Same Duty. One Board Got the Infrastructure. Yours Didn’t.
By Chris Morris, Managing Partner, Board Veritas
Key Takeaways
— Nonprofit boards carry identical fiduciary duties to public company boards (duty of care, duty of loyalty, duty of obedience) without the structural infrastructure those duties legally require in the public company context.
— Governance infrastructure doesn’t make board members more ethical. It gives ethical people somewhere to stand. The room’s structure changes the default behaviors, not the character of the people in it.
— The CEO who manages her board rather than governing with it isn’t failing. She is responding rationally to what the room requires. CEO isolation is a design problem, not a leadership problem.
— When governance infrastructure is introduced (executive sessions, independent committees, protected space for challenge), the CEO stops being alone and the board stops performing oversight it cannot fully exercise.
— The gap between the governance your organization has and the governance your ambition requires is not a verdict on what was built. It is a description of what comes next.
In the same quarter, I sat in two boardrooms. One where governance is enforced by people with subpoena authority. One where it depends almost entirely on whether the culture of the room makes honest challenge feel possible.
Same legal duty. Different building.
The first is a publicly traded company where I chair the audit committee. The CEO and CFO certify the financial statements personally under Sarbanes-Oxley, with criminal exposure attached to any material omission. Independent directors are legally required, not aspirational. Every quarter, management leaves the room for an executive session that isn’t optional or culturally encouraged. It is a condition of continued trading on the exchange.
The second is a nonprofit organization with an exceptional mission and committed board members. The IRS asks a few governance questions on the Form 990. It has no authority to require any specific structures. No mandate for independent directors. No required executive session. No personal certification of financial oversight. The accountability mechanism is the culture of the room.
Both boards are responsible for the stewardship of the organizations they govern. Board oversight accountability looks dramatically different across those two tables, and the gap between them is structural, not cultural.
That gap is what this post is about.
If you’ve been making that second room work, you already know it costs more than it should. This post is about why.
The oversight gap nobody mandated
Nonprofit boards carry identical fiduciary obligations to public company boards. Duty of care, duty of loyalty, duty of obedience. Legal obligations, carried personally, by every board member around the table.
What those board members don’t carry are the structural tools their public company counterparts receive as a legal baseline.
Sarbanes-Oxley requires the CEO and CFO to personally certify every quarterly filing, with criminal exposure for material misstatements. NYSE Rule 303A.03 requires non-management directors to meet in executive session at every scheduled board meeting. Not as a best practice. As a condition of continued listing. SEC Rule 10A-3 mandates audit committees composed entirely of independent directors, with legal authority to retain their own counsel, funded by the company. Not funded by a goodwill allocation from management. Funded, by law, by the company itself.
For nonprofit boards, the federal equivalent is a section on Form 990 that asks whether an audit committee exists. The IRS can note the answer. It cannot require any specific structure.
Stanford’s Survey on Boards of Directors of Nonprofit Organizations found that 42 percent of nonprofits lacked an audit committee entirely. BoardSource data shows that fewer than one in three nonprofit boards hold executive sessions without senior staff present. These are not anomalies. They are the baseline condition across the sector.
The gap isn’t a symptom of poor governance in a handful of organizations. It is the designed default.
So what does a design condition like this actually produce in the room?
What it means to have somewhere to stand
Here is what I’ve watched happen across two sectors, and it has not changed in forty years: the directors on both boards are good people.
I sat on the board of a foreign-based company where the gap between management’s knowledge and the board’s understanding had calcified into a power dynamic nobody questioned. The agenda reached the international expansion: product launch behind plan, management defensive, accountability conspicuously absent. I pushed on the root cause. The CEO glared. Long pause. I kept asking. But I watched what happened to the rest of the board: the questions that had been forming went quiet. Not because they didn’t have questions. Because the room had just shown everyone what asking costs. I was stranded on an island. Every other director calculated the cost and stayed silent.
That’s not a motivation problem. Those directors had plenty of questions. They read the room correctly. Without a structure that makes challenge the expected behavior, even one willing challenger gets isolated. The room doesn’t need to punish everyone to produce silence. It only needs to punish one person visibly enough that everyone else updates their calculation.
Mandate executive sessions and you don’t change who sits in the room. You change what they’re permitted to do in it. Require independent financial expertise on the audit committee and you change what the committee is structurally positioned to discover, surface, and act on. The structure doesn’t change the character of the people. It gives them somewhere to stand.
When structure is absent, somebody absorbs the cost. In most organizations, that person is the CEO. What does that look like from inside the job?
Who carries what the room can’t hold
The nonprofit CEO who has been managing her board for several years is not doing it because she is controlling or because she doesn’t trust her directors. She is doing it because the structure requires it.
Without a protected executive session, the board chair cannot easily surface a concern about organizational direction without it reading as a formal confrontation. Without an independent audit committee, the CEO pre-translates financial complexity into terms that land well rather than terms that challenge accurately. Without structured expectations for management-free discussion, she learns which questions generate productive tension and which generate awkward afternoons. She starts editing before anything reaches the table.
That editing is the rational adaptation to an unstructured room. It is also exhausting. And it creates a specific organizational condition: the board that is informed but not fully engaged, supported in its decisions but not yet a partner in them. The CEO is carrying the governance load that structure should be distributing.
Call it what it is. A design problem. Not a leadership failure. Not a trust deficit. A design problem. The CEO who is managing her board is not falling short of what the role requires. She is responding correctly to what the room was built to require of her.
So what actually changes when the room is built differently?
What the room makes possible
When even a fraction of public company governance infrastructure is introduced to a nonprofit board, something specific shifts. Not in the character of the people. In what the room makes available to them.
What I watch happen is specific. The CEO stops preparing board packets designed to inform without provoking and starts bringing the hard question into the room. The board chair stops holding back and brings the question she had been editing for months. She has somewhere for it to land now. The board member who had been nodding quietly starts saying what he actually sees. Nobody in that room changed. The structure stopped making silence the rational choice.
The board that got this organization to where it is did exactly what it was built to do. Nobody failed. The structure was designed for an earlier chapter: stay legal, stay funded, stay out of trouble. For organizations that have cleared those bars and are trying to build something more ambitious, that original infrastructure is not a floor. It is a ceiling.
Governance-as-partnership is not the product of better composition or more training. It is the product of a room designed to make honest challenge the default rather than the exception. That distinction matters. It is the difference between an organization where the CEO is alone and one where the board is in the work with her.
This argument is not that your board is broken or that your directors lack commitment. Most nonprofit board members I’ve worked with care more than their public company counterparts. They volunteered. They showed up because the mission matters to them personally.
What they often don’t have is the structural context that allows that commitment to become effective governance.
The gap between the governance structure your organization has and the one your ambition requires is not a verdict on what was built. It is a description of what comes next. Nonprofit boards that close this gap don’t close it by trying harder or recruiting different people. They close it by building the room their board deserves: executive sessions on the agenda by default, independent committee authority that isn’t contingent on staff translation, structured expectations that make honest challenge normal.
The governance you need isn’t more complex than what your board is already capable of. It just isn’t in the room yet.
What’s the one question your board has been consistently not asking? And what would it take to build a room where they could?
— Chris Morris
Managing Partner & Transformation Architect
References
— Sarbanes-Oxley Act, Sections 302 and 404 (2002). CEO/CFO personal certification requirements and mandatory internal control attestation for SEC-reporting issuers. The mechanism that attaches personal liability to financial reporting oversight in the public company boardroom.
— SEC Rule 10A-3, 17 CFR §240.10A-3. Listing standards for audit committee independence, including authority to retain independent counsel funded by the company. The rule that gives the audit committee legally protected independence from management.
— NYSE Listed Company Manual, Section 303A.03. Requirement for regular executive sessions of non-management directors at every scheduled board meeting. The provision that makes management-free board discussion a condition of continued listing, not a cultural aspiration.
— BoardSource, Leading with Intent (2017, 2021). Survey data on nonprofit board practices, including executive session frequency and CEO satisfaction rates. Source for the finding that fewer than one in three nonprofit boards hold executive sessions without senior staff present.
— Stanford Social Innovation Review / Stanford PACS, Survey on Boards of Directors of Nonprofit Organizations (2015). Finding that 42 percent of surveyed nonprofits lacked an audit committee. The empirical baseline for the structural gap described in Section 1.
