Advanced corporate governance is how a board makes high-stakes decisions it can defend. It starts with knowing which rules apply, then using independent directors, the right committees and good advisers, acting for the company as a whole, and keeping a careful record of what the board asked and why it decided.
Most directors learn the basics on the job: the duties of care and loyalty, the committees, the rhythm of the board calendar. Then a harder decision arrives. A deal with a large shareholder. A restatement. An activist. A cyberattack. That is where governance stops being a set of principles and becomes a set of choices. This guide covers the big ideas at a high level. The course works through them, decision by decision.
Who is this guide for?
- Sitting directors on public, private, venture-backed or family company boards.
- Graduates of Corporate Board Fundamentals who want the next step.
- Committee chairs, especially audit, compensation and nominating chairs.
- General counsel, corporate secretaries and executives who work closely with boards.
How does a board know which rules apply?
A single company can answer to state law, federal securities law, a stock exchange and its own documents, all at once. The course uses four questions to sort it out:
- Where is the company incorporated? That decides the corporate law and the directors' fiduciary duties.
- Is it listed on a stock exchange? Then the exchange's rules on independence and committees apply.
- Does it file with the SEC? Then federal disclosure rules apply.
- Who owns it? A controlling shareholder, a private equity sponsor or a founding family changes how conflicts are handled.
Take one decision, approving a deal with a large shareholder. At a private company, the main questions are fiduciary duties and the charter. At a listed company, add the exchange's rules. At a public company, add disclosure to investors. And if the shareholder controls the company, there are specific approval paths to follow.
Who decides what: the board or management?
Strong boards write down the answer. A list of reserved matters names the decisions only the board can make, such as approving the strategy and budget, major acquisitions, large borrowings or hiring the CEO. A delegation of authority sets the limits within which management may act on its own. Where a company has subsidiaries, the parent board also needs to decide what each subsidiary board may decide for itself. Clear lines prevent two common failures: a board that is surprised by a decision it should have made, and a board that is buried in decisions it should have left to management.
What does director independence really mean?
Many important decisions turn on one question: is this director independent? The answer depends on who is asking. The stock exchanges set bright-line tests, such as recent employment or certain payments. Passing those tests is not the end. The board must also judge that a director has no relationship that would interfere with independent judgment.
And when a decision is challenged, courts look at the facts case by case. Close personal ties can matter even when every exchange test is met. For a special committee reviewing a deal with the CEO or a controller, the practical question is simple: could this director say no?
How should a board handle conflicted transactions?
Deals with controllers, executives or directors are where governance is tested most. The tools are well known: disclose the conflict, use a committee of truly independent directors, give that committee its own advisers and the power to say no, and, where the rules call for it, seek approval from the shareholders who are not conflicted. The course walks through each step, and how special, transaction and investigation committees differ.
How should a board respond to shareholder activism?
Activism is no longer rare, and it is not always hostile. The best defense is preparation: know your shareholders, understand what they think of your strategy and pay, and look at the company the way an activist would before one arrives. When an activist does call, the board listens first, engages through a clear plan and protects inside information. Some demands are worth taking seriously. Others are not. The board's job is to decide based on what is best for the company as a whole.
What does strong audit and pay oversight look like?
The audit committee is the board's front line on trust in the numbers. It works with the outside auditor, internal audit and management, and it needs to understand where judgment lives in the financial statements, what a going-concern question means and when to escalate a control problem.
Pay oversight now includes recovery when results are restated. In 2022 the SEC adopted rules requiring listed companies to adopt and follow a written policy to recover erroneously awarded incentive pay from current and former executive officers after an accounting restatement, looking back over the three completed fiscal years before the restatement is required (SEC press release 2022-192). The compensation committee should know how its company's policy works before it is ever needed.
How should boards oversee cybersecurity and AI?
Technology risk moves fast. Under rules the SEC adopted in 2023, public companies must disclose material cybersecurity incidents on Form 8-K, generally within four business days after determining an incident is material, and must describe the board's oversight of cybersecurity risk in the annual report (SEC press release 2023-139). So the board needs real answers. Which committee oversees cyber? How often does it hear from the security leader? Is there a tested response plan?
Artificial intelligence brings its own mix of opportunity and risk: errors, bias, privacy, intellectual property and security. A good starting point for any board is to know where the company uses AI, who owns AI risk and which controls apply.
What does today's board look like?
Board leadership and refreshment keep evolving. Spencer Stuart's 2025 U.S. Board Index reports that 42% of S&P 500 boards now have an independent chair, and that two-thirds of boards have mandatory retirement policies (Spencer Stuart, via the Harvard Law School Forum). Composition, evaluation and the lead independent director role are all covered in the course.
What does a board do when everything goes wrong at once?
Real crises rarely arrive one at a time. The course closes with a case like this. A whistleblower reports that sales booked revenue early to hit targets. Internal audit confirms it, and two years of results must be restated. The stock falls. An activist buys a stake and asks for board seats. Lenders warn about a loan covenant.
A strong board does not panic. It puts the investigation in the hands of the audit committee and independent counsel, protects the whistleblower, works through disclosure with counsel and the auditor, applies the clawback policy, talks to the lenders early and engages the activist with a plan. Throughout, the minutes record what the board learned, what it asked and why it decided as it did. When oversight is questioned later, the record is what shows it happened.
What are the most common governance mistakes experienced boards make?
- Treating exchange independence as the final word on a conflicted deal.
- Letting management choose the special committee's advisers.
- Leaving cybersecurity without a clear committee owner.
- Thinking about CEO succession only when the CEO leaves.
- Keeping minutes so thin that they cannot show the board did its work.
Many of these rules change over time and vary by company. This is general education, not legal advice. When a real decision is on the table, check the current rules and work with your company's counsel.
What should boards focus on this year?
Ask the four questions about your own company. Confirm which committee owns each major risk. Read your clawback policy and your cyber response plan. Test whether your independent directors could truly say no on a conflicted deal. And look at your last three sets of minutes with fresh eyes.
What is in the full course?
Corporate Board Governance is Board Director Institute's advanced course: 28 video lessons, each ending in a board exercise you work through before the answer is shown. It covers the legal framework map, reserved matters and subsidiaries, controllers and conflicted deals, activism, special committees, independence, D&O insurance, financial reporting, audit, executive pay and clawbacks, enterprise risk, disclosure, cybersecurity and AI, strategy and capital, M&A and distress, CEO succession and a full crisis case, with one lesson comparing the United Kingdom and Australia. A harder scenario-based exam leads to a Certificate of Completion issued by Board Director Institute. It is a learning certificate, not accreditation, a license or a board appointment.
Want the frameworks on one page first? Download the free cheat sheet above.