ICSAN Board Dynamics cheat sheet

Two core common-law duties: duty of care (act with the diligence of a reasonably prudent person in comparable circumstances) and duty of loyalty (act in good faith in the company's best interests, avoid conflicts).

Business judgment rule: courts defer to informed, good-faith decisions made by disinterested directors, even if the outcome later proves poor; rebutted by fraud, illegality, or gross negligence.

Fiduciary duties are owed to the company as a whole, not to individual shareholders, employees, or a controlling shareholder.

Nigerian statutory overlay: CAMA 2020 codifies directors' duties of good faith, honesty, and diligence (ss. 305-308), including a duty not to fetter discretion and to disclose conflicts.

Non-executive directors carry the same legal duties as executives; the distinction affects time commitment and information reliance, not liability standard.

Duty to prevent insolvent trading and duty to consider creditors' interests intensify as the company approaches insolvency.

Reliance defence: a director may rely on reports from officers, committees, and experts unless the director knew or should have known reliance was unwarranted.

Delegation does not discharge liability: a director who delegates remains responsible for supervising the delegate and the delegated function.

Independence tests typically exclude former employees, close family of executives, material suppliers/customers, advisers with material fees, and directors serving beyond a set tenure (commonly 9-12 years).

Board size trade-off: larger boards widen expertise and monitoring but slow decision-making and increase free-riding; typical listed-company range is 7-12 members.

Separation of chair and CEO roles reduces concentration of power; where combined, an independent lead or senior independent director is the common mitigation.

Majority-independent boards are the norm for listed companies; a controlling shareholder can still dominate outcomes despite formal independence.

Diversity levers: gender, skills matrix, industry, tenure, and nationality; tenure diversity balances institutional memory against board refreshment.

Succession planning for the board itself: staggered retirement or rotation by thirds maintains continuity while enabling renewal.

Board structure should map to strategy and risk profile: e.g., a bank's board needs credit and risk expertise that a media company's board may not.

Independence is a status assessed annually and can lapse mid-term; disclosure of independence determinations supports stakeholder trust.

Mandatory or market-standard committees for listed companies: audit, remuneration, and nomination/governance; risk committee common in financial services.

Audit committee composition: all non-executive, majority independent, and at least one member with recent and relevant financial experience; chair should not be board chair.

Audit committee core remit: integrity of financial reporting, external auditor appointment and independence, internal control and internal audit oversight.

Remuneration committee sets executive pay and incentive design; nomination committee leads board appointments, skills matrix, and succession.

Delegation requires a written terms of reference defining authority, quorum, reporting lines, and matters reserved to the full board.

Matters typically reserved to the full board: strategy, annual budget, major acquisitions/disposals, capital structure, dividends, and board appointments.

Committees recommend; the full board decides, unless authority is expressly delegated; committee minutes must be tabled at the next board meeting.

Committee effectiveness depends on information flow: management papers, adviser access, and the right to obtain independent professional advice.

Meeting cycle: annual calendar set in advance; typical listed-company board meets 6-8 times a year plus strategy offsite.

Quorum rules are set in the articles; a director with a conflict of interest is usually excluded from quorum and voting on that item.

Agenda design: standing items (performance, risk, compliance, safety) plus strategic deep dives; consent agenda for routine approvals saves time.

Board pack quality rule: information should be decision-ready - issue, options, recommendation, risks, and financial impact - not a data dump.

Circulation norm: papers sent at least 5-7 working days before the meeting to allow pre-reading; late papers should be flagged and justified.

Minutes should record decisions, rationale, dissent, and conflicts; they are the primary evidence of directors' discharge of duty.

Written resolutions and unanimous consent procedures are permitted under many constitutions but should not replace deliberation on material matters.

Executive sessions (directors only, without management) strengthen candour and are a standard governance practice.

Board evaluation cycle: annual internal review plus external facilitation every 2-3 years is the market-standard cadence.

Evaluation scope: board as a whole, each committee, the chair, and individual director contribution; 360-degree input from peers improves rigour.

Outputs should be an action plan with owners and timelines, tracked at subsequent meetings; evaluations without follow-through are a governance failure.

Skills matrix maps current director competencies against strategy and risk needs; gaps drive recruitment and training priorities.

Induction for new directors: company strategy, financials, governance framework, key risks, site visits, and meetings with management and auditors.

Continuous development: regulatory updates, financial literacy, ESG, cyber, and AI governance are current priority training areas.

Chair effectiveness indicators: agenda control, boardroom inclusion, candour, time management, and quality of challenge to management.

Tenure and refreshment: long tenure can erode independence; rotation and retirement policies sustain fresh perspective.

Groupthink symptoms: illusion of unanimity, self-censorship, pressure on dissenters, and collective rationalisation; prevention includes devil's advocate and pre-mortem.

Cognitive biases in the boardroom: anchoring, confirmation bias, overconfidence, and availability bias distort risk assessment and strategy review.

Social loafing increases with board size; clear role expectations and individual contribution reviews counter free-riding.

Power distance and status effects silence junior or non-executive voices; the chair's role is to elicit minority views before revealing consensus.

Decision quality levers: framing the question, generating alternatives, independent pre-reading, and recording dissent in minutes.

Conflict is functional when task-focused (debate on ideas) and dysfunctional when relationship-focused (personal attacks); the chair manages the boundary.

Diversity of thought improves decision quality only when psychological safety allows challenge; otherwise diversity is cosmetic.

Board-management dynamics: constructive challenge versus adversarial oversight; excessive distance starves the board of information, excessive closeness erodes independence.

Stakeholder map: shareholders, employees, customers, suppliers, regulators, communities, and lenders; each has different salience and engagement channels.

Materiality assessment identifies which ESG and stakeholder issues are decision-relevant to the business and its financial performance.

Shareholder engagement: annual general meeting, results presentations, investor roadshows, and direct dialogue with major institutional investors.

Stewardship codes (e.g., UK, Nigeria) encourage institutional investors to engage and vote; boards should track voting outcomes and dissent.

Board-management relations: management executes strategy; the board sets strategy, oversees, and appoints/removes the CEO.

Information asymmetry is the core board-management risk; mitigation includes direct access to management below the CEO and to internal audit.

Related-party transactions require independent director review and disclosure to prevent value extraction by insiders.

Whistleblowing channels should report to the audit committee or an independent function, not solely to line management.

Risk appetite statement defines the level of risk the board is willing to accept to pursue strategy; it must be quantified where possible.

Three lines model: management owns risk (first line), risk/compliance functions oversee (second line), internal audit provides independent assurance (third line).

Enterprise risk management links risk register to strategy, with likelihood and impact scoring and named risk owners.

Board risk oversight: review top risks at every meeting, stress-test scenarios, and ensure risk culture is reinforced through incentives.

Compliance programme elements: tone at the top, policies, training, monitoring, whistleblowing, and proportionate discipline for breaches.

Ethical governance: code of conduct, conflict-of-interest register, gifts and hospitality policy, and anti-bribery controls (e.g., FCPA, UK Bribery Act).

Cyber and AI risk are now board-level items requiring specific expertise, incident response plans, and disclosure protocols.

Internal control frameworks (e.g., COSO) provide the reference model for control environment, risk assessment, control activities, information, and monitoring.

Delegation instrument: board resolution plus written terms of reference specifying composition, quorum, frequency, and reporting obligations.

Audit committee should meet the external auditor without management present at least annually.

Committee chairs report to the full board; material issues must escalate promptly, not wait for the next scheduled meeting.

Committee authority limits (e.g., capital approval thresholds) should be documented in a delegation of authority matrix.

Risk committee (where separate from audit) focuses on risk appetite, emerging risks, and risk culture; avoid duplication with audit.

Nomination committee should lead the CEO succession plan and board skills review, reporting progress to the full board.

Committee self-evaluation feeds into the annual board effectiveness review.

Advisers: committees should have authority to engage independent legal, accounting, or other advisers at company expense.

Individual director appraisal criteria: attendance, preparation, contribution to debate, independence of judgement, and committee performance.

Board evaluation should be evidence-based: meeting attendance records, decision logs, and stakeholder feedback, not only self-report.

External evaluation adds credibility and surfaces issues internal review may suppress; disclose whether evaluation was externally facilitated.

Development plans should be director-specific, tied to skills matrix gaps, and reviewed at least annually.

Board induction should include a governance handbook and a mentor pairing with a senior director.

Chair succession and CEO succession are distinct processes; both should be owned by the nomination committee.

Effectiveness metrics: decision cycle time, quality of board papers, challenge frequency, and follow-through on action items.

Underperformance handling: private chair feedback first, then formal review, then non-renewal or removal under the articles.

Pre-mortem technique: assume the decision failed and identify causes; surfaces risks that optimism suppresses.

Red teaming and devil's advocate roles assign structured dissent to counter conformity pressure.

Group polarisation: discussion can shift the board toward more extreme positions than individual members would choose alone.

Escalation of commitment: boards persist with failing strategies to justify prior decisions; independent review breaks the cycle.

Decision rights clarity (who decides, who consults, who is informed) prevents ambiguity and duplicated debate.

Silence is not consent: the chair should explicitly test for dissent before closing a decision.

Boardroom culture indicators: speaking time distribution, frequency of challenge to the CEO, and willingness to admit uncertainty.

After-action reviews of major decisions build organisational learning and improve future judgement.

Stakeholder salience depends on power, legitimacy, and urgency; the board prioritises engagement accordingly.

Investor relations and board engagement should be coordinated; directors may meet major shareholders where management requests or governance requires.

Employee voice: engagement surveys, works councils, and direct board access to HR and internal audit.

Regulator engagement: proactive dialogue on supervisory findings, remediation plans, and governance changes.

Community and NGO engagement: materiality-driven, with disclosure of impacts and mitigation.

Board-management boundary: the board should not manage; management should not withhold material information from the board.

CEO performance review should be formal, annual, and linked to strategy delivery and risk culture, not only financial results.

Stakeholder complaints and grievances should have a defined escalation route to the board or a committee.

Risk register should be reviewed at least quarterly, with top risks mapped to strategy and to named owners.

Key risk indicators (KRIs) provide early warning; thresholds should be set and monitored against risk appetite.

Stress testing and scenario analysis test resilience to severe but plausible events.

Compliance monitoring should be risk-based, with higher intensity for higher-risk areas (e.g., AML, sanctions, bribery).

Tone at the top is measured by what leaders reward and tolerate, not by policy statements alone.

Conflict-of-interest register should be updated at least annually and reviewed before relevant decisions.

Whistleblower protections should include anonymity, non-retaliation, and independent investigation.

Board should receive regular compliance reports covering breaches, remediation, and regulatory developments.

Duty to act within powers: directors must exercise powers for proper purposes and only within the constitution.

Duty to exercise independent judgement: directors must not fetter discretion or act as a delegate of a shareholder or third party.

Duty to avoid conflicts: disclose interests, recuse from voting, and obtain board approval for conflicted transactions.

Duty not to accept benefits from third parties that conflict with the director's duties.

Duty to declare interest in proposed transactions (statutory disclosure requirement in most common-law jurisdictions).

Personal liability can attach for breach of duty, fraudulent trading, or failure to maintain proper records.

Directors' and officers' (D&O) insurance covers defence costs and certain liabilities but not deliberate wrongdoing or personal profit.

Indemnities and exculpation clauses are limited by statute and public policy; they cannot excuse bad faith.

Skills matrix should be reviewed annually against strategy, risk, and succession needs.

Board diversity targets should be specific and disclosed, with progress tracked annually.

Independence determination should be made by the board and disclosed, with reasons for any non-independent classification.

Board size should support efficient decision-making; oversized boards risk diffusion of responsibility.

Separation of chair and CEO is a governance best practice; where combined, an independent lead director should be appointed.

Director tenure limits (often 9-12 years) support refreshment and independence.

Board should include at least one director with financial expertise and, for regulated firms, relevant sector expertise.

Succession planning for the board and CEO should be reviewed annually by the nomination committee.

Annual board calendar should include strategy, budget, risk, compliance, and succession items.

Board papers should be concise, decision-focused, and circulated in advance; late papers should be exceptional.

Minutes should record decisions, rationale, dissent, and conflicts of interest.

Quorum and voting rules should be set in the articles and applied consistently.

Executive sessions without management should be scheduled regularly.

Written resolutions should be used sparingly for routine matters, not for material decisions.

Board portal and secure information systems support confidentiality and timely access.

Meeting effectiveness should be reviewed periodically, including agenda quality and time allocation.

Board evaluation should cover the board, committees, chair, and individual directors.

External facilitation every 2-3 years adds independence and credibility.

Action plans from evaluations should have owners and timelines and be tracked.

Induction should cover strategy, financials, governance, risk, and stakeholder landscape.

Continuous development should include regulatory, ESG, cyber, and AI governance topics.

Chair effectiveness should be assessed against agenda control, inclusion, and quality of challenge.

Individual director appraisal should inform renewal and succession decisions.

Board effectiveness metrics should include decision quality, information flow, and follow-through.

Groupthink can be countered by structured dissent, pre-mortems, and independent pre-reading.

Cognitive biases such as anchoring and confirmation bias distort board judgement.

Social loafing increases with board size; clear expectations counter it.

Power distance can silence minority voices; the chair should elicit dissent before consensus.

Decision quality depends on framing, alternatives, and recording dissent.

Task conflict can be constructive; relationship conflict is destructive.

Psychological safety enables diversity of thought to improve decisions.

Board-management relations require constructive challenge without adversarial distance.

Stakeholder salience depends on power, legitimacy, and urgency.

Materiality assessment identifies decision-relevant stakeholder and ESG issues.

Shareholder engagement includes AGM, results presentations, and direct dialogue with major investors.

Stewardship codes encourage institutional investor engagement and voting.

The board sets strategy and oversees; management executes.

Information asymmetry is the core board-management risk; direct access to management and internal audit mitigates it.

Related-party transactions require independent director review and disclosure.

Whistleblowing channels should report to the audit committee or an independent function.

Risk appetite statement defines acceptable risk levels and should be quantified where possible.

Three lines model: management owns risk, risk/compliance oversees, internal audit assures.

Enterprise risk management links risk register to strategy with likelihood and impact scoring.

Board risk oversight includes reviewing top risks, stress testing, and reinforcing risk culture.

Compliance programme elements include tone at the top, policies, training, monitoring, and whistleblowing.

Ethical governance includes code of conduct, conflict-of-interest register, and anti-bribery controls.

Cyber and AI risk require board-level expertise and incident response plans.

Internal control frameworks such as COSO provide the reference model for control environment and monitoring.