Ethics, Governance, and Responsible Leadership

Introduction

Entrepreneurial organizations often begin with concentrated ownership, informal relationships, rapid experimentation, and a founder who simultaneously acts as strategist, recruiter, salesperson, and chief decision maker. These characteristics can create speed and commitment, but they also create ethical and governance risks. Decisions that appear private may affect employees, customers, investors, communities, suppliers, and the environment. As an enterprise grows, informal trust must be supplemented by transparent processes, defined authority, reliable information, and mechanisms for challenge.

Ethics concerns what an organization ought to do; governance concerns how authority is directed, monitored, and held accountable; responsible leadership concerns how leaders integrate ethical judgment, stakeholder interests, long-term consequences, and institutional integrity into action. Compliance is necessary but insufficient. A legal decision can still be exploitative, misleading, or socially damaging, while an ethical decision may require an organization to exceed minimum legal requirements.

This chapter develops practical and analytical foundations for responsible management in founder-led and growing organizations. It examines ethical theories, decision frameworks, boards and controls, risk oversight, speak-up systems, sustainability, stakeholder responsibility, and the effects of technology and artificial intelligence.

Learning Objectives

By the end of this chapter, students should be able to:

1. Distinguish ethics, compliance, governance, accountability, and corporate responsibility.
2. Apply major ethical theories to managerial dilemmas.
3. Use structured frameworks to identify stakeholders, alternatives, consequences, and duties.
4. Design proportionate governance and internal-control systems for growing ventures.
5. Evaluate whistleblowing, conflicts of interest, risk oversight, sustainability, and responsible stakeholder practices.
6. Critically assess the limits of codes, metrics, boards, and formal compliance systems.
7. Recommend responsible leadership actions in ambiguous entrepreneurial situations.

1. The Ethical and Governance Challenge of Entrepreneurship

Entrepreneurial organizations face recurring tensions:

• speed versus deliberation;
• confidentiality versus transparency;
• founder control versus accountability;
• growth versus safety;
• innovation versus privacy;
• investor returns versus stakeholder welfare; and
• short-term survival versus long-term legitimacy.

These tensions are not solved by one universal rule. They require judgment informed by values, evidence, law, organizational purpose, and the distribution of power. A founder may have the legal authority to dismiss a critic, change a product feature, or pursue aggressive sales tactics, but authority does not by itself make the action responsible.

Ethics, morality, law, and compliance

Morality refers broadly to beliefs about right and wrong. Ethics is the systematic examination and justification of such beliefs. Law consists of enforceable rules established by a legitimate legal authority. Compliance is the organizational process of meeting applicable legal, regulatory, contractual, and internal requirements.

The categories overlap but are not identical. Laws may be incomplete, outdated, or poorly enforced. Internal policies may be stricter than law. Ethical responsibility asks questions such as:

• Who may be harmed?
• Who benefits, and who bears the cost?
• Is the decision honest and non-coercive?
• Would affected parties regard the process as fair?
• Can the organization explain the decision publicly?
• Does the action protect human dignity and future options?

Governance as the architecture of accountability

Governance is the system through which an organization is directed, controlled, and held answerable. It includes ownership rights, board responsibilities, management authority, reporting relationships, policies, controls, incentives, assurance, and stakeholder engagement. Good governance does not eliminate entrepreneurial discretion; it makes discretion visible, bounded, and reviewable.

A useful distinction is between:

• Management: making and implementing operating decisions.
• Governance: setting direction, overseeing management, protecting the organization’s purpose, and monitoring accountability.
• Stewardship: using entrusted resources for the long-term interests of the organization and its legitimate stakeholders.

2. Ethical Theories for Managerial Judgment

No single theory resolves every dilemma. Theories are analytical lenses that reveal different dimensions of a decision.

Consequentialism and utilitarian reasoning

Consequentialism evaluates an action by its expected outcomes. Utilitarian reasoning asks which feasible option is likely to produce the greatest overall welfare, considering benefits, harms, probability, duration, and affected parties.

Its strength is attention to real-world effects. Its limitations include difficulty measuring welfare, uncertainty about future outcomes, and the risk of sacrificing minorities for aggregate gains. In business, a cost-saving action that benefits thousands may still be unacceptable if it imposes severe, avoidable harm on a vulnerable group.

Deontological ethics

Deontological approaches emphasize duties, principles, and respect for persons. A manager should not deceive customers merely because deception would increase revenue. Individuals should not be treated solely as instruments for organizational goals. Duties may include keeping promises, telling the truth, respecting consent, protecting confidentiality, and honoring rights.

The strength of this approach is its protection against rationalizing serious misconduct through predicted benefits. Its limitation is that duties may conflict, requiring judgment about priority and context.

Virtue ethics

Virtue ethics asks what a good professional or organization would do and what character is cultivated by repeated choices. Relevant virtues include honesty, courage, fairness, humility, prudence, compassion, and accountability. A sales culture that rewards exaggeration may gradually normalize dishonesty even if no single statement appears catastrophic.

Virtue ethics directs attention to habits, role models, incentives, and organizational character rather than isolated decisions.

Justice and fairness

Justice theories examine the fair distribution of benefits and burdens, fair procedures, and recognition of persons. A decision may be efficient yet unjust if affected communities have no voice, if risks are imposed on those least able to bear them, or if comparable cases are treated inconsistently.

Procedural fairness asks whether people had notice, an opportunity to be heard, impartial review, and reasons for decisions. These principles are especially important in hiring, promotion, algorithmic decisions, discipline, layoffs, and access to services.

Ethics of care and relational responsibility

Care ethics emphasizes relationships, dependency, vulnerability, empathy, and contextual responsibility. It is particularly useful where formal contracts do not capture the moral significance of relationships—for example, care services, employment insecurity, customer vulnerability, or founder obligations to early employees.

Stakeholder theory

Stakeholder theory holds that organizations have responsibilities to parties who affect or are affected by organizational activity. Stakeholders may include employees, customers, investors, suppliers, regulators, communities, future generations, and the natural environment. Stakeholder analysis does not mean that every demand must be accepted. It requires managers to identify affected interests, justify trade-offs, and avoid treating less powerful groups as invisible.

3. A Decision Framework for Managerial Dilemmas

A practical ethical decision process should be rigorous without becoming bureaucratic. The following seven-stage framework is suitable for founder-led ventures:

1. Clarify the decision. State what must be decided, by when, and who has authority.
2. Gather facts. Separate verified facts, assumptions, uncertainties, and missing information.
3. Identify stakeholders. Consider direct, indirect, vulnerable, silent, and future stakeholders.
4. Generate alternatives. Include doing nothing, delaying, piloting, compensating, or redesigning the proposal.
5. Test alternatives. Apply legal, consequence, duty, fairness, care, virtue, and reversibility tests.
6. Decide and document. Record reasons, dissenting views, safeguards, owners, and review dates.
7. Monitor and learn. Track outcomes, unintended effects, complaints, and whether the decision should be revised.

A decision matrix can make reasoning explicit. For each alternative, managers can record expected benefits, foreseeable harms, affected stakeholders, legal constraints, reversibility, information quality, and mitigation measures. A matrix is not a mechanical substitute for judgment; it is a discipline against omission and self-serving rationalization.

The publicity and reciprocity tests

The publicity test asks whether the decision could be defended openly to an informed and reasonable audience, including those harmed by it. The reciprocity test asks whether the decision maker would accept the same treatment if roles were reversed. These tests are not conclusive, but they expose secrecy, double standards, and conflicts between stated values and actual behavior.

Escalation criteria

A matter should generally be escalated to a board, independent adviser, legal counsel, compliance officer, or ethics committee when it involves serious potential harm, a material conflict of interest, uncertain legality, vulnerable people, irreversible effects, executive misconduct, financial reporting, retaliation, or a material threat to organizational legitimacy.

4. Governance in Founder-Led and Growing Organizations

The founder-control problem

Founder leadership can provide purpose and speed, but concentrated authority creates risks of groupthink, related-party transactions, retaliation, weak succession planning, and inadequate challenge. Investors and employees may hesitate to question a charismatic founder, particularly where the founder controls information, equity, hiring, and access to the board.

The solution is not automatically to remove founder influence. It is to separate roles where appropriate, clarify reserved powers, create independent challenge, and ensure that decisions are made through reliable processes.

Governance architecture

A growing venture should progressively develop:

• a clear statement of purpose and values;
• defined authority and approval thresholds;
• a functioning board or advisory structure;
• accurate financial and operational reporting;
• conflict-of-interest declarations;
• documented policies for hiring, expenses, data, safety, and procurement;
• independent channels for concerns;
• risk registers and ownership of controls;
• succession and emergency decision procedures; and
• periodic review of governance effectiveness.

The appropriate system is proportional. A small venture may use quarterly board reviews, dual approval for payments, an external accountant, and a confidential reporting channel. A larger organization may require audit, risk, remuneration, and sustainability committees, internal audit, formal assurance, and specialized compliance personnel.

Board responsibilities

An effective board should provide strategic guidance, appoint and evaluate senior leaders, oversee material risks, review financial integrity, monitor culture, approve major transactions, and protect the organization’s long-term purpose. It should ask difficult questions without taking over operational management.

Board independence is not merely a formal status. Independent directors must have sufficient information, time, expertise, courage, and access to people outside executive control. A board that receives only curated information cannot provide meaningful oversight.

Agency, stewardship, and stakeholder perspectives

Agency theory focuses on the risk that managers or controlling owners may pursue private interests rather than those of principals such as shareholders. Controls, incentives, disclosure, and monitoring respond to this problem.

Stewardship theory emphasizes that leaders may be intrinsically motivated to serve the organization and its mission. Excessive controls can undermine trust and initiative. Stakeholder theory broadens the analysis by recognizing that governance affects parties beyond capital providers. In practice, sound governance combines trust with verification: it assumes that people can act responsibly while designing systems that detect and correct failure.

5. Accountability, Internal Control, and Compliance

Accountability means that a person or body must explain decisions, accept evaluation, and face appropriate consequences or remediation. It has three dimensions:

• Answerability: providing reasons and information.
• Enforceability: consequences for misconduct or negligent performance.
• Remedial responsibility: repairing harm and improving systems.

Internal control

Internal controls are policies and procedures designed to support reliable reporting, lawful operations, asset protection, and achievement of objectives. Common controls include segregation of duties, authorization limits, reconciliations, access controls, documented approvals, quality checks, incident reporting, and independent review.

Controls should be designed around risk, not copied indiscriminately. A payment process, for example, may separate the person who requests a purchase, the person who approves it, and the person who records or pays it. In a very small venture, complete separation may be impossible; compensating controls such as owner review, bank alerts, and monthly external reconciliation become important.

Compliance programs are effective when they include leadership commitment, risk assessment, clear standards, training, accessible advice, monitoring, investigation, consistent discipline, and remediation. A code of conduct without credible enforcement can become symbolic rather than protective.

6. Risk Oversight and Ethical Risk

Risk is not only the possibility of financial loss. Organizations face strategic, operational, legal, cyber, privacy, safety, reputational, environmental, human-rights, and conduct risks. Ethical risk arises when incentives, decisions, or practices may violate legitimate expectations or cause unjustifiable harm.

A risk register should identify the risk, cause, event, consequence, existing controls, owner, indicators, treatment, and review date. Risk ratings are often expressed using qualitative categories such as low, moderate, high, and critical. If numerical scoring is used, its assumptions must be explicit; multiplying an arbitrary likelihood score by an arbitrary impact score does not create objective truth.

Risk oversight should address both known risks and uncertainty. Scenario analysis can ask:

• What if demand grows tenfold?
• What if a supplier fails or abuses labor rights?
• What if a data breach affects vulnerable customers?
• What if the founder is unavailable?
• What if a safety concern is ignored and becomes public?

A mature organization monitors leading indicators, such as complaint trends, employee turnover in critical teams, near misses, unusual sales practices, access anomalies, and overdue corrective actions—not only lagging indicators such as lawsuits or financial loss.

7. Speak-Up Systems and Organizational Voice

Employees often detect misconduct before boards, auditors, or regulators. A speak-up system may include open-door access, supervisors trained to receive concerns, anonymous reporting, independent investigation, ombudsperson support, and protection against retaliation.

A credible system requires:

1. multiple accessible reporting channels;
2. confidentiality explained honestly rather than promised absolutely;
3. triage based on seriousness and conflicts of interest;
4. trained, impartial investigators;
5. documented findings and actions;
6. protection and support for reporters and witnesses;
7. timely communication within legal constraints; and
8. analysis of recurring patterns and root causes.

Anonymous reporting can increase access but may complicate investigation. Confidentiality cannot guarantee that identity will never become known. Leaders should therefore explain limits clearly. Retaliation includes dismissal, demotion, exclusion, threats, unfavorable scheduling, harassment, and subtle career penalties. It should be treated as a serious control failure.

A speak-up system is not a substitute for a healthy culture. If employees believe that reporting is futile or dangerous, a hotline becomes a façade. Leaders must model receptiveness, reward truth-telling, and investigate concerns even when the implicated person is powerful or commercially valuable.

8. Sustainability and Responsible Stakeholder Practice

Sustainability integrates economic viability with environmental stewardship, social well-being, and responsible governance. It is strategically relevant because resource constraints, climate exposure, labor conditions, community trust, and regulatory expectations affect enterprise resilience and value creation.

Responsible practice requires more than charitable donations or publicity. It includes examining the organization’s value chain: sourcing, product design, labor conditions, logistics, data use, end-of-life impacts, and customer outcomes. Managers should distinguish:

• impact: the actual effect on people or planet;
• intention: what the organization says it wants to achieve;
• output: what it produces or delivers; and
• outcome: the resulting change.

Claims should be evidence-based, specific, and proportionate. Vague environmental claims can mislead stakeholders and create greenwashing risk. Organizations should disclose material limitations, negative effects, methodologies, and areas where performance is incomplete.

Stakeholder engagement should not be reduced to consultation theater. Managers should identify who has knowledge, who bears risk, who lacks power, and what influence stakeholders have over decisions. Engagement may involve surveys, worker representatives, community meetings, customer panels, supplier assessments, grievance mechanisms, and participatory design.

9. Technology, Data, and Artificial Intelligence

Digital ventures create distinctive governance problems. Data collection may exceed user understanding; algorithms may reproduce historical bias; automated decisions may be difficult to explain; cybersecurity failures may expose vulnerable people; and generative AI may produce inaccurate or confidential outputs.

Responsible digital governance should address:

• purpose limitation and data minimization;
• informed and meaningful consent where required;
• access, correction, retention, and deletion practices;
• security and incident response;
• model testing for validity, bias, and disparate impact;
• human review for high-impact decisions;
• documentation of data sources and model limitations;
• intellectual-property and confidentiality controls; and
• accountability for decisions made with automated tools.

Human oversight must be substantive. A manager who approves every algorithmic recommendation without understanding its limitations has not provided meaningful oversight. Organizations should define prohibited uses, escalation thresholds, audit trails, and responsibility for errors.

10. Illustrative Case: The Fast-Growth Platform

Background

Northstar, an illustrative software venture, operates a platform connecting households with independent service providers. Its founder has raised substantial investment and promises rapid national expansion. The platform’s customer-satisfaction score is an important performance target, and regional managers receive bonuses based on growth and low complaint rates.

Problem

A data scientist discovers that the ranking algorithm systematically gives lower visibility to providers from certain neighborhoods. The pattern appears to result from historical customer ratings and incomplete location data rather than an explicit discriminatory rule. At the same time, a regional manager has instructed staff to close complaints quickly and has discouraged workers from contacting the board. The founder wants to launch in three additional cities before the next funding round.

Analysis

The issue is simultaneously ethical, governance-related, operational, and strategic. Consequentialist analysis identifies lost income, reduced access, customer harm, and possible efficiency benefits. A rights-based analysis asks whether providers have been treated fairly and whether affected users received meaningful information. A justice analysis examines disparate effects and the lack of voice for affected providers. A virtue analysis highlights whether the incentive system cultivates honesty or concealment.

Governance analysis identifies inadequate algorithm oversight, conflicted performance metrics, weak complaint escalation, and excessive founder control. The board may face a duty to investigate before approving expansion. Compliance review is necessary, but legality alone would not resolve the fairness and transparency concerns.

Approach and solution

Northstar should pause expansion of the affected algorithmic feature, preserve relevant records, and commission an independent review. It should inform the board’s risk or responsible-technology committee and provide a protected channel for employees and providers. The company should test alternative ranking methods, assess disparate outcomes, notify affected stakeholders where appropriate, and provide an appeal or correction process.

Management incentives should be redesigned so that growth and satisfaction are balanced with complaint quality, fair treatment, safety, and verified remediation. The board should require a risk owner, documented model validation, periodic bias testing, and reporting that includes unresolved complaints rather than only closed cases. The founder should not control the investigation or determine consequences for the reporting employee.

Outcome

In this illustrative scenario, the launch is delayed by one quarter. The review finds unequal visibility and a pattern of premature complaint closure. Northstar changes the ranking model, introduces provider appeals, separates complaint handling from regional sales targets, and appoints an independent director with data-governance expertise. Growth is slower in the short term, but provider retention improves and the company avoids a larger regulatory and reputational crisis.

Learning points

1. Ethical risk often emerges from ordinary incentives and data practices rather than explicit bad intentions.
2. Growth targets can suppress information when they reward the appearance of performance.
3. Independent challenge is essential when a founder or executive is implicated.
4. Responsible innovation requires monitoring outcomes, not merely documenting design intentions.
5. Governance is strategic: it protects trust, learning capacity, and long-term enterprise value.

11. Challenges and Limitations

Ethical frameworks can conflict. Stakeholders may disagree about what counts as harm, fairness, or legitimate consent. Evidence may be incomplete, and delaying action may itself create harm. Formal governance can become expensive, slow, or ceremonial. Metrics can distort behavior when people optimize what is measured rather than what matters. Sustainability reporting can encourage selective disclosure. Independent directors may lack information or remain socially dependent on founders. Whistleblowing systems may be used strategically or may fail vulnerable workers who fear retaliation.

These limitations do not justify abandoning governance. They require humility, proportionality, transparency about uncertainty, independent challenge, and continuous review. Responsible leadership is less a claim of moral perfection than a demonstrated capacity to notice harm, invite challenge, correct mistakes, and learn institutionally.

12. Best-Practice Principles for Responsible Leaders

Responsible leaders should:

• make purpose and non-negotiable standards explicit;
• model the conduct expected from others;
• distinguish legal minimums from ethical responsibility;
• disclose conflicts and recuse themselves when appropriate;
• seek contrary evidence and protect dissent;
• align incentives with quality, safety, fairness, and long-term outcomes;
• create reliable information flows to the board;
• investigate concerns independently and protect reporters;
• assess impacts on less powerful stakeholders;
• use data and AI with documented human accountability;
• disclose uncertainty, limitations, and adverse outcomes;
• repair harm rather than merely manage reputation; and
• review whether governance arrangements remain appropriate as the organization grows.

Chapter Summary

Ethics, governance, and responsible leadership are mutually reinforcing foundations of entrepreneurial strategy. Ethical theories provide different lenses: consequentialism examines outcomes, deontology emphasizes duties and rights, virtue ethics examines character, justice focuses on fair treatment, care ethics highlights relationships and vulnerability, and stakeholder theory broadens responsibility beyond capital providers. A structured decision process helps managers clarify facts, identify affected parties, compare alternatives, document reasoning, and learn from outcomes.

Governance converts values into accountability through boards, authority structures, reporting, controls, risk oversight, conflict management, and independent challenge. Founder-led organizations particularly need safeguards against concentration of power and information. Speak-up systems are effective only when reporting is accessible, investigations are credible, and retaliation is prevented. Sustainability requires attention to actual impacts across the value chain rather than symbolic claims. Digital and AI-enabled organizations must govern data, bias, explainability, security, and human oversight. Responsible leadership is ultimately demonstrated through transparent judgment, willingness to hear inconvenient information, protection of vulnerable stakeholders, and correction of harm.

Key Terms

Ethics: Systematic examination of right conduct and moral judgment.

Governance: Processes through which an organization is directed, controlled, and held accountable.

Compliance: Meeting applicable legal, regulatory, contractual, and internal requirements.

Responsible leadership: Leadership that integrates ethical judgment, stakeholder welfare, accountability, and long-term consequences.

Consequentialism: Ethical reasoning based primarily on expected outcomes.

Deontology: Ethical reasoning based on duties, rights, and principles.

Virtue ethics: An approach focused on character and morally desirable habits.

Justice: Concern with fair distribution, fair procedures, and recognition.

Stakeholder: A party that affects or is affected by an organization.

Accountability: The obligation to explain decisions, accept evaluation, and address consequences.

Internal control: A process designed to support reliable reporting, lawful operations, asset protection, and organizational objectives.

Risk oversight: Governance activity concerned with identifying, assessing, treating, and monitoring significant risks.

Conflict of interest: A situation in which personal interests may improperly influence official judgment.

Speak-up system: Channels and procedures through which concerns about misconduct or risk can be raised.

Retaliation: Adverse treatment imposed because a person raised a concern or participated in an investigation.

Sustainability: Pursuit of long-term economic, social, environmental, and governance resilience.

Greenwashing: Misleading presentation of environmental performance or claims.

Algorithmic bias: Systematic and unjustified disadvantage produced or amplified by an algorithmic system.

Stewardship: Responsible care and use of resources entrusted to organizational leaders.

Review Questions

5 Short Answer Questions

1. How do ethics differ from compliance?
2. What is the purpose of a governance system?
3. Identify two limitations of utilitarian reasoning.
4. Why are speak-up systems strategically important?
5. What is meant by meaningful human oversight of AI?

5 Long Answer Questions

1. Compare consequentialist, deontological, virtue-ethical, and justice-based analysis of a proposed employee-monitoring system.
2. Explain how founder control can create governance risks and propose proportionate safeguards for a growing venture.
3. Discuss the relationship between incentives, internal controls, and organizational culture.
4. Evaluate the claim that sustainability is a strategic issue rather than a public-relations activity.
5. Explain how a board should oversee a material algorithmic and data-privacy risk.

3 Analytical / Application Questions

1. A startup discovers that its supplier uses excessive overtime but offers the lowest price and fastest delivery. Apply the seven-stage ethical decision framework and recommend a course of action.
2. An employee reports that a senior executive manipulated customer metrics before an investment round. Design an investigation, protection, escalation, and remediation process.
3. A founder argues that rapid expansion justifies postponing formal governance until the company becomes profitable. Critically evaluate this argument using agency, stewardship, stakeholder, and risk-oversight perspectives.

Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes governance from management?

A. Governance concerns only legal compliance, while management concerns ethics.

B. Governance directs, oversees, and holds the organization accountable, while management implements operating decisions.

C. Governance is performed only by employees, while management is performed only by investors.

D. Governance eliminates the need for managerial discretion.

Correct Answer: B. Governance directs, oversees, and holds the organization accountable, while management implements operating decisions.

Question 2

Which ethical approach focuses primarily on duties, rights, and principles?

A. Consequentialism

B. Virtue ethics

C. Deontology

D. Ethical egoism

Correct Answer: C. Deontology

Question 3

Why can a code of conduct fail to produce ethical behavior?

A. Codes are always legally invalid.

B. Codes cannot contain organizational values.

C. A code without credible training, reporting, investigation, and enforcement may be merely symbolic.

D. Employees are never influenced by leadership.

Correct Answer: C. A code without credible training, reporting, investigation, and enforcement may be merely symbolic.

Question 4

Which situation most clearly warrants escalation to an independent body?

A. A routine office-supply purchase within an approved budget

B. A serious allegation of executive misconduct involving a material conflict of interest

C. A minor scheduling preference

D. A successfully completed training course

Correct Answer: B. A serious allegation of executive misconduct involving a material conflict of interest

Question 5

What is a central weakness of relying only on lagging risk indicators?

A. They provide too much information about emerging problems.

B. They reveal problems only after harm or loss may already have occurred.

C. They cannot be recorded numerically.

D. They eliminate the need for controls.

Correct Answer: B. They reveal problems only after harm or loss may already have occurred.

Question 6

Which practice best supports a credible speak-up system?

A. Guaranteeing absolute secrecy in every circumstance

B. Allowing only the implicated executive to investigate complaints

C. Providing accessible channels, impartial investigation, and protection against retaliation

D. Closing complaints quickly to preserve performance statistics

Correct Answer: C. Providing accessible channels, impartial investigation, and protection against retaliation

Question 7

What does stakeholder theory require managers to do?

A. Accept every stakeholder demand without trade-offs

B. Consider only shareholders because they provide capital

C. Identify affected parties, consider their legitimate interests, and justify trade-offs

D. Replace all financial objectives with charitable objectives

Correct Answer: C. Identify affected parties, consider their legitimate interests, and justify trade-offs

Question 8

Which example is most likely to constitute greenwashing?

A. Reporting a specific emissions reduction with its method and limitations

B. Disclosing both environmental improvements and continuing adverse impacts

C. Making a vague environmental claim without evidence or material context

D. Auditing a sustainability metric independently

Correct Answer: C. Making a vague environmental claim without evidence or material context

Question 9

Why is founder concentration of power a governance risk?

A. Founders are incapable of making strategic decisions.

B. Concentrated authority can reduce challenge, increase conflicts of interest, and suppress information.

C. Founder ownership is always illegal.

D. Boards cannot oversee founder-led companies.

Correct Answer: B. Concentrated authority can reduce challenge, increase conflicts of interest, and suppress information.

Question 10

Which measure best represents substantive human oversight of an AI system?

A. Automatically accepting every model recommendation

B. Having a person formally sign a document without reviewing the model

C. Defining review thresholds, examining limitations and impacts, and allowing informed intervention

D. Removing all documentation to protect trade secrets

Correct Answer: C. Defining review thresholds, examining limitations and impacts, and allowing informed intervention