• Published on

    "Rise but seldom..."

    In November 1787, George Washington offered this advice in a letter to his nephew Bushrod:
    “Rise but seldom—let this be on important matters—and then make yourself thoroughly acquainted with the subject. Never be agitated by more than a decent warmth, & offer your sentiments with modest diffidence—opinions thus given, are listened to with more attention than when delivered in a dictatorial stile. The latter, if attended to at all, although they may force conviction, is sure to convey disgust also.”
    What profound advice. Could it still be relevant in the always-on and rather selfish culture that has pervaded the twenty-first century? We live in a world infested by sound-bites in search of ears. Sadly, many offer little more than noise. The paucity of in-depth or critical thought is stark, yet we continue on—often blindly—in pursuit of change.
    If real progress is to be made to effect change, whether it be in the halls of power, boardrooms, executive suites or on the factory floor, might a 'rise but seldom' philosophy offer more hope than the prevailing sound-bite culture? On Washington's example, the answer could be 'yes'.
  • Published on

    Cybersecurity: is it time for a Goldilocks conversation?

    Cybersecurity is getting lots of airtime at present, often for all the wrong reasons. Reports of leaks, hacks, and data breaches pervade news sites on an almost daily basis it seems. Sadly, many news articles are sensationalist: but that is what sells the news, I guess.
    Many studies have been conducted to try to understand the problem—most of which seem to offer little when it comes to meaningful recommendations for directors seeking to mitigate business risk. Consequently, most studies and reports go in one ear and other the other.
    However, a recent study by the Ponemon Institute does make interesting reading (link here). The purpose of the study was to determine if boards of directors are a help or hindrance to creating a strong cybersecurity posture. Significant differences between how boards and IT security folk perceive risk (especially cybersecurity risk) were exposed. The technical people tend to talk it up (validly or otherwise), whereas directors typically consider cybersecurity as one risk amongst many others. That directors and technical people have quite different perceptions about cybersecurity is hardly a surprise. However, it does highlight an operational problem. The perception gap has the potential to see either too much or too little invested in appropriate risk mitigation measures. Either way, the impact on the overall performance of the business is likely to be significant. How might this be addressed?
    Perhaps the answer lies in a candid Goldilocks meeting, whereby directors, executives and IT security folk meet together (for as long as it takes), to discuss and reach agreement on two things:
    • Understand cybersecurity from a risk perspective
    • The nature of cybersecurity risk and how it might be addressed
    A Goldilocks meeting should have the effect of ensuring that the board is suitably informed about cybersecurity matters, and the IT security people should gain an appreciation of the balance of the risks the board needs to consider. An appropriate action plan, agreed between the parties and based on a common understanding, could ensue.
    To have the board, executives and technical people working together with an agreed purpose and outcome in mind, rather than talking past each other as is typical in many cases I have witnessed, might sound fanciful. However, it's bound to do wonders for morale and culture. Perhaps it might be the most beneficial outcome!
  • Published on

    Boardroom behaviours: What role culture?

    I've been reading back through some older Musings this week, to review (and smile at) ideas that were front-of-mind a couple of years ago. Which ones have been superceded or discredited; which has been forgotten; and, which are still topical?
    This one, on boardroom motivations and habits, appears to still be topical today—perhaps even more so than when it was written in April 2012. How so? I was party to a discussion on boardroom behaviour today and a question of culture was raised. To what extent might culture drive conduct and ultimately business performance? The results of a recent survey conducted by Grant Thornton suggest that culture is a huge factor in corporate governance and strategy. There is much evidence to suggest that good business performance is an outcome of 'good' culture (here's one piece).
    However, culture is complex. Consequently, when one of the discussants said that a senior leader at ASIC is looking for policies and procedures to support [a positive] culture in boardrooms I was bemused, to say the least. How might one successfully codify—much less 'legislate'—culture, in pursuit of good conduct and presumably good business performance? 
    A long time ago, Drucker famously said that culture eats strategy for breakfast. Might the corollary be that a well-written code of ethical conduct that is periodically discussed, agreed and pursued by directors trump any attempt to 'legislate' any particular culture into being?
    Compliance-based regimes rarely achieve much more than to incur expense, resentment and, sometimes, avoidance. That is well-known. However, while codes are by no means fool-proof they can be helpful if every director 'signs up' and willingly embraces them. My research suggests that the key lies with director behaviour and social interactions in the boardroom, not the code per se
    That said, why all boards that are serious about creating a positive culture both within the boardroom and the wider business they govern have not implemented a suitable code of conduct is beyond me. It is a matter of accountability. Perhaps boards that decline to travel this path have not realised that the fish rots from the head!
  • Published on

    Director's fees: Please sir, can we have some more?

    The results of the annual director remuneration survey are in. (Read the media release here, and press reports here and here.) Fees have climbed about four per cent in the last twelve months, slightly ahead of CPI. The survey results also indicate that director workload has increased by 41 per cent over the same period.
    A cursory analysis suggests that the workload increase is, to a large extent, a consequence of increased compliance requirements: more rules and regulations. While a 'more work, more pay' argument is eminently justifiable, is it fair? Moves to increase directors' fees as a consequence of increased compliance workload may deliver an unintended consequence: a back-to-the-future experience. Boards are likely to become more defensive and cautious, contributing relatively little to what they are there for—the pursuit of company performance.
    Rather than peg directors fees to time and compliance activity, it might be more productive to ask whether company value (however that might be expressed) is growing as a consequence of board contributions. Many leading commentators (Bob Monks, Bob Garratt, Morten Huse and Richard Leblanc, amongst others) have suggested that boards need to become more strategic, by looking to the future. Yet statutes and regulations cannot be ignored. Boards and shareholders need to wrestle with this tension. Questions of strategy, decision-making, division of labour, accountability and ethics need to be debated and resolved. Ultimately, viable resolutions are most likely to emerge from a joint commitment to the long-term purpose of the company.
    The board needs to drive company performance in pursuit of shareholder wishes, while also ensuring that statutory and regulatory requirements are appropriately satisfied. If the board demonstrably leads the company forward, and does so in accordance with both the agreed purpose of the company and relevant statutes, shareholders are unlikely to baulk at proposals to reward the contributions of directors appropriately.
  • Published on

    Internships: a vehicle for getting aspiring directors up to speed?

    The ‘profession’ of company direction seems to be beset with an interesting challenge: how can or should aspiring directors be introduced to boardrooms without compromising the quality of oversight and effectiveness of the board? A range of responses have been tried, with varying degrees of success. Might internships be a viable option? Thanks to the folk at Ethical Boardroom, I've had the honour of contributing to the debate. Click here to read to commentary, published in the Summer issue of Ethical Boardroom magazine.
    If you'd like to know more, or to engage a hearty debate, please get in touch.
  • Published on

    On the sources (and a possible remedy) of so-called "governance failure"

    The much-storied scandals at FIFA, HSBC and Toshiba have highlighted a plethora of weaknesses in the way large companies are led and run. Fingers have been pointed and blame apportioned. Management has copped a fair bit of flak, but the board has not been immune either. While the media has had a field day, finger pointing and broad statements provide little comfort to those in pursuit of long-term performance. Remedies are required.
    Reputability has studied a number of failures recently(*), in pursuit of remedies. The analysis identified nine prominent categories of weakness, the first six of which were influential in the majority of failures:
    • Board skill and NED control
    • Board risk blindness
    • Defective information to or from board
    • Leadership on ethos and culture
    • Risk from incentives
    • Risk from complexity
    • Risk glass ceiling
    • Charismatic leader
    • Poor crisis management
    When these factors are considered holistically, the stark implication is that failure appears to be associated with board weakness in at least three areas (engagement, strategy and risk). If boards are to make effective contributions, these weaknesses need to be resolved. And therein lies a challenge: a return to first principles, and a different conception of corporate governance is likely to be necessary. Will boards embrace such a change in pursuit of better business performance? Let's hope so.
    (*) The full Reputability Report, entitled Deconstructing failure—Insights for boards, is available here.