The Governance Gap: Why Speaking Up Doesn't Always Change Decisions

Most boards do not lack information. They receive management reports, risk updates, internal audit findings and legal input. Employees can raise concerns through formal channels and whistleblowing processes. On paper, the system appears robust. The harder question is whether any of that information can still change a decision once commercial momentum has been established.

Yet some of the most serious corporate failures reveal a different reality. Warning signs existed. Concerns were raised, risks were identified, information was available. The failure was not that nobody knew, it was that what was known wasn’t acted upon and did not meaningfully influence decisions.

That is the governance gap: the distance between the organisation the board thinks it is overseeing and the organisation employees, customers and operational teams experience day to day. It is where intervention loses the power needed to change outcomes.

In an environment shaped by technological complexity, regulatory scrutiny and rising stakeholder expectations, the governance gap matters more than ever. Boards are not short of information. The danger is that a polished version of reality reaches the boardroom while uncomfortable signals get diluted, aggregated or filtered out on the way to the top floor.

The organisations that navigate risk most effectively are rarely those with the largest rulebooks. They are the ones that can identify uncomfortable truths early and ensure their findings shape decisions before they become crises.

The real governance challenge is influence, not voice

The issue is not whether an organisation has routes for concerns to travel through. It is whether those routes lead anywhere that matters.

Governance discussions often focus on whether people feel able to speak up, but it only addresses half the problem. Most organisations have whistleblowing arrangements, escalation procedures and reporting channels. Many survey employees about their confidence in raising concerns. What receives far less scrutiny is what happens next. Questions that should be asked include:

• Do concerns influence decisions?

• Can challenge alter the direction of a project, product launch or commercial strategy?

• Can somebody successfully question a profitable initiative if doing so threatens revenue, timelines or executive priorities?

Together, these are a more accurate barometer of good governance and the questions organisations should be asking themselves.

The Corporate Conscience Index highlights the problem. Although 90% of respondents believe leaders are listening, there remains a widespread perception that commercial considerations still outweigh ethical concerns in decision-making. That is the real governance gap in miniature: not silence, but limited influence. People may feel heard, yet still see the commercial case override the concern.

Boards should therefore not be asking, "Do our people speak up?", but "Can speaking up change anything?"

One practical way to assess this is to review significant decisions from the past 12 months and identify where challenge altered the outcome. If examples are difficult to find, the organisation may have a challenge process but not a challenge culture.

Where governance really breaks down

A common misconception is that governance failures occur because organisations lack controls. In my experience, the opposite is often true.

Many firms have extensive governance frameworks, committee structures and reporting mechanisms. Problems emerge because information changes as it moves through those structures.

In my experience advising firms and regulators, significant risks are often identified much earlier than boards realise. Front-line teams, compliance functions, internal audit and customer complaints may all point towards an emerging issue. Yet, as information moves through governance structures, it can become summarised, contextualised or blended into broader reporting. The underlying risk remains, but its urgency can become less visible.

This problem extends well beyond financial services. As organisations grow, governance becomes more layered. Information is condensed, summarised and aggregated because boards cannot review thousands of pages of underlying data. But every layer of summarisation creates the possibility that something important becomes less visible. For boards, the practical implication is uncomfortable but simple: ask not only what has been reported, but what has been changed, condensed or removed before the report arrived.

The result is a paradox: senior leaders can receive more information than anyone else in the organisation while becoming less exposed to the warning signs that matter most.

That is why boards should actively test information flows rather than assume they work. Instead of reviewing policies in isolation, they should trace a real issue from the moment it was first identified to the point it reached board level. Compare the original concern with the final reporting. Did the issue retain its significance, or was it diluted along the way?

The answer often reveals more about governance effectiveness than any formal assurance exercise.

The danger of mistaking compliance for governance

Another governance blind spot is the assumption that regulatory compliance and good governance are effectively the same thing. They are not.

Compliance is an important component of good governance, but the two are not synonymous. Compliance focuses on adherence to legal and regulatory requirements. Governance is broader, encompassing how organisations make decisions, manage risk, allocate accountability and deliver sustainable outcomes.

Financial services regulation is increasingly moving in the same direction. Under the Senior Managers and Certification Regime (SMCR), firms are expected to establish clear lines of accountability and ensure that senior managers exercise effective oversight within their areas of responsibility. The Consumer Duty builds on that focus by requiring firms not merely to identify risks to good customer outcomes, but to act on them. Together, these frameworks reflect an increasingly outcomes-focused regulatory approach in which boards and senior management are expected to review evidence, challenge management and satisfy themselves that governance arrangements are delivering the outcomes consumers are entitled to expect.

An organisation can satisfy every procedural requirement and still make poor decisions. The Post Office Horizon scandal is a powerful example. While often discussed as a technology failure, Horizon also exposed profound failures of governance, accountability, escalation and challenge. Concerns were raised. Questions were asked. The concerns raised did not result in the level of challenge, investigation or intervention that they should have, and postmasters paid for that gap with their livelihoods, their reputations and, in some cases, their liberty.

That distinction matters because many boards instinctively respond to governance concerns by introducing additional controls. Sometimes that is necessary. Often it simply adds another layer through which information must travel.

A more useful test is whether existing governance structures improve the quality of decisions. Do they encourage curiosity, expose assumptions and bring risks or opportunities to the surface earlier? If not, governance may have become procedural rather than purposeful.

The organisations that perform best invite challenge

One of the strongest indicators of governance quality is how an organisation responds when challenge conflicts with a commercially attractive course of action.

Most leaders are comfortable with challenge that validates their thinking. The real test comes when it points the other way: delaying a product launch, changing strategy or walking away from revenue. That is where governance becomes visible.

The strongest organisations recognise that challenge is not friction. It is an early-warning system. It improves decision quality because assumptions are tested inside the organisation before markets, regulators or customers test them from the outside.

This is why diversity of thought deserves greater attention in governance discussions. Representation matters, but it does not guarantee challenge. A board can appear diverse while still approaching decisions through the same assumptions, incentives and professional habits.

Equally, individuals willing to challenge prevailing assumptions can materially improve governance effectiveness. The asset management firm that rejected a highly qualified board candidate for being “too challenging” illustrates the point: organisations sometimes resist precisely the perspectives they need most.

Moving from listening to influence

Many leadership teams want practical evidence that governance is working. Employee engagement data, whistleblowing reports and culture surveys all have value, but they are indirect indicators. The more revealing test is whether concern, challenge and dissent can be traced through to action.

• Can significant concerns be tracked from identification through to action?

• Can management demonstrate how challenge affected a major decision?

• Are recurring issues subjected to root cause analysis rather than isolated remediation?

• Do boards receive information from multiple sources, including audit, compliance, risk, customer complaints and speak-up channels, rather than relying on a single reporting stream?

• Perhaps most importantly, does management actively test governance processes before they are required during a crisis?

The best organisations stress-test escalation routes, review real incidents and examine near misses. They do not assume governance works simply because a process exists. That approach creates value beyond governance: it strengthens customer trust, improves decision quality, enhances organisational resilience, and often delivers better commercial outcomes precisely because risks are identified and addressed earlier.

The real test is whether truth can still change decisions

The most important governance question facing boards is no longer whether people feel able to speak up. It is whether the organisation can be changed by what it hears.

Many governance frameworks are designed to capture information. Far fewer are designed to preserve its significance all the way to the point of decision.

That distinction matters. Every major corporate failure leaves behind a trail of warnings, concerns and missed opportunities to intervene. Rarely is the absence of information the root cause. More often, the warning signs lost influence somewhere between the front line and the boardroom.

The organisations that will succeed over the next decade are unlikely to be those with the most governance processes. They will be the ones that preserve trust by ensuring uncomfortable truths reach the people with authority to act before risks crystallise into customer harm, regulatory intervention or reputational damage.

In an increasingly complex world, governance is not ultimately about control. It is about whether the people closest to a risk, an opportunity or an emerging problem can still shape what happens next. That is not a soft cultural point. It is where better judgement, earlier intervention and stronger commercial outcomes begin.