Governance Framework, Structures and Decision-Making
This domain tests how you translate principles into a working governance framework: the structures, roles, processes and information flows that let a governing body actually direct and control the organization.
Framework anatomy
A governance framework combines structures (governing body, committees, executive), processes (decision-making, delegation, reporting, escalation), documented roles and terms of reference, information flows, and culture. ISO 37000 expects the framework to be designed around the organization's purpose, size, complexity, ownership and legal/regulatory setting - not copied from a listed-company template.
Structures and decision rights
The load-bearing mechanisms are:
- a schedule of reserved matters - decisions only the governing body may take;
- delegation of authority with explicit financial and risk thresholds;
- committee charters that avoid overlapping mandates;
- composition with a skills matrix and enough independence to challenge;
- quorum, conflict-of-interest and minutes rules that make decisions traceable: who decided, on what information, with what risk considered.
Worked example
A group establishes a subsidiary board. Reserved to the parent: capital expenditure above a set threshold, appointment and removal of the subsidiary CEO, changes to purpose or strategy, and related-party transactions. Delegated to the subsidiary: operations, contracts below threshold, routine hiring. Reporting: a monthly performance dashboard, quarterly risk deep-dive, and annual review of the delegation matrix itself. Reasoning: delegation transfers authority, never accountability - the parent remains answerable.
Traps that cost marks
- Treating "board approves" as evidence of governance, ignoring how the decision was informed.
- Delegation matrices with gaps, producing shadow authority and unclear escalation.
- Information asymmetry: the governing body sees only what management chooses to present.
- Committees without charters, duplicated oversight, and unclear reporting lines into the board.