Governance Systems, Laws and Standards

Introduction

Corporate governance is the system through which companies are directed, controlled and held accountable. It allocates authority among shareholders, boards, executives and other affected parties; establishes mechanisms for monitoring performance; and provides rules for managing conflicts of interest. Corporate social responsibility (CSR) cannot be separated from governance because responsible conduct depends on who has power, whose interests are considered, how decisions are challenged and how performance is disclosed.

Governance operates at several levels. Company law establishes mandatory legal duties. Stock-exchange listing rules impose additional requirements on publicly traded companies. Governance codes recommend or require practices concerning boards, audit, remuneration and shareholder rights. International principles and soft-law standards provide widely accepted guidance on human rights, labour, environment, anti-corruption and responsible business conduct. These sources overlap, but they are not identical: a law may create enforceable duties, whereas a code may operate through disclosure, investor expectations or reputational pressure.

This chapter compares shareholder- and stakeholder-oriented models and explains how professionals interpret governance requirements in practice. Because company law differs across jurisdictions, examples are presented as general principles rather than as legal advice for a particular country.

Learning Objectives

By the end of this chapter, you should be able to:

1. Explain the purpose and architecture of corporate governance.
2. Compare shareholder-oriented and stakeholder-oriented governance models.
3. Distinguish company law, listing rules, governance codes and international standards.
4. Interpret the practical meaning of board duties, shareholder rights, disclosure and internal control.
5. Apply governance frameworks to a corporate responsibility case.
6. Evaluate the strengths and limitations of hard law, soft law and voluntary standards.

1. The Architecture of Corporate Governance

A company is a legal person, but it acts through human decision-makers. Shareholders usually elect directors; directors appoint or supervise senior executives; executives manage operations; and employees, suppliers, customers, creditors, regulators and communities experience the consequences of corporate decisions. Governance is therefore concerned with both authority and accountability.

Three questions define most governance systems:

• Who has decision-making power? This includes voting rights, board appointment rights and executive authority.
• Who bears risk or receives benefits? Shareholders may bear investment risk, while employees, communities and creditors may bear social, economic or environmental risks.
• How can decisions be monitored or challenged? Relevant mechanisms include independent directors, audits, shareholder resolutions, regulatory enforcement, whistleblowing and judicial remedies.

A useful governance chain is:

Figure: Governance links authority with monitoring, reporting and remedy.

Governance failures commonly arise when authority is concentrated without effective oversight. Examples include a dominant chief executive who controls the board agenda, directors who lack relevant independence or expertise, weak internal controls, misleading sustainability claims, and remuneration systems that reward short-term results while externalising social or environmental costs.

2. Shareholder and Stakeholder Models

2.1 The shareholder-oriented model

The shareholder model treats the corporation primarily as an instrument for creating long-term value for its owners. Directors are expected to protect shareholder interests, subject to the law and the company’s constitutional documents. In a narrow version, managerial success is judged mainly by profitability, dividends and share-price appreciation. In a modern version, long-term shareholder value requires attention to employees, customers, reputation, environmental risks and regulatory compliance.

The model is associated with the agency problem. Shareholders supply capital but normally do not manage the firm. Managers may pursue private benefits, excessive growth, prestige or short-term bonuses rather than owner interests. Governance responses include independent directors, audit committees, executive remuneration controls, disclosure, external audit and shareholder voting.

The shareholder model has several advantages. It provides a relatively clear objective, supports capital-market discipline and makes performance easier to measure. However, it may underrepresent people who have no shares but are materially affected by corporate conduct. It can also encourage short-termism if markets or remuneration systems reward immediate results.

2.2 The stakeholder-oriented model

The stakeholder model holds that corporate decisions should account for groups that affect, or are affected by, the company. Stakeholders may include employees, customers, suppliers, creditors, regulators, local communities, future generations and the natural environment. Shareholders remain important, but they are one constituency within a wider system of relationships.

Stakeholder governance is supported by several arguments. First, companies depend on stakeholder contributions: employees provide knowledge, suppliers provide inputs, communities provide infrastructure and legitimacy, and customers provide revenue. Second, corporate activities can create externalities, such as pollution or unsafe working conditions. Third, considering diverse interests may improve resilience and long-term value.

The principal challenge is decision complexity. If directors must balance many interests, it may be difficult to determine priorities or assess accountability. Stakeholder language can also become symbolic unless the company gives stakeholders real voice through consultation, worker representation, grievance systems, impact assessment and transparent reporting.

2.3 Comparative overview

These are ideal types. Most contemporary systems combine them. For example, a company may remain legally accountable to shareholders while being required to consider employees, creditors, environmental risks and community impacts. The practical question is not whether one model eliminates the other, but how the governance system allocates responsibility and makes trade-offs visible.

3. Important Governance Theories

Agency theory focuses on conflicts between principals and agents, especially shareholders and managers. Its tools include monitoring, incentives, fiduciary duties and sanctions.

Stewardship theory suggests that managers may act as responsible stewards whose motivations include professional purpose, organisational identity and long-term success. Excessive monitoring may be counterproductive if it undermines trust and initiative.

Stakeholder theory argues that legitimate interests beyond capital providers should influence corporate decisions. It is especially relevant to CSR, human rights and environmental governance.

Resource-dependence theory views the board as a source of expertise, contacts, legitimacy and access to resources. Board diversity may therefore improve not only fairness but also organisational capability.

Legitimacy theory explains disclosure and responsible conduct as ways of maintaining societal acceptance. A company may lose its social licence to operate even when it has not technically breached a legal rule.

No single theory explains every governance issue. Agency theory helps analyse executive pay and audit independence; stakeholder theory helps examine supply-chain labour risks; resource-dependence theory helps assess board composition; and legitimacy theory helps explain public reporting and corporate responses to controversy.

4. Company Law and Directors’ Duties

Company law is the foundation of the governance system. It typically addresses incorporation, separate legal personality, limited liability, directors’ powers, shareholder meetings, financial reporting, distributions, insolvency and remedies for misconduct.

4.1 Separate legal personality and limited liability

Separate legal personality means that the company owns its assets, incurs its liabilities and enters contracts in its own name. Shareholders generally are not personally liable for company debts merely because they own shares. Limited liability encourages investment, but it does not protect directors or officers from personal liability for fraud, wrongful conduct, breach of duty or certain statutory violations.

4.2 Directors’ duties

Although wording differs among jurisdictions, directors commonly owe duties to:

• act within the company’s powers and for proper purposes;
• exercise care, skill and diligence;
• act in good faith in the company’s interests;
• avoid unauthorised conflicts of interest;
• protect confidential information;
• disclose relevant interests in transactions; and
• consider the company’s long-term consequences, including legal, social and environmental risks where required.

A duty to act in the company’s interests does not necessarily mean choosing the option with the highest immediate profit. In many systems, directors may consider long-term consequences, employee interests, business relationships, reputation, environmental effects and the interests of creditors when insolvency is approaching. The precise legal test must always be checked against the applicable jurisdiction.

4.3 Shareholder rights and remedies

Common shareholder rights include voting, receiving specified information, attending meetings, electing or removing directors, approving certain major transactions and receiving declared distributions. Minority shareholders may have remedies for oppression, unfair prejudice, derivative actions or breaches of statutory protection, depending on local law.

Rights are meaningful only when information and participation are adequate. Notice periods, accessible meeting materials, electronic voting, independent meeting chairs and clear explanations of resolutions strengthen informed participation.

4.4 Internal control and assurance

Internal control includes policies and procedures designed to support reliable reporting, legal compliance, protection of assets and effective operations. It is not merely an accounting function. Controls may include segregation of duties, approval limits, access controls, risk registers, whistleblowing channels and supplier due diligence.

The board normally oversees risk and control, while management designs and operates controls. Internal audit provides independent evaluation within the organisation, and external audit provides assurance on financial statements under the relevant auditing framework. Neither audit function guarantees that all fraud or misconduct will be detected.

5. Listing Rules and Governance Codes

5.1 Listing rules

Listing rules are requirements imposed by a stock exchange or securities regulator on companies whose securities are admitted to trading. They commonly address timely disclosure, inside information, related-party transactions, free-float requirements, financial reporting, major acquisitions, shareholder approval and board committees.

Listing rules protect market integrity by reducing information asymmetry. A listed company must generally disclose information that could materially affect investors, subject to lawful exceptions. Selective disclosure, delayed disclosure and misleading statements may damage market confidence and expose the company and individuals to sanctions.

5.2 Governance codes

Governance codes typically address board leadership, independence, division of responsibilities, nomination, audit, remuneration, risk management, evaluation and stakeholder engagement. Many use a “comply or explain” approach: a company follows the recommended provision or explains why an alternative arrangement is appropriate.

Comply or explain is not automatically weak. A well-reasoned explanation can reflect the company’s size, ownership structure, jurisdiction or business model. A vague explanation such as “the board believes the arrangement is suitable” provides little accountability. Effective explanations identify the departure, give reasons, describe safeguards and state when the arrangement will be reviewed.

5.3 Board committees

A typical listed-company structure includes:

• Audit committee: financial reporting, external audit, internal control and risk oversight.
• Nomination committee: board composition, succession and appointment processes.
• Remuneration committee: executive pay, performance criteria and alignment with long-term outcomes.
• Risk or sustainability committee: enterprise risk, climate exposure, human rights, safety and other material non-financial risks.

Committees support informed oversight but do not remove the board’s collective responsibility. A committee can investigate and recommend; the full board remains accountable for decisions reserved to it.

6. International Principles and Soft Law

International standards help organisations operate consistently across borders. They are particularly important where national law is incomplete, unevenly enforced or inconsistent across supply chains.

6.1 OECD corporate governance principles

The G20/OECD Principles of Corporate Governance address an effective governance framework, shareholder rights, institutional investors, disclosure and transparency, board responsibilities, and sustainability and resilience. They are principles rather than a universal statute, but they influence national codes, regulators and investor expectations.

6.2 United Nations Global Compact

The UN Global Compact presents principles concerning human rights, labour, environment and anti-corruption. Participation is voluntary, and organisations are expected to communicate progress. The framework is useful for expressing commitments, but a policy statement alone does not prove effective implementation.

6.3 UN Guiding Principles on Business and Human Rights

The UN Guiding Principles are organised around the state duty to protect human rights, the corporate responsibility to respect human rights, and access to remedy. For companies, human-rights due diligence generally involves identifying impacts, preventing or mitigating them, tracking effectiveness, communicating responses and contributing to remedy where appropriate.

6.4 ILO principles and responsible business conduct

International labour principles support freedom of association, collective bargaining, elimination of forced and child labour, non-discrimination and safe working conditions. These principles are especially relevant to global supply chains, where contractual power may be separated from operational responsibility.

6.5 ISO 26000 and sustainability reporting

ISO 26000 offers guidance on social responsibility, including organisational governance, human rights, labour practices, environment, fair operating practices, consumer issues and community involvement. It is guidance rather than a certification standard. Reporting frameworks such as the Global Reporting Initiative and the IFRS Sustainability Disclosure Standards assist organisations in communicating material impacts, risks and opportunities. Their applicability depends on jurisdiction, investor requirements and reporting scope.

The term soft law should not be misunderstood as irrelevant. A voluntary standard can become practically influential through investor covenants, procurement conditions, lender requirements, litigation arguments, regulatory expectations or incorporation into company policy. Nevertheless, soft law usually lacks the direct enforceability of legislation, and its credibility depends on implementation, evidence and assurance.

7. Interpreting a Governance Requirement

Professionals can use a structured method when analysing a governance issue:

1. Identify the entity and jurisdiction. A private company, listed issuer, state-owned enterprise and charity may face different requirements.
2. Classify the source. Determine whether the requirement is statutory law, regulation, listing rule, governance code, contractual obligation or voluntary standard.
3. Determine its status. Ask whether it is mandatory, comply-or-explain, recommended or merely aspirational.
4. Identify the responsible actor. Responsibility may rest with the board, a committee, management, a compliance officer or an external assurance provider.
5. Define the evidence required. Evidence may include minutes, risk assessments, training records, contracts, audit findings, incident logs and disclosure controls.
6. Assess consequences. Consider legal penalties, market sanctions, civil claims, remediation, loss of trust and stakeholder harm.
7. Document judgement and escalation. Material uncertainty should be reported to appropriate senior governance bodies and, where necessary, external counsel or regulators.

A useful distinction is between compliance, conformance and performance. Compliance asks whether a rule has been followed. Conformance asks whether governance arrangements match an applicable code or policy. Performance asks whether the arrangements actually produce reliable, ethical and sustainable outcomes. A company may satisfy a formal disclosure requirement while still performing poorly if its disclosures are incomplete or its controls are ineffective.

8. Applied Case: Meridian Textiles and Supply-Chain Governance

This is a fictional illustrative case.

Background

Meridian Textiles plc is a listed clothing manufacturer. It publishes a supplier code requiring safe workplaces, no forced labour and lawful working hours. Its annual report describes a “robust ethical sourcing programme.” The board receives an annual summary showing that 96% of tier-one suppliers were audited.

Problem

A fire at a subcontracted facility causes injuries. The facility was not directly contracted by Meridian and was therefore absent from the supplier audit population. Journalists report excessive overtime and recruitment-fee debt among workers. Investors ask whether the company’s sustainability statements were misleading and whether the board adequately supervised supply-chain risk.

Analysis

The issue involves several governance layers. Company law may require directors to exercise care and act in the company’s interests. Listing rules may require accurate disclosure of material risks. A governance code may expect the board to oversee principal risks and internal controls. The UN Guiding Principles would prompt Meridian to examine adverse human-rights impacts connected to its business relationships, even where the company did not directly cause the harm.

The 96% figure is technically accurate for the defined population but potentially misleading if readers reasonably understand it to cover all production. This illustrates why governance depends on definitions, scope and context, not only percentages. The board should ask how suppliers are selected, whether subcontracting is monitored, whether workers can complain safely, and whether audit results are independently verified.

Approach and solution

Meridian should immediately protect affected workers, cooperate with emergency and regulatory authorities, and provide remedy where its contribution to harm is established. It should map tier-two and higher-risk suppliers, require disclosure of subcontracting, and use worker-centred assessments rather than relying solely on announced audits. Contracts should include enforceable standards, but contractual language should not be treated as a substitute for due diligence.

The audit committee should review disclosure controls, while the board should reassess risk appetite and executive incentives. The company should publish a corrective report explaining the original scope, the gap, the remediation plan, progress indicators and assurance arrangements. A confidential grievance channel, accessible in relevant languages and independent from local management, should supplement formal audits.

Outcome and learning points

The case demonstrates that governance quality depends on substance, not labels. “Supplier code,” “audit coverage” and “zero tolerance” are not outcomes. They must be supported by reliable scope definitions, board oversight, worker voice, credible evidence and remedy. It also demonstrates the convergence of shareholder and stakeholder concerns: unsafe labour conditions create human harm, operational disruption, legal exposure, reputational damage and potential loss of investor value.

9. Challenges and Contemporary Developments

Greenwashing and social washing

Companies increasingly publish environmental and social claims. Claims become problematic when they are vague, selective, unsupported or based on distant targets without credible transition plans. Governance responses include board approval of material claims, documented methodologies, consistent boundaries, evidence retention and independent assurance.

Climate and transition governance

Boards are expected by investors and regulators to understand climate-related risks, including physical damage, changing regulation, technology shifts and market transition. Good governance integrates these risks into strategy, capital allocation, enterprise risk management and remuneration rather than treating climate reporting as a communications exercise.

Technology, data and artificial intelligence

Digital systems can improve compliance monitoring, supply-chain traceability and fraud detection. Artificial intelligence can help identify unusual transactions or analyse large volumes of documents. However, automated systems may reproduce bias, use poor-quality data or make decisions that cannot be adequately explained. Boards should require clear accountability, data governance, access controls, human review and testing for accuracy and discrimination. Technology is an aid to governance, not a replacement for judgement.

Board diversity and competence

Diversity includes gender, ethnicity, nationality, professional background, age, disability and lived experience. Its governance value is strongest when diverse directors are able to challenge assumptions and participate meaningfully. Token appointments without inclusion do not solve oversight weaknesses. Boards should map required competencies, evaluate effectiveness and plan succession.

Global fragmentation

Multinational companies face different disclosure obligations, due-diligence expectations and enforcement cultures. The practical response is not always to adopt the lowest common denominator. Many companies establish group-wide minimum standards, then adapt procedures to local law while preserving non-negotiable principles concerning safety, human rights, anti-corruption and truthful reporting.

Best-Practice Checklist

An effective governance system generally includes:

• a clear division of responsibilities between board and management;
• directors with appropriate independence, competence and time;
• reliable information and escalation channels;
• effective audit, risk and remuneration oversight;
• controls for conflicts, bribery, related-party transactions and retaliation;
• meaningful shareholder and stakeholder engagement;
• due diligence proportionate to risk and business relationships;
• accurate, balanced and decision-useful reporting;
• mechanisms for complaints, investigation and remedy; and
• regular evaluation of whether governance arrangements produce ethical outcomes.

Chapter Summary

Corporate governance is the architecture of authority, oversight and accountability within and around the company. Shareholder-oriented models emphasise ownership rights and investor value, while stakeholder-oriented models recognise the legitimate interests and contributions of employees, communities, customers, suppliers, creditors and the environment. Contemporary governance commonly combines elements of both.

Company law provides the mandatory foundation, including separate legal personality, directors’ duties, shareholder rights, reporting and remedies. Listing rules protect market integrity through disclosure and approval requirements. Governance codes provide structured expectations for boards, committees, risk, remuneration and engagement, often through comply-or-explain mechanisms. International principles and soft-law standards guide responsible conduct in areas such as human rights, labour, environment and anti-corruption. Their influence may be practical even when direct legal enforcement is limited.

Interpreting governance requires attention to jurisdiction, source, legal status, responsible actor, evidence and consequences. Effective governance goes beyond formal compliance: it tests whether controls work, information is reliable, affected people can raise concerns, and harm is prevented or remedied. Supply-chain responsibility, climate governance, greenwashing, board diversity and responsible use of AI show why governance and CSR are inseparable.

Key Terms

Agency theory: The study of conflicts between principals, such as shareholders, and agents, such as managers.

Board of directors: The body responsible for directing and overseeing the company.

Company law: Legislation governing the formation, operation, rights and responsibilities of companies.

Comply or explain: An approach requiring compliance with a governance recommendation or a credible explanation for departure.

Corporate governance: Systems for directing, controlling and holding an organisation accountable.

Due diligence: A process for identifying, preventing, mitigating and accounting for risks and impacts.

Externality: A cost or benefit affecting parties not fully involved in the transaction creating it.

Fiduciary duty: A duty of loyalty and responsible conduct owed by a person entrusted with another’s interests.

Hard law: Legally enforceable rules created by legislation, regulation or binding judicial decisions.

Internal control: Procedures supporting reliable reporting, compliance, asset protection and effective operations.

Listing rules: Requirements imposed on companies whose securities trade on an exchange.

Material information: Information that could reasonably influence investor decisions or market prices.

Stakeholder: A person or group affected by, or able to affect, an organisation.

Shareholder model: A governance approach prioritising owner interests, usually through long-term value creation.

Soft law: Non-statutory principles, standards or guidance that influence conduct without equivalent direct enforceability.

Stewardship theory: The view that managers can act as trustworthy custodians of organisational resources.

Sustainability disclosure: Reporting about material environmental, social and governance risks, impacts and opportunities.

Whistleblowing: Reporting suspected wrongdoing through an internal or external channel.

Review Questions

Short Answer Questions

1. What are the principal functions of corporate governance?
2. State two differences between shareholder and stakeholder models.
3. What is the purpose of listing rules?
4. Explain the meaning of “comply or explain.”
5. Why is soft law relevant to multinational companies?

Long Answer Questions

1. Compare agency theory, stakeholder theory and stewardship theory in relation to board oversight.
2. Explain how company law, listing rules and governance codes interact.
3. Discuss the role of audit, risk and remuneration committees.
4. Evaluate the strengths and limitations of international soft-law standards.
5. Explain why formal compliance may not produce effective CSR governance.

Analytical / Application Questions

1. A listed company reports that all contracted suppliers comply with its labour code, but it does not monitor subcontractors. Analyse the governance and disclosure risks.
2. A board proposes executive bonuses based only on annual profit. Recommend changes using shareholder and stakeholder perspectives.
3. A company uses an AI system to screen suppliers for corruption risk. Identify governance controls needed to ensure the system is accountable and reliable.

Multiple Choice Questions with Answers

Question 1

Which statement best describes corporate governance?

A. A system only for increasing annual profits

B. A system for directing, controlling and holding an organisation accountable

C. A marketing programme for community relations

D. A statutory audit performed by external accountants

Correct Answer: B. A system for directing, controlling and holding an organisation accountable

Question 2

What is a central concern of agency theory?

A. Conflicts between owners and managers

B. The design of environmental technologies

C. The calculation of national income

D. The recruitment of trade unions

Correct Answer: A. Conflicts between owners and managers

Question 3

Which instrument is most directly associated with companies admitted to trading on a stock exchange?

A. A voluntary supplier code

B. Listing rules

C. A community consultation

D. An internal mission statement

Correct Answer: B. Listing rules

Question 4

Under a comply-or-explain approach, a company that departs from a recommended governance provision should normally:

A. Ignore the departure

B. Seek approval from every employee

C. Provide a credible explanation for the departure

D. Automatically dissolve the board

Correct Answer: C. Provide a credible explanation for the departure

Question 5

Which body normally has collective responsibility for the direction and oversight of a company?

A. The board of directors

B. The external auditor alone

C. The public relations department

D. A single supplier

Correct Answer: A. The board of directors

Question 6

Which is a typical subject of an audit committee’s oversight?

A. Product packaging colour

B. Financial reporting and internal control

C. Employee holiday preferences

D. Advertising slogans only

Correct Answer: B. Financial reporting and internal control

Question 7

What is the principal focus of the UN Guiding Principles on Business and Human Rights for companies?

A. Maximising dividends regardless of impact

B. Identifying, preventing, mitigating and addressing human-rights impacts

C. Replacing all national labour laws

D. Prohibiting all international trade

Correct Answer: B. Identifying, preventing, mitigating and addressing human-rights impacts

Question 8

Why can a statement that 96% of suppliers were audited still be misleading?

A. Percentages can never be used in reports

B. The defined population may exclude important subcontractors

C. Audits are always illegal

D. Suppliers cannot be assessed

Correct Answer: B. The defined population may exclude important subcontractors

Question 9

Which practice best supports meaningful stakeholder governance?

A. Publishing only positive achievements

B. Providing accessible engagement and grievance mechanisms

C. Removing all independent directors

D. Avoiding documentation of risks

Correct Answer: B. Providing accessible engagement and grievance mechanisms

Question 10

Which is an appropriate governance control for an AI-based supplier-screening system?

A. Allowing the system to operate without human review

B. Using undocumented data from unknown sources

C. Testing accuracy and bias and assigning clear human accountability

D. Keeping all decision criteria permanently secret

Correct Answer: C. Testing accuracy and bias and assigning clear human accountability