For decades, governance has focused on strengthening systems.
We’ve built frameworks, policies, committees, reporting structures and assurance mechanisms. Organisations have invested heavily in compliance, risk management and controls, often with the genuine intention of preventing poor decisions before they happen.
These systems matter. They provide consistency, accountability and transparency.
But they have also created an uncomfortable illusion. That if we build good enough systems, good governance will naturally follow.
It won’t.
Why? Because every governance framework, no matter how sophisticated, ultimately relies on one thing: people.
Every strategic decision is made by a human. Every risk is accepted by a human. Every ethical dilemma is navigated by a human. Every policy is interpreted by a human. Every organisational culture is created, reinforced or tolerated by humans.
The quality of governance has never been determined solely by the quality of the framework. It has always depended on the quality of the judgement exercised within it.
Perhaps that’s why we continue to see governance failures in organisations with seemingly mature governance arrangements. The reports existed. The committees met. The risks were documented. The policies were approved.
Yet something still went wrong.
Because governance is not simply a system of control. It is a system of human decision-making.
The limits of compliance
For many organisations, governance has become synonymous with compliance.
Common questions are asked: Did we complete the mandatory training? Did the Board receive the paper? Is the policy up to date? Has the risk been recorded?
These questions are important. But they tell us very little about whether governance is actually working.
A Board can receive hundreds of pages of reporting and still fail to identify the issue that matters most.
A policy can exist while behaviours routinely contradict it.
A risk register can describe a problem that everyone already knows exists but nobody feels empowered to address.
Compliance measures activity.
Effective governance measures outcomes.
The distinction matters.
Culture is governance in action
If governance determines how decisions should be made, culture determines how they are actually made.
Culture isn’t the values statement displayed in reception. Rather, it is the behaviours that are rewarded. The behaviours that are ignored. The behaviours that quietly become normal.
Most people recognise obviously toxic workplaces. Public humiliation, aggressive managers, bullying and harassment.
The more dangerous cultures are often much quieter and they’re built through countless small signals. The manager who emails at midnight and praises those who reply immediately. The executive who delivers exceptional financial results while consistently disregarding organisational values. The employee who raises concerns and slowly discovers that speaking up has career consequences.
None of these behaviours, viewed in isolation, necessarily attracts headlines. Together, however, they create something far more powerful. They establish what is truly acceptable within the organisation.
In many respects, organisational culture can resemble coercive control. Rarely does it emerge through one dramatic incident. Instead, it develops through repeated, subtle behaviours that gradually reshape expectations, reduce psychological safety and normalise conduct that would once have been questioned.
People don’t simply read organisational culture.
They experience it.
Leadership sets the boundaries of acceptable behaviour
Every leader communicates expectations. Sometimes through what they say. Far more often through what they tolerate.
Employees watch where attention is directed. Which behaviours receive recognition. Which shortcuts are overlooked. Which difficult conversations never occur.
Leadership therefore shapes governance long before a Board paper is ever written.
The phrase “tone from the top” has become almost cliché. Yet its importance has never been greater. Leaders don’t merely influence culture. They define the boundaries of acceptable behaviour.
And once those boundaries begin to drift, governance frameworks rarely have the power to pull them back on their own.
AI makes the human element even more important
Artificial intelligence is rapidly changing how organisations gather information, assess risk and support decision-making.
Boards will soon receive richer data, faster analysis and increasingly sophisticated insights than ever before. This is an extraordinary opportunity…but also a governance challenge.
AI can generate options. It cannot determine organisational values. It cannot exercise moral judgement. It cannot recognise the subtle human dynamics that influence whether a decision will ultimately strengthen or damage trust.
As technology improves, the limiting factor in governance will become less about access to information and more about the quality of human judgement applied to it.
Ironically, the smarter our systems become, the more important human capability becomes.
The next frontier of governance
For years we’ve asked whether organisations have appropriate governance structures.
Perhaps it’s time we asked a different question: do our governance systems help people make better decisions?
That question shifts the conversation beyond compliance and into effectiveness.
It asks whether governance strengthens ethical judgement, improves decision quality, supports psychological safety, encourages healthy challenge and creates environments where people can raise concerns before problems become crises.
These are not “soft” issues. They are governance issues. Because governance ultimately exists to influence behaviour. And behaviour is what determines organisational outcomes.
The organisations that outperform over the next decade won’t necessarily be those with the largest governance manuals or the most detailed compliance frameworks.
They will be those that recognise a simple truth.
Governance has spent decades improving systems.
The next competitive advantage is improving human judgement within those systems.
An earlier version of these ideas was originally published by The Mandarin. This article expands on that thinking in light of subsequent developments in governance, organisational culture, AI and governance effectiveness.
