A board of directors is the governing body that oversees a corporation or nonprofit on behalf of its shareholders or stakeholders, and the roles and responsibilities of a board of directors center on hiring and monitoring the chief executive, setting strategy, approving major financial decisions, and overseeing risk. The board does not run the business day to day. It sets direction, holds management accountable, and carries legal duties that can reach individual directors personally if they fail to meet them.
What a Board Actually Does
The single most consequential thing a board does is hire, evaluate, and if necessary fire the CEO. The board sets the CEO’s compensation, defines performance targets, and conducts regular reviews. Getting this decision right shapes everything else the organization does. Getting it wrong is where governance failures usually begin.
Beyond executive leadership, the board approves annual budgets, authorizes major capital spending, and decides whether to distribute profits to shareholders as dividends. Dividend payments are discretionary, not automatic. The board weighs cash reserves, future investment needs, and legal restrictions before declaring one. The board also oversees risk management, ensuring the organization is not exposed to threats that could jeopardize its financial stability or legal standing.
For public companies, risk oversight now extends explicitly to cybersecurity. SEC rules adopted in 2023 require public companies to disclose how the board oversees cybersecurity threats, including which committee handles that oversight and how the board stays informed.1Securities and Exchange Commission. Final Rule: Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Companies must also report material cybersecurity incidents within four business days of determining the incident is material.
Public company boards carry another oversight duty that trips up organizations after financial restatements. Under the Dodd-Frank Act, listed companies must maintain a clawback policy requiring recovery of incentive-based compensation from current or former executive officers if the company restates its financials due to a material error. The recovery covers the three-year period before the restatement and applies regardless of whether the executive was personally at fault.2Office of the Law Revision Counsel. 15 USC 78j-4 – Recovery of Erroneously Awarded Compensation Policy The amount recovered is the difference between what was paid and what would have been paid based on the restated numbers.3eCFR. 17 CFR 240.10D-1 – Listing Standards Relating to Recovery of Erroneously Awarded Compensation
One boundary worth noting up front: an advisory board is not a board of directors. Advisory boards offer non-binding guidance, carry no fiduciary duties, and expose their members to no personal liability for the organization’s decisions. If you are invited to join a board, know which type it is before you accept.
Who Sits on the Board
Boards typically include two types of members. Inside directors are senior employees of the company, most often the CEO. They understand day-to-day operations and give the board real-time insight into how strategic decisions play out. The tradeoff is obvious: they report to the very board they sit on.
Outside directors have no employment or business relationship with the company beyond their board seat. They bring independent judgment, experience from other organizations, and a willingness to ask uncomfortable questions that insiders might avoid. The balance between the two groups is what keeps the board from becoming a rubber stamp for management.
For publicly traded companies, independence is not optional. Major stock exchanges require that a majority of board members qualify as independent directors. Nasdaq’s listing rules mandate a majority-independent board and disqualify anyone who is a current employee or receives consulting fees from the company beyond standard board compensation.4Nasdaq. Nasdaq Rule 5605 – Board of Directors and Committees The NYSE imposes a similar requirement.
The Fiduciary Duties Every Director Owes
Directors owe the organization fiduciary duties, meaning they must put the organization’s interests ahead of their own. These obligations are the legal backbone of board service, and courts take them seriously.
Duty of Care
The duty of care requires you to make informed, thoughtful decisions. Under the widely adopted Model Business Corporation Act, directors must act with the care that a person in a similar position would reasonably find appropriate under the circumstances. In practice, that means reading the materials before a board meeting, asking hard questions about proposals, and seeking expert advice on matters outside your expertise. A director who votes on a major acquisition without reviewing the financial analysis is the textbook example of failing this duty.
Duty of Loyalty
The duty of loyalty prevents directors from using their position for personal enrichment at the organization’s expense. If a director has a financial interest in a transaction the board is considering, the conflict must be disclosed before any vote. Most corporate statutes provide a safe harbor: the conflicted director discloses the interest, the disinterested directors or shareholders approve the transaction after full disclosure, and the transaction itself is fair to the company. Skipping any of those steps invites a lawsuit.
Good Faith and the Business Judgment Rule
Directors must also act in good faith, meaning they cannot deliberately ignore their responsibilities or consciously disregard risks to the organization. The MBCA makes this explicit, requiring directors to act in good faith and in a manner they reasonably believe serves the organization’s best interests.
Courts generally do not second-guess board decisions that turn out badly, as long as the directors acted honestly and followed a reasonable process. This protection, known as the business judgment rule, shields directors from personal liability when they made a decision in good faith, stayed informed, and rationally believed the action served the company. The rule exists because boards need room to take calculated risks without fear that every bad outcome ends in litigation. It does not protect decisions tainted by self-dealing, bad faith, or willful ignorance.
How Boards Get Their Work Done
Most boards delegate specialized work to standing committees that meet separately and report back to the full board. Three appear on virtually every public company board.
Audit Committee
The audit committee hires, compensates, and oversees the company’s independent auditors. Under the Sarbanes-Oxley Act, every member must be independent, meaning they cannot accept consulting or advisory fees from the company outside their board role and cannot be affiliated with the company or its subsidiaries.5PCAOB. Sarbanes-Oxley Act of 2002 – Section 301 The committee also establishes procedures for employees to submit confidential complaints about accounting irregularities. When corporate fraud makes headlines, the audit committee is usually the first place investigators look.
Compensation Committee
The compensation committee sets pay packages for the CEO and other senior executives, including base salary, bonuses, stock awards, and retirement benefits. Exchange listing rules require members to be independent, for the obvious reason that executives should not be setting their own pay. The committee typically benchmarks pay against peer companies and ties a significant portion to performance metrics.
Nominating and Governance Committee
This committee identifies and evaluates candidates for future board vacancies, considering the skills, experience, and backgrounds the board needs. It often oversees broader governance practices, including board self-evaluations and succession planning.
Board Chair and Meeting Mechanics
The board chair sets meeting agendas, presides over discussions, and serves as the primary liaison between the board and management. The role is distinct from the CEO, though some companies combine them. When one person holds both titles, boards often appoint a lead independent director so the independent directors have their own point of contact and can meet without management present.
A board can only act when enough members are present to form a quorum. The default under most corporate statutes is a majority of directors. On a nine-member board, at least five must be present for the meeting to count. Once a quorum exists, a majority of those present can approve a resolution.
Boards can also act without meeting through unanimous written consent. Every director must agree in writing or by electronic transmission. This works well for routine approvals but falls apart for anything controversial, since a single holdout blocks the process.
Meeting minutes serve as the official legal record of what the board discussed and decided. If a decision is later challenged in court, the minutes are the primary evidence that the board followed a deliberate process, which is exactly what the business judgment rule requires. Sparse minutes undermine the very protection directors rely on.
How Directors Are Elected, Paid, and Removed
Directors are nominated and elected by shareholders at the annual meeting. In a typical setup, the nominating committee proposes a slate, and shareholders vote to approve them. Many large public companies have also adopted proxy access provisions, which allow long-term shareholders holding at least 3% of the company’s voting shares to place their own nominees on the company’s ballot.
Some companies use staggered boards, dividing directors into classes that serve overlapping multi-year terms so only a portion comes up for election each year. Proponents argue this provides continuity and protects against disruptive takeover attempts. Critics counter that it insulates boards from shareholder accountability and has been associated with lower firm value. The trend over the past decade has been toward annual elections for all directors.
Under cumulative voting, which some companies permit, shareholders can concentrate all their votes on a single candidate rather than spreading them across every open seat.6Investor.gov. Cumulative Voting This gives minority shareholders a realistic shot at electing at least one director who represents their interests.
Directors leave the board through term expiration, voluntary resignation, or shareholder removal. Most corporate statutes allow shareholders to remove directors with or without cause by majority vote. Removal for cause typically involves a breach of fiduciary duty, illegal conduct, or persistent failure to fulfill board obligations. Corporate bylaws spell out the voting thresholds and procedures.
Compensation looks very different at public companies and nonprofits. Independent directors at public companies receive a mix of cash retainers and stock awards. Median total compensation at S&P 500 companies runs around $325,000 per year, with roughly $105,000 in cash and $190,000 in equity. Smaller public companies pay less, with median compensation closer to $257,000 across the Russell 3000. Per-meeting fees have largely disappeared, with about 90% of public companies now using an all-in retainer structure. Many companies cap total annual director compensation at around $750,000 under shareholder-approved limits.
Nonprofit boards operate differently. Most nonprofit directors serve as unpaid volunteers, and many nonprofit bylaws explicitly prohibit board compensation. When nonprofits do pay board members, the IRS watches closely. Under Section 4958, the IRS can impose excise taxes on “excess benefit transactions,” which includes compensation exceeding what is reasonable for the services provided.7Internal Revenue Service. Intermediate Sanctions – Excess Benefit Transactions The penalty falls on the individual who received the excess benefit. Nonprofits that pay board members more than $600 per year must issue an IRS Form 1099-MISC. In some states, accepting compensation also eliminates the liability protections available to volunteer board members.
Personal Liability and the Protections That Exist
Board service carries real legal exposure. Directors can be sued by shareholders, regulators, creditors, or the organization itself for breaching their fiduciary duties. The potential liability is personal, meaning a judgment could reach a director’s own assets. Three overlapping protections exist to manage that risk.
Most corporate statutes allow companies to include exculpation clauses in their governing documents that eliminate or limit directors’ personal liability for monetary damages from certain duty-of-care breaches. These clauses are standard in corporate charters. They do not protect against every claim. Breaches of the duty of loyalty, acts of bad faith, intentional misconduct, and transactions where a director received an improper personal benefit remain fully actionable.
Indemnification is the organization’s commitment to cover a director’s legal costs, settlements, and judgments arising from board service. Some companies make indemnification mandatory in their bylaws, guaranteeing coverage when the director acted in good faith. Others make it permissive, leaving the decision to the current board’s discretion. Indemnification has limits under every state’s law and never covers conduct involving bad faith or improper personal benefit.
Directors and officers (D&O) insurance is the safety net that catches what exculpation and indemnification miss. Coverage pays directors directly when the company cannot or will not indemnify them, reimburses the company when it does indemnify, and, for public companies, covers the company itself for securities claims. For anyone considering board service, asking about D&O coverage before accepting the seat is basic due diligence.