Achievable logoAchievable logo
CMA Part 1
Sign in
Sign up
Purchase
Textbook
Practice exams
Support
How it works
Exam catalog
Mountain with a flag at the peak
Textbook
1. External financial reporting decisions
2. Planning, budgeting, and forecasting
3. Performance management
4. Cost management
5. Internal control
5.1 Governance, risk and compliance
5.1.1 Internal control objectives and the COSO Framework
5.1.2 Responsibility for internal control and segregation of duties
5.1.3 Internal control limitations, risks, and deficiencies
5.1.4 Corporate governance structure and responsibilities
5.1.5 Corporate governance roles and responsibilities
5.1.6 External audit
5.1.7 The Sarbanes-oxley Act
5.1.8 Other regulatory bodies
5.2 System controls and security measures
6. Technology and analytics
Achievable logoAchievable logo
5.1.5 Corporate governance roles and responsibilities
Achievable CMA Part 1
5. Internal control
5.1. Governance, risk and compliance
Our CMA Part 1 course is currently in development and is a work-in-progress.

Corporate governance roles and responsibilities

9 min read
Font
Discuss
Share
Feedback

The rights and responsibilities in corporate governance

An effective corporate governance framework depends on the clear definition and execution of roles and responsibilities among various internal and external stakeholders. Each group contributes to the integrity, transparency, and accountability of corporate decision-making.

Board of directors

The Board of Directors has ultimate responsibility for overseeing the company’s direction, strategic decision-making, and management performance. It acts as the governing body representing the shareholders and ensures that the organization is operated in their best interest.

In the United States, all corporations are required by state law to have a Board of Directors, although specific requirements vary by state. Most states mandate at least one director as a legal minimum. However, for publicly listed companies, exchanges such as the New York Stock Exchange (NYSE) and NASDAQ impose stricter requirements, including having a majority of independent directors.

An independent director is one who is not a company employee and does not have material financial or personal ties to management. This independence helps ensure objective oversight and enhances the board’s accountability to shareholders.

Key responsibilities of the board of directors include:

  • Setting and approving the company’s long-term strategic direction and vision
  • Appointing, compensating, and evaluating the performance of the CEO and other top executives
  • Monitoring organizational performance and ensuring accountability at all levels
  • Reviewing and approving major financial decisions, budgets, investments, and capital expenditures
  • Ensuring the integrity of the company’s financial statements and compliance with applicable laws and ethical standards
  • Establishing corporate governance policies and overseeing risk management practices
  • Safeguarding the interests of shareholders and other key stakeholders

Qualifications for Board members typically include significant leadership experience, industry expertise, and a strong understanding of financial oversight and risk management. Many directors possess prior executive or board experience, advanced education (e.g., MBA, law, or finance degrees), and a reputation for ethical leadership. Diversity of background, skillset, and perspective is also increasingly valued in board composition.

The Board makes decisions through formal meetings where issues are deliberated and resolved by majority vote, although different types of voting mechanisms may be used depending on the issue at hand. These can include plurality voting (where the candidate with the most votes wins), cumulative voting (allowing shareholders to allocate multiple votes to a single candidate), or supermajority voting (requiring a higher threshold than a simple majority for major decisions such as mergers or amendments to bylaws). Committees such as the audit, risk, and compensation committees often conduct detailed reviews and make recommendations to the full Board. Board decisions are documented in official minutes, and directors are expected to exercise their duties with diligence, independence, and loyalty to the company.

Chief Executive Officer (CEO)

The CEO is responsible for the overall strategic leadership and operational management of the organization. They serve as the highest-ranking executive officer, accountable to the Board of Directors for the company’s performance and long-term success. As the primary link between the Board and the organization’s operations, the CEO ensures that strategic objectives are translated into actionable business plans and executed effectively.

Key responsibilities of the CEO typically include:

  • Developing and communicating the company’s vision, mission, and strategic goals
  • Leading the executive team and fostering a high-performing organizational culture
  • Making major corporate decisions and managing overall operations and resources
  • Serving as the main spokesperson for the company in dealings with stakeholders, regulators, and the media
  • Recommending business plans, budgets, and policies to the Board of Directors
  • Ensuring compliance with laws, regulations, and ethical standards

The CEO is typically appointed by the Board of Directors through a formal hiring and vetting process. This may involve search committees, executive recruitment firms, and a thorough review of the candidate’s qualifications, experience, leadership style, and strategic alignment with the company’s values and goals. Once selected, the CEO’s performance is subject to ongoing evaluation by the Board and often tied to key performance indicators (KPIs) such as financial outcomes, market growth, and organizational development.

Chief Financial Officer (CFO)

The CFO plays a critical role in the financial stewardship and strategic direction of the organization. They are responsible for leading the financial planning and analysis process, ensuring the accuracy and reliability of financial reporting, managing risks, and ensuring the organization complies with financial regulations and tax laws.

Key responsibilities of the CFO typically include:

  • Developing and overseeing budgets and long-term financial forecasts
  • Ensuring timely and accurate preparation of financial statements in accordance with accounting standards
  • Managing financial risks, including liquidity, credit, and market risks
  • Supervising treasury functions and cash flow management
  • Monitoring internal controls over financial reporting and compliance
  • Supporting strategic decision-making with financial modeling and analysis
  • Liaising with external auditors, tax advisors, banks, and regulatory bodies
  • Presenting financial results and forecasts to the Board and shareholders

Qualifications for a CFO usually include a strong background in accounting or finance, typically supported by a CPA (Certified Public Accountant), CMA (Certified Management Accountant), or CFA (Chartered Financial Analyst) designation. Advanced degrees such as an MBA are also common. In addition to technical expertise, a successful CFO must demonstrate strategic thinking, leadership ability, communication skills, and ethical integrity.

CFOs are typically appointed by the CEO or the Board of Directors, often with input from the audit or finance committee. The selection process may involve executive search firms, detailed assessments of industry experience, financial leadership capabilities, and alignment with corporate culture and strategic goals.

Audit committee

A specialized and independent committee of the Board of Directors, the audit committee plays a crucial role in ensuring the integrity and transparency of financial reporting and corporate accountability. It is typically composed of non-executive or independent directors with strong financial literacy and at least one member with accounting or auditing expertise.

Key responsibilities of the audit committee include:

  • Overseeing the integrity of the company’s financial statements and disclosures
  • Monitoring the effectiveness of internal controls over financial reporting
  • Supervising the internal audit function, including scope, plans, and findings
  • Appointing, compensating, and overseeing the external auditors
  • Reviewing the independence and performance of both internal and external auditors
  • Assessing the adequacy of the risk management framework
  • Ensuring that identified financial and compliance risks are addressed in a timely manner
  • Facilitating communication among management, auditors, and the board

In the United States, the role and structure of the audit committee are significantly shaped by the Sarbanes-Oxley Act of 2002 (SOX) and subsequent Securities and Exchange Commission (SEC) regulations. Under SOX, audit committees of publicly listed companies must consist of at least three members, all of whom must meet specific independence requirements. An “independent” director is one who is not part of company management, does not receive compensation beyond director fees, and has no material relationships (such as with major suppliers, customers, or advisors) that could impair their objectivity. They must also have no close family ties to executive officers.

Additionally under SOX:

  • All audit committee members of publicly listed companies must be independent, and at least one member must be a financial expert.
  • The audit committee is directly responsible for the appointment, compensation, and oversight of the external auditor.
  • Companies must disclose whether their audit committee includes at least one financial expert as defined by the SEC.
  • The audit committee must establish procedures for receiving and handling complaints about accounting, internal control, or auditing matters, including anonymous submissions from employees (i.e., whistleblower protections).

These regulatory provisions aim to enhance the independence and accountability of audit committees, ensuring that financial reporting processes are transparent and free from undue influence by management.

It is important to note that these requirements apply specifically to publicly listed companies in the United States. Private companies and non-listed entities are not legally required to have an audit committee under SOX or SEC rules. However, many voluntarily establish audit committees as part of sound governance practices, especially if they are large, preparing for an IPO, or seeking investor confidence. Nonprofit organizations may also be required to form audit committees depending on state laws, regulatory frameworks, or grant conditions.

The audit committee reports directly to the full board of directors and serves as a critical conduit for ensuring financial transparency and ethical governance. It often meets regularly with auditors to foster candid discussions and maintain auditor independence.

Managers

Operational and middle managers are responsible for bridging strategic directives from senior leadership with frontline execution. They play a vital role in ensuring that governance practices are embedded into daily operations and that organizational goals are effectively translated into departmental activities.

Key responsibilities of operational managers in the context of corporate governance include:

  • Implementing board- and executive-approved policies and procedures within their departments
  • Supervising employees and maintaining performance standards consistent with corporate objectives and ethical guidelines
  • Monitoring operational risks and reporting any irregularities or control deficiencies to senior management or internal audit
  • Ensuring compliance with internal controls and regulatory requirements relevant to their areas
  • Contributing to the development of operational policies by providing feedback based on frontline experience
  • Fostering a culture of accountability, transparency, and continuous improvement among staff

Operational managers are also expected to support audit processes, ensure proper documentation and controls are in place, and act as a communication channel between staff and executive leadership. Their ability to enforce policies and model ethical behavior reinforces the overall integrity of the corporate governance framework.

Other stakeholders

This includes employees, creditors, suppliers, customers, regulators, and investors. While not directly part of the formal governance structure, these stakeholders play an important role in shaping and responding to governance practices.

  • Employees: Employees contribute to governance by adhering to internal controls, following company policies, and participating in a culture of accountability and ethical conduct. Whistleblower policies and ethics hotlines often provide employees a voice in governance.
  • Creditors: Lenders and other creditors monitor the company’s financial performance and compliance with loan covenants. Their risk assessments can influence company decisions and financial strategy.
  • Suppliers: Suppliers may impose contractual requirements related to ethical sourcing, quality standards, and compliance with labor or environmental regulations. Their expectations shape procurement governance practices.
  • Customers: Customers demand ethical behavior, transparency, data protection, and product quality. Customer trust can influence corporate behavior, especially in industries where brand reputation is critical.
  • Regulators: Government agencies and industry regulators enforce compliance with laws and regulations, requiring companies to maintain adequate internal controls, report financial information accurately, and follow sector-specific governance standards.
  • Investors: Institutional and individual investors hold management and the board accountable for performance, transparency, and long-term value creation. Their influence may be exercised through voting, proxy proposals, or direct engagement with corporate leadership.

These stakeholders, though external to the governance structure, shape expectations, apply pressure for reform, and contribute to a system of checks and balances that supports sustainable corporate behavior.

Board of Directors

  • Ultimate oversight of company strategy, management, and performance
  • Majority of members should be independent (especially for public companies)
  • Key duties:
    • Approve strategy, major financial decisions, and governance policies
    • Appoint, compensate, and evaluate CEO/top executives
    • Oversee risk management and safeguard shareholder interests

Chief Executive Officer (CEO)

  • Highest-ranking executive; accountable to the Board
  • Leads strategic planning, operations, and executive team
  • Main spokesperson; ensures compliance and execution of board-approved plans

Chief Financial Officer (CFO)

  • Leads financial planning, reporting, and risk management
  • Ensures accuracy of financial statements and compliance with regulations
  • Presents financial results to Board; liaises with auditors and regulators

Audit Committee

  • Independent Board committee overseeing financial reporting integrity
  • Key responsibilities:
    • Supervise internal/external audits and internal controls
    • Oversee risk management and auditor independence
    • Handle whistleblower complaints and ensure regulatory compliance (SOX for public companies)
  • Must consist of independent directors; at least one financial expert required for public companies

Managers

  • Implement board/executive policies at operational level
  • Supervise staff, maintain performance, and enforce compliance
  • Monitor and report operational risks; support audit processes

Other Stakeholders

  • Employees: follow controls, report issues, support ethical culture
  • Creditors: monitor financial health, influence through covenants
  • Suppliers: set compliance/ethical standards in procurement
  • Customers: demand transparency, quality, and ethical conduct
  • Regulators: enforce laws, require accurate reporting and controls
  • Investors: hold management accountable, influence via voting and engagement

Sign up for free to take 11 quiz questions on this topic

Previous
Next  | 5.1.6 External audit
All rights reserved ©2016 - 2026 Achievable, Inc.

Corporate governance roles and responsibilities

The rights and responsibilities in corporate governance

An effective corporate governance framework depends on the clear definition and execution of roles and responsibilities among various internal and external stakeholders. Each group contributes to the integrity, transparency, and accountability of corporate decision-making.

Board of directors

The Board of Directors has ultimate responsibility for overseeing the company’s direction, strategic decision-making, and management performance. It acts as the governing body representing the shareholders and ensures that the organization is operated in their best interest.

In the United States, all corporations are required by state law to have a Board of Directors, although specific requirements vary by state. Most states mandate at least one director as a legal minimum. However, for publicly listed companies, exchanges such as the New York Stock Exchange (NYSE) and NASDAQ impose stricter requirements, including having a majority of independent directors.

An independent director is one who is not a company employee and does not have material financial or personal ties to management. This independence helps ensure objective oversight and enhances the board’s accountability to shareholders.

Key responsibilities of the board of directors include:

  • Setting and approving the company’s long-term strategic direction and vision
  • Appointing, compensating, and evaluating the performance of the CEO and other top executives
  • Monitoring organizational performance and ensuring accountability at all levels
  • Reviewing and approving major financial decisions, budgets, investments, and capital expenditures
  • Ensuring the integrity of the company’s financial statements and compliance with applicable laws and ethical standards
  • Establishing corporate governance policies and overseeing risk management practices
  • Safeguarding the interests of shareholders and other key stakeholders

Qualifications for Board members typically include significant leadership experience, industry expertise, and a strong understanding of financial oversight and risk management. Many directors possess prior executive or board experience, advanced education (e.g., MBA, law, or finance degrees), and a reputation for ethical leadership. Diversity of background, skillset, and perspective is also increasingly valued in board composition.

The Board makes decisions through formal meetings where issues are deliberated and resolved by majority vote, although different types of voting mechanisms may be used depending on the issue at hand. These can include plurality voting (where the candidate with the most votes wins), cumulative voting (allowing shareholders to allocate multiple votes to a single candidate), or supermajority voting (requiring a higher threshold than a simple majority for major decisions such as mergers or amendments to bylaws). Committees such as the audit, risk, and compensation committees often conduct detailed reviews and make recommendations to the full Board. Board decisions are documented in official minutes, and directors are expected to exercise their duties with diligence, independence, and loyalty to the company.

Chief Executive Officer (CEO)

The CEO is responsible for the overall strategic leadership and operational management of the organization. They serve as the highest-ranking executive officer, accountable to the Board of Directors for the company’s performance and long-term success. As the primary link between the Board and the organization’s operations, the CEO ensures that strategic objectives are translated into actionable business plans and executed effectively.

Key responsibilities of the CEO typically include:

  • Developing and communicating the company’s vision, mission, and strategic goals
  • Leading the executive team and fostering a high-performing organizational culture
  • Making major corporate decisions and managing overall operations and resources
  • Serving as the main spokesperson for the company in dealings with stakeholders, regulators, and the media
  • Recommending business plans, budgets, and policies to the Board of Directors
  • Ensuring compliance with laws, regulations, and ethical standards

The CEO is typically appointed by the Board of Directors through a formal hiring and vetting process. This may involve search committees, executive recruitment firms, and a thorough review of the candidate’s qualifications, experience, leadership style, and strategic alignment with the company’s values and goals. Once selected, the CEO’s performance is subject to ongoing evaluation by the Board and often tied to key performance indicators (KPIs) such as financial outcomes, market growth, and organizational development.

Chief Financial Officer (CFO)

The CFO plays a critical role in the financial stewardship and strategic direction of the organization. They are responsible for leading the financial planning and analysis process, ensuring the accuracy and reliability of financial reporting, managing risks, and ensuring the organization complies with financial regulations and tax laws.

Key responsibilities of the CFO typically include:

  • Developing and overseeing budgets and long-term financial forecasts
  • Ensuring timely and accurate preparation of financial statements in accordance with accounting standards
  • Managing financial risks, including liquidity, credit, and market risks
  • Supervising treasury functions and cash flow management
  • Monitoring internal controls over financial reporting and compliance
  • Supporting strategic decision-making with financial modeling and analysis
  • Liaising with external auditors, tax advisors, banks, and regulatory bodies
  • Presenting financial results and forecasts to the Board and shareholders

Qualifications for a CFO usually include a strong background in accounting or finance, typically supported by a CPA (Certified Public Accountant), CMA (Certified Management Accountant), or CFA (Chartered Financial Analyst) designation. Advanced degrees such as an MBA are also common. In addition to technical expertise, a successful CFO must demonstrate strategic thinking, leadership ability, communication skills, and ethical integrity.

CFOs are typically appointed by the CEO or the Board of Directors, often with input from the audit or finance committee. The selection process may involve executive search firms, detailed assessments of industry experience, financial leadership capabilities, and alignment with corporate culture and strategic goals.

Audit committee

A specialized and independent committee of the Board of Directors, the audit committee plays a crucial role in ensuring the integrity and transparency of financial reporting and corporate accountability. It is typically composed of non-executive or independent directors with strong financial literacy and at least one member with accounting or auditing expertise.

Key responsibilities of the audit committee include:

  • Overseeing the integrity of the company’s financial statements and disclosures
  • Monitoring the effectiveness of internal controls over financial reporting
  • Supervising the internal audit function, including scope, plans, and findings
  • Appointing, compensating, and overseeing the external auditors
  • Reviewing the independence and performance of both internal and external auditors
  • Assessing the adequacy of the risk management framework
  • Ensuring that identified financial and compliance risks are addressed in a timely manner
  • Facilitating communication among management, auditors, and the board

In the United States, the role and structure of the audit committee are significantly shaped by the Sarbanes-Oxley Act of 2002 (SOX) and subsequent Securities and Exchange Commission (SEC) regulations. Under SOX, audit committees of publicly listed companies must consist of at least three members, all of whom must meet specific independence requirements. An “independent” director is one who is not part of company management, does not receive compensation beyond director fees, and has no material relationships (such as with major suppliers, customers, or advisors) that could impair their objectivity. They must also have no close family ties to executive officers.

Additionally under SOX:

  • All audit committee members of publicly listed companies must be independent, and at least one member must be a financial expert.
  • The audit committee is directly responsible for the appointment, compensation, and oversight of the external auditor.
  • Companies must disclose whether their audit committee includes at least one financial expert as defined by the SEC.
  • The audit committee must establish procedures for receiving and handling complaints about accounting, internal control, or auditing matters, including anonymous submissions from employees (i.e., whistleblower protections).

These regulatory provisions aim to enhance the independence and accountability of audit committees, ensuring that financial reporting processes are transparent and free from undue influence by management.

It is important to note that these requirements apply specifically to publicly listed companies in the United States. Private companies and non-listed entities are not legally required to have an audit committee under SOX or SEC rules. However, many voluntarily establish audit committees as part of sound governance practices, especially if they are large, preparing for an IPO, or seeking investor confidence. Nonprofit organizations may also be required to form audit committees depending on state laws, regulatory frameworks, or grant conditions.

The audit committee reports directly to the full board of directors and serves as a critical conduit for ensuring financial transparency and ethical governance. It often meets regularly with auditors to foster candid discussions and maintain auditor independence.

Managers

Operational and middle managers are responsible for bridging strategic directives from senior leadership with frontline execution. They play a vital role in ensuring that governance practices are embedded into daily operations and that organizational goals are effectively translated into departmental activities.

Key responsibilities of operational managers in the context of corporate governance include:

  • Implementing board- and executive-approved policies and procedures within their departments
  • Supervising employees and maintaining performance standards consistent with corporate objectives and ethical guidelines
  • Monitoring operational risks and reporting any irregularities or control deficiencies to senior management or internal audit
  • Ensuring compliance with internal controls and regulatory requirements relevant to their areas
  • Contributing to the development of operational policies by providing feedback based on frontline experience
  • Fostering a culture of accountability, transparency, and continuous improvement among staff

Operational managers are also expected to support audit processes, ensure proper documentation and controls are in place, and act as a communication channel between staff and executive leadership. Their ability to enforce policies and model ethical behavior reinforces the overall integrity of the corporate governance framework.

Other stakeholders

This includes employees, creditors, suppliers, customers, regulators, and investors. While not directly part of the formal governance structure, these stakeholders play an important role in shaping and responding to governance practices.

  • Employees: Employees contribute to governance by adhering to internal controls, following company policies, and participating in a culture of accountability and ethical conduct. Whistleblower policies and ethics hotlines often provide employees a voice in governance.
  • Creditors: Lenders and other creditors monitor the company’s financial performance and compliance with loan covenants. Their risk assessments can influence company decisions and financial strategy.
  • Suppliers: Suppliers may impose contractual requirements related to ethical sourcing, quality standards, and compliance with labor or environmental regulations. Their expectations shape procurement governance practices.
  • Customers: Customers demand ethical behavior, transparency, data protection, and product quality. Customer trust can influence corporate behavior, especially in industries where brand reputation is critical.
  • Regulators: Government agencies and industry regulators enforce compliance with laws and regulations, requiring companies to maintain adequate internal controls, report financial information accurately, and follow sector-specific governance standards.
  • Investors: Institutional and individual investors hold management and the board accountable for performance, transparency, and long-term value creation. Their influence may be exercised through voting, proxy proposals, or direct engagement with corporate leadership.

These stakeholders, though external to the governance structure, shape expectations, apply pressure for reform, and contribute to a system of checks and balances that supports sustainable corporate behavior.

Key points

Board of Directors

  • Ultimate oversight of company strategy, management, and performance
  • Majority of members should be independent (especially for public companies)
  • Key duties:
    • Approve strategy, major financial decisions, and governance policies
    • Appoint, compensate, and evaluate CEO/top executives
    • Oversee risk management and safeguard shareholder interests

Chief Executive Officer (CEO)

  • Highest-ranking executive; accountable to the Board
  • Leads strategic planning, operations, and executive team
  • Main spokesperson; ensures compliance and execution of board-approved plans

Chief Financial Officer (CFO)

  • Leads financial planning, reporting, and risk management
  • Ensures accuracy of financial statements and compliance with regulations
  • Presents financial results to Board; liaises with auditors and regulators

Audit Committee

  • Independent Board committee overseeing financial reporting integrity
  • Key responsibilities:
    • Supervise internal/external audits and internal controls
    • Oversee risk management and auditor independence
    • Handle whistleblower complaints and ensure regulatory compliance (SOX for public companies)
  • Must consist of independent directors; at least one financial expert required for public companies

Managers

  • Implement board/executive policies at operational level
  • Supervise staff, maintain performance, and enforce compliance
  • Monitor and report operational risks; support audit processes

Other Stakeholders

  • Employees: follow controls, report issues, support ethical culture
  • Creditors: monitor financial health, influence through covenants
  • Suppliers: set compliance/ethical standards in procurement
  • Customers: demand transparency, quality, and ethical conduct
  • Regulators: enforce laws, require accurate reporting and controls
  • Investors: hold management accountable, influence via voting and engagement

More from Governance, risk and compliance

  • Internal control objectives and the COSO Framework
  • Responsibility for internal control and segregation of duties
  • Internal control limitations, risks, and deficiencies
  • Corporate governance structure and responsibilities
  • External audit