Board Committees – Executive Advisory Institute

Board Committees

February 13 2020

Overview of Board Committees

Fiona Lu Board Committees, Board Structure, Corporate Culture, Corporate Governance Board Committees, board composition, board culture, board diversity, board of directors, board organization, board origins, compliance committee, corporate governance, executive committee, finance committee, risk committee, technology committee, top committees

In the ever-changing digital age, board committee structures must constantly evolve to keep up with changes in capital markets and trade policy. Board members face new challenges everyday regarding the complexities of corporate values, strategy and risk management.

A recent Harvard Law School study tracked board structures since 2013 to examine how S&P 500 companies are using board committee structure to address oversight needs. They found that although boards have been growing to encompass additional committees, the underlying framework has remained largely the same and rely on three key committees– audit, compensation, and nominating and governance– that are required by the stock exchanges. Bank holding companies (BHCs) are required to have one additional risk committee to review their global risk-management framework. Beyond this basic structure, most institutions have one additional standing committee to oversee finances or executive order.

During 2013-18, the portion of companies with at least one additional committee grew marginally from 74% to 76%, and the average number of additional committees remained largely consistent.
Harvard Law School Forum on Corporate Governance

Top Additional Committees

Findings on the top additional committees in 2012-18 are as follows.

Executive Committee: Exercises authority of the board when the board is not in session, except in cases where action of the entire board is required by charter, bylaws or applicable law. (36% of S&P 500

Finance Committee: Oversees capital allocation, financial policies, strategies, capital structure, and annual operating and capital budget. The finance committee may also oversee investments, dividend policy, credit and other market risks, share repurchases, and mergers and acquisitions. (36% of S&P 500)

Compliance Committee: Oversees programs and performance related to legal and regulatory risks, as well as implementation and maintenance of the company’s code of conduct and related matters. The compliance committee may have special focus on compliance in a specific area, e.g., environmental, health, safety and technology. (16% of S&P 500)

Risk Committee: Recommends the articulation and establishment of the company’s overall risk tolerance and oversees enterprise-wide risk management to identify, assess and address major risks facing the company, which may include credit, operational, regulatory, interest, liquidity, investment, funding, market, strategic, reputational, emerging or other risks. The risk committee reviews and discusses management’s assessment of the company’s enterprise-wide risk profile. (11% of S&P 500)

Technology Committee: Oversees and assesses the company’s technology profile and related strategies and makes recommendations regarding the execution of technology enablement formulated by management. Technology committee members address opportunities and risks regarding technological strategies, including aspects of cybersecurity. (7% of S&P 500)

Public Policy and Regulatory Affairs Committee: Reviews significant legislative and regulatory initiatives by state, federal, or foreign government authorities, as well as other public issues likely to affect the company and its shareholders. They oversee the development of company policies in response to these developments and may have a related compliance function. (7% of S&P 500)

Corporate Responsibility and Sustainability Committee: Reviews policies and practices related to specific public issues of concern to shareholders, the company, its employees, and the general public. They maintain oversight of corporate responsibility, environmental sustainability, diversity and inclusiveness, and reputational risk. (6% of S&P 500)

Finding the right committees for your specific company depends on the company’s unique needs and must address the company’s major concerns in a forward-thinking manner that will motivate new strategic thinking. However, some common trends that span across all industries is a focus on technology and sustainability as we move into the new decade. Keeping these trends in mind when considering the most effective committee structures will be a smart move for companies who want to succeed in today’s hyper competitive, highly disruptive markets.

March 5 2020

The Importance of Audit Committees

Fiona Lu Audit Committee, Board Committees, Board Structure, Corporate Governance audit, audit committee, board composition, board of directors, Board Structure, corporate governance, cybersecurity, independent directors, risk management, US GAAP

Public companies are required to have audit committees to perform annual audits of their financial reporting and disclose certain financial information. This requirement was established by the Security and Exchange Commission (SEC) in 2002 after the passage of the Sarbanes-Oxley Act (SOX), which formally defines the roles of the audit committee as overseeing financial reporting accuracy, hiring independent external auditors to examine financial statements, and reviewing the company’s internal accounting controls. Having accurate and honest financial reporting that abides by the standards set forth by the U.S. Generally Accepted Accounting Principles (U.S. GAAP) is important for conveying company performance to internal investors and external shareholders. In the past two decades, the roles of the audit committee have significantly expanded to encompass a greater risk management responsibility due to the emergence of new technological forms of risks (i.e. cyber risks, cloud safety, etc.)

Challenges Facing Audit Committees

With the ever changing landscape of technology, there has been a growing range of risks that the audit committee must oversee. Risk management is an imperative part of the audit committee’s job that has grown increasingly complex due to new components, such as cyber risk, Environmental, Social and Governance (ESG), and corporate culture. This rapidly evolving agenda of audit committees has led many firms to begin considering forming new committees to conquer and divide the responsibilities.

Of these roles, cybersecurity has been a hotly contended subject. Cybersecurity is a relatively new area of risk management that forms an important component of strengthening a company’s technological profile, efficiency, and data systems. While this area has been traditionally under the jurisdiction of audit committees, many firms have formed their own full-level “cyber risk” committees to oversee it. In today’s digital landscape, with many companies migrating their data and communication channels to cloud-based solutions, cyber risk becomes one of the greatest risks enterprises face, and audit committees manage an up-to-date eye on it by either focusing their resources to develop sound cybersecurity frameworks or assigning the role to a new committee.

Maintaining Independence

Audit committees also face the challenge of providing unbiased analysis of financial reports independent of their affiliations with or knowledge of the company. The SEC requires that audit committees be composed of independent directors in order to objectively manage a company’s accounting practices. Just like how having an independent board is important to overseeing the company’s welfare and balancing all party’s interests, maintaining an independent audit committee is especially important because it concerns providing an honest, accurate, and legally abiding accounting process and directly deals with profit misreporting or manipulations.

For this reason, the SOX requires public companies to hire external auditors for an added layer of security. Independent auditors are certified public accountants hired to provide an objective, third party assessment of a company’s financial reports and audit process. If they determine that a company complies with GAAP, then they will issue the company a standard audit report. Otherwise, they will order management to revise their statements and recommend changes to optimize the company’s system of internal controls.

How to Improve Audit Committees

Maintain and Refresh Committee Expertise. Since the roles of the audit committee are constantly expanding and evolving, companies must keep a vigilant eye on their audit committee’s governance and composition to ensure that they consistently include members of all areas of expertise. They must consistently reevaluate the company’s needs to assess new risks and expertise areas to recruit in.
Strengthen Cybersecurity within the Committee. Audit committees handle the company’s most sensitive information and are the most susceptible to data breaches. Educating audit committee members on basic data protection practices and establishing ground rules for communications, such as never using a personal email or texts, will reduce the risk of information leaks and hacks.
Understanding Regulations. Members of the audit committee should all be familiar with SOX. In 2003, the SEC adopted a new standard that mandates national securities exchanges to disallow listings from companies that do not meet the audit committee requirements of SOX. Since the audit committee’s key roles are all regulated by SOX, boards should understand these requirements in and out to ensure that their performance is in compliance.