Board Accountability in Regulated Industries: A Practical Guide

Board Accountability in Regulated Industries: What It Actually Requires

Board accountability in regulated industries means individual directors can demonstrate, with evidence, that they understood the material risks facing the business, challenged management on them, and made defensible decisions. Everything else is theatre. Regulators, courts, and enforcement teams have made this progressively explicit: the SMCR in the UK, APRA's CPS 511 and BEAR successor regimes in Australia, the OCC's heightened standards in the US, and the ECB's fit and proper expectations all converge on the same point. Collective responsibility is no longer a shield.

This guide sets out what accountability looks like in practice, where it fails, and how to test whether yours would survive contact with a regulator.

The Three Things Regulators Actually Look For

When supervisors examine board effectiveness, they are testing three things.

First, whether directors received information that was accurate, timely, and fit to base decisions on. Board packs that are 400 pages long, arrive 48 hours before the meeting, and bury the material risk in appendix seven fail this test.

Second, whether directors demonstrably challenged what they were told. Minutes that record "the board noted the update" are worthless. Minutes that record specific questions asked, alternatives considered, and reasons for the decision taken are evidence.

Third, whether the board followed through. A decision to reduce exposure to a particular counterparty means nothing if there is no record of the board checking, at the next meeting, that it happened.

Where Accountability Breaks Down

Diffuse ownership of specific risks

Every major risk should have a named director as the primary point of accountability at board level, not just an executive owner. If conduct risk is "owned by the whole board," nobody owns it. The chair of the risk committee is not a substitute for individual director accountability on specific matters.

The information asymmetry problem

Management controls the flow of information to the board. In regulated firms, this is where most failures originate. Boards that rely entirely on management-produced papers, without independent access to the CRO, internal audit, or external advisers, cannot credibly claim to have challenged management. Direct lines matter. So does the ability to commission independent work without executive sign-off.

Weak minutes

This is the most common and most damaging failure. Minutes are the primary evidence of board conduct. They should record the substance of challenge, not sanitise it. If a director expressed concern about a strategy and was overruled, the minutes should say so. Firms that treat minutes as PR documents create liability for individual directors when things go wrong.

Confusing assurance with accountability

Internal audit, compliance, and risk functions provide assurance. They do not provide accountability. A board that reads a clean second-line report and concludes there is nothing to worry about has not discharged its duty. Accountability requires the board to form its own view about whether the assurance is credible.

What Good Looks Like

A well-functioning board in a regulated firm can produce, on demand, the following for any material decision in the last 24 months:

• The information the board had at the time.
• The alternatives considered.
• The specific challenges raised and by whom.
• The reasoning behind the decision.
• The subsequent monitoring of implementation.

If your board cannot produce this, you have an accountability problem, whether or not the regulator has noticed yet.

A Practical Test

Pick the three most consequential decisions your board has made in the last year. Ask the company secretary to pull the papers and minutes. Read them as if you were a supervisor or a plaintiff's lawyer. Can you tell what the board actually did? Can you identify who was accountable for what? Would the record support each director individually if challenged?

Most boards, when they run this exercise honestly, find gaps. The useful question is not whether gaps exist but whether the board is willing to close them before someone external forces the issue.

The Next Step

Commission a review of your last four board meetings against the five-point test above. Do it before your next regulatory engagement, not after. The cost of tightening accountability now is trivial compared to the cost of explaining, later, why it was absent.