independence and skills matrix, a published register of directors' interests, and reconstitution of the board with independent non-executive directors appointed on merit through a documented process consistent with the Mwongozo Code of Governance for State Corporations and the State Corporations Act.

2. Meeting frequency and record-keeping. Four meetings in eighteen months, with two unminuted, means the board cannot evidence oversight. Principle: the board meets at least quarterly and keeps complete and accurate minutes of attendance, deliberations, conflicts declared and decisions. Remedy: fix a quarterly calendar plus a strategy away-day, appoint a competent company secretary, and minute every declaration of interest.

3. Conflicted procurement. A KES 45 million contract to a director's spouse's firm with no competitive tender. Principle: procurement must be open, competitive and value for money, with declared and managed conflicts; the Public Procurement and Asset Disposal Act applies to a state corporation, and its thresholds require competitive tendering. Remedy: declare and record the interest, exclude the director from all discussion and voting, require board approval of the procurement plan, and refer the contract for independent review.

4. Audit committee structure. The same person chairs the finance and audit committees. Principle: the audit committee must be independent of the financial management it oversees; it should consist of non-executive directors with at least one financially literate member and should not be chaired by the board chairperson or by a director holding a finance portfolio. Remedy: reconstitute the committee with independent members and a separate chair.

5. Internal audit independence. Reporting to the finance director removes the function's ability to report problems about finance. Principle: internal audit reports functionally to the audit committee and administratively to the chief executive, and its charter guarantees unrestricted access to records, staff and the committee. Remedy: redraw the reporting lines, have the audit committee approve the charter, risk-based plan and budget, and give it the power to appoint and remove the head of internal audit.

A sixth weakness worth credit is the replacement of the external auditor immediately after a qualification, which suggests an attempt to avoid scrutiny rather than a genuine independence dispute.

Why it matters. The audit committee is the board's principal instrument of assurance over financial reporting, internal control, risk management and both audit functions. It can only perform that role if its members have no stake in the numbers they are reviewing. A finance committee chair whose own area is under review cannot objectively challenge an unsupported payment, and a head of internal audit whose appraisal, budget and promotion depend on the finance director will not investigate a transaction the finance director has approved. The result is that assurance exists only on paper - which is exactly what an external auditor's qualification over unsupported payments has exposed.

The immediate failure. The corporation has also broken the chain of communication that allows control weakness to reach the board: internal audit issues stop at the finance director, and the audit committee that should receive them is chaired by that director's ally.

How to restructure:

• Audit committee of at least three members, all non-executive, the majority independent, chaired by someone other than the board chairperson and with at least one member holding recognised accounting or audit expertise.
• A written committee charter approved by the board, covering financial reporting, internal control, risk, compliance, related-party transactions and the whistleblowing channel.
• At least quarterly meetings, and sessions with the internal and external auditors without management present.
• Internal audit reports functionally to the audit committee and administratively to the chief executive; the committee approves the audit plan, and no head of internal audit is appointed or removed without its recommendation.
• The committee must sit between the external auditor and the board, and any change of auditor, with the reasons, must be disclosed and approved by the board and ultimately by the shareholders or county treasury as owner.
• The internal audit plan should be risk-based, and follow-up of findings tracked to closure with evidence shown to the committee.

Immediate steps on the contract:

1. Declare and record. The conflicted director must declare the interest in writing, and the declaration must be minuted. The director must withdraw from any further discussion, voting or supervision of the engagement.
2. Suspend further payment pending review, and confirm what has actually been delivered against the terms of the engagement. Value-for-money benchmarking against two or three comparable firms will indicate whether the fee is inflated.
3. Commission an independent review - a special audit, or a referral to the Office of the Auditor-General and, if there is evidence of corruption, the Ethics and Anti-Corruption Commission. This is a public entity; the board cannot quietly settle the matter.
4. Recover and disclose. Where overpayment or non-delivery is established, seek recovery; report the transaction as a related-party transaction in the financial statements with the terms and the amount outstanding; consider disciplinary action and, where a criminal offence is evidenced, report it.
5. Notify the owner. The county treasury and the lender in breach must be informed of the steps taken, with an action plan and timeline.

Preventing recurrence:

• A written related-party transaction policy: a register of interests refreshed annually and updated on any change, mandatory written declarations before every relevant agenda item, and a rule that any contract above a defined threshold with a director or close family member requires prior board approval with the conflicted director excluded and the reason minuted.
• A whistleblowing channel reporting to the audit committee chair, with a no-retaliation commitment.
• Procurement governance: a board-approved annual procurement plan, compliance with the tender thresholds, evaluation committee members signed up to a conflict declaration, and regular procurement audits reported to the audit committee.
• A gifts and hospitality register and a code of conduct signed by every director and senior officer, with an annual compliance attestation reviewed by the audit committee.