Corporate governance principles are the standards that determine how a company is directed, who holds its decision-makers accountable, and how the interests of shareholders, creditors, employees, and the public are protected. Internationally, the G20/OECD Principles of Corporate Governance, revised in 2023, set out the benchmark in six chapters. In the United States, those broad principles become enforceable through federal securities laws, SEC rules, and the listing standards of the NYSE and Nasdaq. The pillars are consistent across jurisdictions: an independent board, clear fiduciary duties, transparent financial reporting, meaningful shareholder rights, and accountability for executive pay.
The International Benchmark
The G20/OECD Principles of Corporate Governance are the primary international reference for evaluating whether a country’s legal and regulatory framework supports sound corporate management. They aim to promote economic efficiency, sustainable growth, and financial stability, and they guide stock exchanges, investors, and companies in developing practices suited to their own circumstances.1Financial Stability Board. G20/OECD Principles of Corporate Governance2OECD. G20/OECD Principles of Corporate Governance 2023
The 2023 revision covers six areas:
- An effective governance framework — the legal, regulatory, and institutional foundation a country provides.
- Shareholder rights and equitable treatment, including protections for minority and foreign investors.
- The role of institutional investors, stock markets, and intermediaries in promoting good governance.
- Disclosure and transparency of material financial and non-financial information.
- Board responsibilities, composition, and accountability.
- Sustainability and resilience as elements of long-term corporate strategy.
These chapters are not binding on their own. They function as a template that individual countries adapt. In the U.S., the specifics come from federal statutes, SEC rules, and exchange listing standards.
An Independent Board
The board of directors is the central governance body, and its independence from management is what makes oversight real rather than ceremonial. NYSE and Nasdaq both require listed companies to maintain a board on which a majority of directors qualify as independent, meaning they have no material financial, familial, or business relationship with the company or its executives.3Nasdaq. Nasdaq Rulebook – The Nasdaq Stock Market Under Nasdaq’s definition, a director is independent when the board concludes no relationship exists that would interfere with the exercise of independent judgment.
Independence matters most where management has the strongest personal interest: setting executive pay, nominating new directors, and reviewing financial statements. Both exchanges require the audit, compensation, and nominating committees to be composed entirely of independent directors. These are listing conditions, not optional practices.
Chair and CEO Roles
One visible governance choice is whether the same person serves as CEO and board chair. Combining the roles gives one individual control over both the company’s operations and the body meant to oversee those operations. Separating them creates a natural check, with the chair setting the board’s agenda while the CEO runs the business.
When the roles are combined, the standard safeguard is a lead independent director. That person chairs meetings of the independent directors, approves board agendas and the information sent to directors, serves as a liaison between the independent directors and the chair, and is available for direct communication with shareholders. The lead independent director can also call meetings of the independent board members and retain outside advisors at the company’s expense. Many institutional investors treat this arrangement as a minimum requirement when the roles are not separated.
Annual Self-Evaluations
The NYSE requires listed company boards and their key committees to conduct annual self-evaluations, but leaves the process to each board’s design. Nasdaq does not impose a comparable requirement.
Fiduciary Duties
Every director owes two fundamental fiduciary duties to the company and its shareholders: the duty of care and the duty of loyalty. The duty of care requires directors to make informed decisions — reading the materials, asking questions, and investigating before voting. The duty of loyalty requires them to put the company’s interests ahead of their own and avoid self-dealing.
When directors meet those standards, the business judgment rule shields them from judicial second-guessing. Courts will not review whether a board decision was wise or profitable so long as the directors acted in good faith, on an informed basis, and without personal conflicts. Even a decision that turns out badly stands if the process behind it was sound. Without this protection, corporate risk-taking would stall, because every losing bet could trigger personal liability.
The protection disappears when a director acts in bad faith, personally benefits from a transaction, sits on both sides of a deal, or consciously disregards the corporation’s interests. In those situations, courts apply a more demanding standard and directors can face personal liability. Shareholders who believe directors breached these duties can bring derivative lawsuits on behalf of the corporation, and directors found liable risk removal, financial penalties, or both.
Most corporations indemnify directors through bylaw provisions covering legal expenses, settlements, and judgments arising from board service. That indemnification generally does not apply when a director has acted in bad faith. Directors and officers (D&O) insurance provides an additional layer of financial protection, and its availability often influences who is willing to serve on a board.
Financial Reporting and Internal Controls
Transparent financial reporting is the mechanism that lets investors, creditors, and regulators evaluate a company’s health. Public companies file annual reports on Form 10-K and quarterly reports on Form 10-Q with the SEC, following Generally Accepted Accounting Principles (GAAP). These filings address the information imbalance the Securities Exchange Act of 1934 was designed to eliminate.4Cornell Law Institute. Securities Exchange Act of 1934
Sarbanes-Oxley Certifications
The Sarbanes-Oxley Act, passed in 2002 after the Enron and WorldCom scandals, restructured accountability for corporate financial reporting. Section 302 requires the CEO and CFO to personally certify every annual and quarterly SEC filing. Their signatures attest that they have reviewed the report, that it contains no material misstatements, that the financial statements fairly present the company’s condition, and that they have evaluated the effectiveness of internal controls within 90 days of the report.5Office of the Law Revision Counsel. 15 USC 7241 – Corporate Responsibility for Financial Reports The signing officers must also disclose any significant deficiencies in internal controls and any fraud involving management to the auditors and audit committee.
Section 404 adds a second layer: management must include in the annual report an assessment of the effectiveness of internal controls over financial reporting, and the outside auditor must independently verify that assessment.6U.S. Securities and Exchange Commission. Study of the Sarbanes-Oxley Act of 2002 Section 404 Internal Control over Financial Reporting Requirements
Section 906 supplies the criminal consequences. A knowing false certification carries fines up to $1 million and up to 10 years in prison; a willful false certification raises those penalties to $5 million and up to 20 years.
The Audit Committee
The audit committee sits at the center of financial oversight. Under SEC rules, every member must be independent, and members cannot accept any consulting, advisory, or other compensatory fees from the company beyond their board compensation.7U.S. Securities and Exchange Commission. Standards Relating to Listed Company Audit Committees The committee is directly responsible for appointing, compensating, and overseeing the outside auditor. It must also establish procedures for receiving complaints about accounting or auditing matters, including anonymous submissions from employees.
Independent external auditors are prohibited from providing certain non-audit services to their audit clients, because an auditor earning consulting fees from the same company has a financial incentive to avoid conflict. The audit committee’s authority to engage its own independent counsel and advisors, funded by the company, reinforces its ability to function as a genuine check rather than a rubber stamp.
Executive Pay Accountability
Executive compensation is one of the most contested areas of corporate governance. Two federal mechanisms give shareholders and regulators tools to push back against pay that is excessive or disconnected from performance.
Say-on-Pay
The Dodd-Frank Act requires public companies to hold a non-binding shareholder vote on executive compensation at least once every three years.8Office of the Law Revision Counsel. 15 USC 78n-1 – Shareholder Approval of Executive Compensation Companies must also hold a separate vote at least once every six years to let shareholders decide whether the say-on-pay vote should occur annually, every two years, or every three years. Both votes are advisory, but a company that ignores a significant “no” vote faces pressure from institutional investors and proxy advisors.9U.S. Securities and Exchange Commission. SEC Adopts Rules for Say-on-Pay and Golden Parachute Compensation Votes Companies must also disclose golden parachute arrangements in connection with mergers and acquisitions and hold a separate advisory vote on those arrangements. Most large companies now hold annual say-on-pay votes and must explain in their proxy materials how prior vote results influenced later compensation decisions.
Clawback Policies
SEC Rule 10D-1 requires every listed company to adopt a written clawback policy. If the company is later required to restate its financial results because of a material error, it must recover any incentive-based compensation executives received in excess of what they would have earned under the corrected numbers.10eCFR. 17 CFR 240.10D-1 – Listing Standards Relating to Recovery of Erroneously Awarded Compensation The look-back covers three fiscal years from the date the restatement is triggered.
Two features make this rule aggressive. The clawback applies whether or not any individual executive was at fault for the error, and the company is prohibited from indemnifying executives against the recovery. No contract or insurance policy can shield an executive from repayment.
Shareholder Rights and Proxy Voting
Shareholders exercise their governance rights primarily through voting, and the proxy system is how most of that voting happens. Section 14(a) of the Securities Exchange Act requires companies to provide shareholders with a proxy statement containing disclosure about every matter up for a vote, including director elections, executive compensation, and proposed mergers.11U.S. Securities and Exchange Commission. Annual Meetings and Proxy Requirements
Fairness in voting means that every share within the same class carries equal weight, which protects minority and foreign investors from being shut out by controlling shareholders or management. Related-party transactions between the company and its insiders require rigorous review and must be disclosed in proxy materials so shareholders can evaluate them.
Universal Proxy Cards
Since 2022, SEC Rule 14a-19 has required contested director elections to use universal proxy cards listing all nominees from both management and dissident shareholders on a single card.12eCFR. 17 CFR 240.14a-19 – Solicitation of Proxies in Support of Director Nominees Other Than the Registrant’s Nominees Before the rule, shareholders voting by proxy had to choose one side’s entire slate. The universal card lets shareholders vote for some of management’s nominees and some of the challenger’s on the same card.
Dissident shareholders who nominate their own candidates must solicit holders of at least 67% of the voting power of shares entitled to vote. The rule also requires that all nominees appear in the same font type, style, and size, and that the card clearly state the maximum number of nominees for which a shareholder can vote.13U.S. Securities and Exchange Commission. Universal Proxy Rules for Director Elections
Cybersecurity Disclosure
SEC rules adopted in 2023 require public companies to describe in their annual reports the processes they use to identify, assess, and manage material cybersecurity risks. Companies must also disclose the board’s role in overseeing cybersecurity threats, including which committee handles that oversight and how the board stays informed.14U.S. Securities and Exchange Commission. Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure The requirements apply to all registrants regardless of size. Companies that suffer a material cybersecurity incident must report it on Form 8-K within four business days of determining the incident is material.
Climate-related disclosure is on a different path. The SEC adopted climate disclosure rules in March 2024, but as of June 2026 the Commission has proposed to rescind those rules entirely.15Federal Register. Rescission of Climate-Related Disclosure Rules The proposal is subject to public comment and a final vote, so federal climate disclosure remains unsettled. Companies with international operations may still face mandatory climate reporting under other frameworks.
Enforcement and Whistleblowers
Governance rules are only as strong as the mechanisms that enforce them. The SEC brings enforcement actions against companies and individuals who violate securities laws, and the consequences include civil penalties, disgorgement of profits, and bars from serving as officers or directors of public companies. Criminal violations, including willful false certification under Sarbanes-Oxley, are prosecuted by the Department of Justice.
The Dodd-Frank Act created the SEC’s whistleblower program. Individuals who provide original information leading to an SEC enforcement action with more than $1 million in sanctions are eligible for awards between 10% and 30% of the money collected.16U.S. Securities and Exchange Commission. Whistleblower Program The program also prohibits retaliation against whistleblowers. That combination of financial incentive and legal protection means governance failures are increasingly reported from inside the company.
Interests Beyond Shareholders
Governance frameworks increasingly recognize obligations to people other than shareholders. Creditors hold contractual rights to information and repayment under loan agreements and bond indentures. Employees have protections under labor laws and employment contracts that the company must honor, particularly during mergers, layoffs, or other structural changes. The 2023 G20/OECD framework added a chapter on sustainability and resilience, reflecting the view that a company’s long-term health depends on how it manages its relationships with all of these groups, not just its investors.1Financial Stability Board. G20/OECD Principles of Corporate Governance Sound governance is the interplay of board independence, transparent reporting, enforceable accountability, and meaningful shareholder rights working together.