SUNANDO ROY – On Banking, Finance and Society

Corporate governance is the cornerstone of a bank’s ability to operate responsibly, maintain financial stability, and protect stakeholders’ interests. The Basel Committee on Banking Supervision’s Corporate Governance Principles for Banks (2015) provides a comprehensive framework to ensure banks uphold integrity, transparency, and prudent risk management. However, certain governance missteps can undermine these efforts, leading to financial instability, regulatory penalties, and loss of stakeholder trust. Below, we explore the big no-nos that banks must avoid to maintain a robust corporate governance framework, with detailed insights into each pitfall. An annexure at the end outlines actionable steps to ensure sound governance, drawn from the Basel Committee’s principles.

1. Ignoring the “Tone at the Top”

The board and senior management set the ethical and operational tone for the entire organization, a concept known as the “tone at the top.” The Basel Committee emphasizes that this tone is critical for fostering a culture of integrity, risk awareness, and accountability. A weak or inconsistent tone can lead to widespread misconduct, such as financial misreporting, fraud, or market manipulation (e.g., the Libor rate rigging scandal). For instance, if leadership prioritizes short-term profits over long-term stability, employees may feel pressured to engage in unethical practices, undermining the bank’s risk culture. The board must actively promote corporate values through a clear code of conduct and ensure that violations, such as bribery or breaches of sanctions, face disciplinary consequences. Failing to do so risks creating an environment where unethical behavior becomes normalized, eroding trust and stability.

What to avoid:

• Allowing leadership to send mixed messages by tolerating excessive risk-taking or unethical behavior for short-term gains.
• Neglecting to communicate and enforce a code of conduct that explicitly prohibits illegal activities like money laundering, anti-competitive practices, or consumer rights violations.
• Failing to establish whistleblowing mechanisms that protect employees who report unethical practices, as mandated by the Basel Committee.

2. Compromising Board Independence

A board’s effectiveness hinges on its independence and diversity, which enable objective oversight and sound decision-making. The Basel Committee stresses that boards must include a sufficient number of independent directors who are free from conflicts of interest and undue influence from management, shareholders, or external parties. Compromising this independence—by appointing directors with ties to management or allowing “dual hatting” (e.g., the CEO also serving as board chair)—can weaken checks and balances. For example, a board dominated by insiders may fail to challenge risky strategies, leading to governance failures. The Committee also highlights the need for diverse skills and backgrounds to ensure robust discussions, noting that homogeneity can stifle critical debate and innovation. For this, avaid:

• Permitting board members to hold conflicting roles ,  absence of independent director to maintain objectivity.
• Overlooking rigorous selection processes to verify candidates’ integrity, expertise, and availability, which can result in unqualified or conflicted directors.
• Ignoring the need for ongoing training to keep board members updated on financial, regulatory, and risk-related issues, especially for those with limited expertise.

3. Weak Risk Governance Framework

A robust risk governance framework is essential for identifying, measuring, and controlling risks across a bank’s operations. The Basel Committee advocates for a clear risk appetite statement (RAS), well-defined responsibilities, and a “three lines of defense” model: business lines (first line), risk management and compliance (second line), and internal audit (third line). A weak framework—lacking a clear RAS or independent control functions—can lead to unchecked risks, such as credit defaults or operational failures. For instance, if the risk management function is under-resourced or lacks authority, it may fail to escalate breaches of risk limits, exposing the bank to significant losses. The Committee also emphasizes the importance of aligning risk appetite with strategic and financial plans to prevent misalignment that could destabilize the bank.  Common pitfalls to be wary of are-

• Failing to articulate a risk appetite that includes both quantitative limits and qualitative considerations, leading to inconsistent risk-taking.
• Undermining the independence of the Chief Risk Officer (CRO) by involving them in revenue-generating roles, which compromises their objectivity.
• Neglecting to integrate stress testing and scenario analyses into risk management, which are critical for anticipating adverse conditions.

4. Inadequate Oversight of Senior Management

The board’s role extends beyond setting strategy to actively overseeing senior management’s actions and holding them accountable. The Basel Committee underscores that boards must monitor whether senior management aligns with the bank’s risk appetite, values, and policies, and enumerate consequences (e.g., dismissal) for misalignment. Inadequate oversight can allow mismanagement or unethical behavior to go unchecked, as seen in cases where executives pursued aggressive growth without regard for risk limits. For example, a board that fails to question senior management’s explanations or review their performance may miss early warning signs of governance failures. Succession planning is also critical to ensure continuity and competence in key roles like the CEO or CRO. Oversight failures to be careful about include:

• Rubber-stamping management decisions without critically reviewing their alignment with the bank’s strategic objectives and risk appetite.
• Failing to establish clear performance and remuneration standards for senior management that prioritize long-term financial soundness.
• Neglecting succession plans for key positions, which can lead to leadership gaps during crises.

5. Poor Transparency and Disclosure

Transparency is a cornerstone of sound governance, enabling shareholders, depositors, and regulators to hold the board and senior management accountable. The Basel Committee mandates that banks disclose material information about governance structures, risk exposures, and compensation policies, tailored to their size and complexity. Poor transparency—such as vague or incomplete disclosures—can erode stakeholder trust and invite regulatory scrutiny. For instance, failing to report on board composition, committee activities, or conflicts of interest can signal governance weaknesses. The Committee also aligns with the OECD’s principles, emphasizing timely and accessible disclosures, such as annual reports on compensation and risk management strategies. Common business conduct mistakes here:

• Providing disclosures that lack clarity or omit critical details about governance practices, risk profiles, or remuneration policies.
• Failing to disclose material conflicts of interest, particularly those arising from related-party transactions or group affiliations.
• Delaying or omitting public reporting on significant developments, such as changes in board composition or risk limit breaches.

6. Misaligned Compensation Structures

Compensation systems play a pivotal role in shaping a bank’s risk culture and governance. The Basel Committee warns that remuneration must align with the bank’s long-term objectives, risk appetite, and values, particularly for material risk-takers (e.g., senior executives). Misaligned structures—such as bonuses tied to unverified future revenues or “golden parachutes” for departing executives—can incentivize excessive risk-taking, as seen in the 2007 financial crisis. The Committee advocates for mechanisms like “malus” (forfeiture) and “clawback” provisions to adjust compensation based on realized risks or misconduct. Additionally, remuneration for control functions (e.g., risk or audit) must be independent of business line performance to preserve their objectivity. Avoid:

• Designing compensation systems that reward short-term performance without considering long-term risk outcomes.
• Allowing control function remuneration to be influenced by the business lines they oversee, compromising their independence.
• Failing to implement deferred compensation or clawback provisions for material risk-takers to account for multi-year risk horizons.

7. Neglecting Conflicts of Interest

Conflicts of interest can undermine impartial decision-making and erode stakeholder trust. The Basel Committee requires banks to have formal policies to identify, manage, and disclose conflicts, whether they arise from related-party transactions, group affiliations, or board members’ personal interests. For example, a board member with a financial stake in a company the bank does business with may prioritize personal gain over the bank’s interests. Neglecting these conflicts can lead to misappropriation of resources or unfair dealings, damaging the bank’s reputation and financial health. The Committee emphasizes arm’s-length terms for related-party transactions and rigorous approval processes to mitigate conflicts. This is serious and undermines strategy implementation. The big no-nos therefore:

• Failing to enforce policies that require board members to disclose and abstain from voting on matters where they have a conflict.
• Allowing transactions with related parties to proceed without independent review or arm’s-length terms.
• Ignoring conflicts arising from group structures, such as pressure to share sensitive information or conduct non-arm’s-length business.

8. Undermining Control Functions

The risk management, compliance, and internal audit functions are the pillars of a bank’s governance framework, acting as the second and third lines of defense. The Basel Committee emphasizes their independence, authority, and direct access to the board to ensure effective oversight. Undermining these functions—through understaffing, “dual hatting,” or filtering their reports—can expose the bank to unchecked risks and regulatory violations. For instance, if the internal audit function lacks resources or independence, it may fail to identify control weaknesses, leading to governance failures. The Committee also requires that the CRO and head of internal audit report directly to the board or its committees, with their appointment and dismissal subject to board approval.  Financial institutions should stay clear of  :

• Allowing the CRO or head of internal audit to take on operational or revenue-generating roles, which compromises their independence.
• Failing to provide control functions with sufficient resources, skills, or access to information to perform their duties effectively.
• Ignoring or delaying action on audit findings, compliance issues, or risk management recommendations, which can escalate risks.

In the end,

A robust corporate governance framework is essential for a bank’s stability, reputation, and stakeholder trust. The Basel Committee’s Corporate Governance Principles for Banks provides a roadmap to achieve this, but avoiding the above no-nos is critical to its success. By prioritizing ethical leadership, board independence, risk governance, and transparency, banks can mitigate risks and foster a culture of accountability. The annexure below outlines practical steps to ensure sound governance, helping banks navigate the complexities of modern banking while safeguarding the financial system.

References

Basel Committee on Banking Supervision. Corporate Governance Principles for Banks. Basel: Bank for International Settlements, 2015. https://www.bis.org/bcbs/publ/d328.pdf.

Annexure 1: Steps to Ensure Robust Corporate Governance in Banks ( and other financial institutions in a proportionate manner)

To align with the Basel Committee’s principles, banks can implement the following steps to strengthen their corporate governance framework:

1. Establish a Strong Tone at the Top:
   • Develop and communicate a code of conduct that defines acceptable and unacceptable behaviors, prohibiting illegal activities like fraud, bribery, and money laundering.
   • Promote a risk-aware culture through board-led initiatives, ensuring employees understand their role in adhering to risk limits.
   • Implement a whistleblowing policy with confidential reporting channels and protections against reprisals, overseen by the board.
2. Ensure Board Independence and Competence:
   • Appoint a sufficient number of independent directors to enhance objectivity, with a clear process for assessing conflicts of interest.
   • Select board members with diverse skills in areas like risk management, financial reporting, and regulation, ensuring they have adequate time to fulfill their duties.
   • Provide ongoing training and induction programs to keep board members updated on industry and regulatory developments.
3. Strengthen Risk Governance:
   • Define a clear risk appetite statement (RAS) that includes quantitative and qualitative measures, aligned with the bank’s strategic and financial plans.
   • Implement the “three lines of defense” model, ensuring the independence and authority of risk management, compliance, and internal audit functions.
   • Conduct regular stress tests and scenario analyses to identify and mitigate potential risks, with results reviewed by the board.
4. Enhance Oversight of Senior Management:
   • Monitor senior management’s actions to ensure alignment with the bank’s risk appetite and values, with clear consequences for non-compliance.
   • Establish performance and remuneration standards that prioritize long-term financial soundness, reviewed by the board.
   • Develop succession plans for key positions like the CEO and CRO to ensure leadership continuity.
5. Promote Transparency and Disclosure:
   • Disclose material information annually on board composition, committee activities, risk exposures, and compensation policies, tailored to the bank’s complexity.
   • Ensure disclosures are clear, timely, and accessible, including annual governance reports and public reporting on conflicts of interest.
   • Align with OECD principles for transparency, particularly for remuneration and risk management disclosures.
6. Align Compensation with Risk Management:
   • Design remuneration systems that reflect long-term performance and risk outcomes, with deferred compensation for material risk-takers.
   • Implement “malus” and “clawback” provisions to adjust bonuses based on realized risks or misconduct.
   • Ensure remuneration for control functions is independent of business line performance to maintain their objectivity.
7. Manage Conflicts of Interest:
   • Establish a formal conflicts-of-interest policy requiring board members to disclose and abstain from voting on conflicted matters.
   • Enforce arm’s-length terms for related-party transactions, with rigorous approval processes involving independent review.
   • Monitor conflicts arising from group structures, ensuring information sharing and transactions align with governance standards.
8. Empower Control Functions:
   • Ensure the CRO, compliance, and internal audit functions have direct access to the board and sufficient resources to perform their duties.
   • Prohibit “dual hatting” for heads of control functions to maintain their independence from operational or revenue-generating roles.
   • Act promptly on audit findings and compliance issues, with board oversight to ensure corrective actions are implemented.

By diligently applying these steps, banks can build a governance framework that not only complies with regulatory expectations but also fosters resilience and trust in the financial system.