Ask a board member to describe their organisation’s risk appetite, and most will give you a confident, considered answer. Ask them to point to where that risk appetite actually shows up — in a board pack, a committee decision, a line of minutes — and the confidence tends to thin out.
That gap is the problem I keep running into across audit, risk, and finance committees: boards that can talk about governance fluently, but can’t produce evidence of it.
Financial oversight doesn’t have this problem, structurally. A set of accounts is auditable by design — every number traces to a transaction, every transaction to a decision, every decision to someone accountable for it. Nobody accepts “we generally feel the numbers are sound” as a substitute for a balance sheet that reconciles.
Governance oversight, on the other hand, is too often treated as a feeling rather than a ledger. Boards adopt a risk framework once, at induction, and then refer back to the feeling of having done so rather than the evidence of applying it. Skills matrices get built for a single funding submission and never touched again. Minutes record that risk was “discussed” without recording what, specifically, changed as a result.
None of this is dishonesty. It’s the natural drift that happens when oversight isn’t held to the same evidentiary standard as the finance function sitting next to it on the same board agenda.
The fix isn’t more governance. It’s the same rigour, applied.
A finance team wouldn’t report “revenue is tracking well” without the figures behind it. A board shouldn’t report “governance is sound” without being able to point to the specific evidence — the paper trail of challenge, the committee minute where a decision was actually contested, the skills gap that was identified and then closed, not just noted.
This is, in practice, what a Board Health Check exists to surface: not judgement about whether a board is “good,” but an honest audit of whether its own oversight claims are backed by evidence — the same way a financial audit doesn’t ask whether a business is profitable, it asks whether the numbers can be trusted.
A board that can’t produce evidence of its own oversight has no more credibility than a set of unaudited accounts. The difference is that nobody’s required to sign off on governance the way they are on financial statements — yet.
That’s changing. Increased scrutiny on NFP boards, tightening regulatory expectations, and a director cohort that’s more willing to ask hard questions of itself are all pushing governance toward the same standard of evidence that finance has always required.
Boards that get ahead of that shift — treating their own oversight like an auditable discipline rather than a description of intent — won’t just survive the scrutiny. They’ll be the ones setting the standard everyone else gets measured against.
Mark Fenton is Principal Consultant at Governance Bureau, and has chaired or served on Audit, Risk and Finance Committees for nine organisations across commercial and not-for-profit boards over more than 23 years as a non-executive director and Chair. Governance Bureau’s Audit, Risk & Finance Committee Advisory service offers a focused, independent review of your committee’s structure, reporting and risk framework. Governance Bureau is a project of the Inspire Grow Flourish Society, a non-profit unincorporated organisation.