In the high-stakes environment of corporate governance, a "clean" handover is often viewed as the gold standard. When a senior governance lead departs, their successor is handed a pristine set of folders: updated action logs, current committee papers, and the latest management assurances. On paper, the transition is seamless. However, Glenn Oborne of Ingen Partners argues that this administrative perfection masks a dangerous systemic vulnerability.
When a control concern has lingered for nine months—subjected to repeated board challenges, broken promises, and multiple missed deadlines—it should carry the weight of its own history. Yet, in many organizations, that history is systematically stripped away during personnel transitions. The new lead inherits a single line on a spreadsheet marked "open," unaware that they are picking up a deteriorating situation that is already one missed commitment away from formal escalation. This "silent reset" allows unresolved risks to effectively restart their clock, shielding management from the accountability they have already exhausted elsewhere.
The Anatomy of a Governance Gap
The disconnect lies in the difference between "status" and "context." Traditional governance frameworks prioritize the tracking of static facts: who owns the issue, when the deadline is, and what the current status is. These logs are designed to keep the machinery of the organization moving—ensuring that meetings are scheduled and papers are circulated.
However, these logs are fundamentally incapable of capturing the "hardening" of a concern. A promise from management to remediate a control failure by the next quarter is a reasonable, good-faith assertion the first time it is made. If the same promise is made after two previous deadlines have already been missed, the context has shifted entirely. The weight of that assurance should be significantly lower, and the board’s patience should be near its breaking point.
When a successor enters the role, they lack the institutional memory of the board’s previous frustrations. They see a "pending" action and treat it as a new item, inadvertently granting management a "fresh start" that the organization cannot afford. This creates a cycle where management can perpetually reset the clock on risk remediation simply by waiting for the turnover of key governance personnel.
Chronology of a Failed Resolution
To understand the scale of the risk, consider the typical lifecycle of a high-priority compliance concern:
- The Identification Phase: A control weakness is identified by internal audit. The board is briefed, and management provides an initial timeline for remediation.
- The Initial Challenge: The committee asks probing questions. Management provides a roadmap. The concern is logged as "open."
- The First Slippage: The deadline arrives. The issue remains unresolved. Management requests an extension, citing unforeseen operational complexities. The committee, acting in good faith, agrees.
- The Deterioration: A second deadline is missed. Directors begin to express skepticism. The governance lead notes the frustration in meeting minutes, but the action log remains a binary "open/closed" status.
- The Personnel Transition: The senior governance lead departs. A successor is hired. The "hardened" context—the history of skepticism, the broken promises, and the board’s waning patience—is lost in the transition folders.
- The Reset: The successor, unaware of the deep history of failure, treats the issue as a standard item. Management is granted yet another "first" opportunity to explain the delay, resetting the pressure and delaying the inevitable escalation.
This chronology reveals that the risk is not just the control failure itself, but the degradation of the oversight mechanism meant to solve it.
The Regulatory and Strategic Perspective
The Financial Conduct Authority (FCA) in the UK has recognized that relying on "facts and figures" alone is insufficient for effective governance. Under SYSC 25.9 of its handbook, the FCA explicitly states that handover material for senior managers should include more than just a ledger of open items.
The regulator mandates that such material should identify priorities and, crucially, include "judgment and opinion." This is a significant shift in philosophy. It acknowledges that effective governance requires a transfer of wisdom, not just data. A handover must explain why a matter is a priority and provide the qualitative context—the "opinion"—of the previous lead regarding the severity of the situation.
While these provisions are specific to certain regulatory settings, the principle is universally applicable. If an organization is to remain resilient, it must treat the "story" of a risk as a vital asset. A handover that does not explain which issues are nearing the "escalation trigger" is, by definition, an incomplete handover.
The Multi-Functional Complexity
One of the greatest challenges to maintaining this context is the siloed nature of corporate functions. In a typical mid-to-large organization:
- Compliance identifies the regulatory risk.
- Legal advises on the liability.
- Risk Management maintains the rating of the risk.
- Internal Audit tests the control’s effectiveness.
- The Business Unit owns the remediation.
- Governance manages the reporting.
While each of these functions keeps "perfectly good" records, none of them acts as the sole custodian of the board’s sentiment. The board’s involvement—the specific questions asked by directors, their skepticism toward management’s narrative, and their unspoken criteria for escalation—is often buried in minutes or, worse, resides only in the minds of the people sitting in the room. When the lead governance professional leaves, that critical layer of intelligence vanishes.
Implementing the "Live Concerns Register"
To prevent the silent reset, organizations should move beyond the traditional action tracker. A "Live Concerns Register" serves as a strategic bridge between the historical record and future action. This register should not be a sprawling document; rather, it should be a concise, living narrative that tracks:
- The Origin Story: When the concern first entered the board’s radar.
- The Narrative Arc: A summary of the questions the board has already asked and the specific assurances management has provided.
- The Deadlines: A record of which commitments have been met and which have been abandoned.
- The Escalation Trigger: A clear, pre-defined event that mandates moving the issue from committee review to formal board-level escalation.
This register serves as the "institutional memory" that ensures the next person in the role doesn’t just manage the machinery, but understands the stakes. It forces the organization to acknowledge that some issues are "hardened"—they are not merely tasks to be completed, but indicators of systemic management failure.
Implications for Governance and Accountability
The implications of failing to preserve this context are severe. When a governance lead cannot identify that a, say, nine-month-old issue is in a state of terminal decline, the organization loses its ability to enforce accountability.
Management becomes emboldened when they realize that personnel turnover acts as a "get out of jail free" card. If they can wait out a governance lead, they can potentially evade the consequences of a failing control. Conversely, a robust handover process ensures that the "momentum" of accountability remains constant. The incoming lead should be able to look at the register and immediately understand that, while they are new to the desk, the issue is not new to the committee.
Conclusion: Beyond the Machinery
Governance handovers are too often evaluated by the wrong metrics. If the minutes are filed and the action logs are up to date, the handover is deemed a success. But this is a triumph of process over substance.
To protect the organization, governance professionals must broaden the definition of a "successful" transition. It is not enough to hand over the tools of the trade; one must hand over the intelligence of the role. By capturing the history of board engagement, the record of broken promises, and the clear definition of escalation triggers, organizations can ensure that a change in personnel does not result in a reset of the board’s scrutiny.
The goal of governance is to provide oversight that is consistent, persistent, and informed. If an organization allows its most pressing concerns to return to the beginning of the cycle every time a staff member moves on, it is not just losing data—it is losing the ability to govern effectively. The future of robust risk management lies in ensuring that the next chapter of a problem begins exactly where the last one left off.
