Boards were built for a vertical world. Risk has gone horizontal

Corporate governance is being stress-tested, not at the margins, but at the level of its underlying architecture.

Boards were built for a vertical world. Risk has gone horizontal

TL;DR

  • The traditional corporate governance model was designed for the industrial era's hierarchical structure and slower pace of change.
  • Modern risks, such as cyber incidents, AI deployment, and geopolitical shifts, are horizontal, spreading across functions and boundaries rather than following vertical reporting lines.
  • Current adaptations to governance, like more meetings and broader expertise, reinforce the existing architecture without fundamentally addressing the misalignment with horizontal risks.
  • The cadence of governance (periodic) is mismatched with the continuous nature of many modern risks (e.g., cyber vulnerabilities, AI iteration).
  • Consequential risks increasingly lie outside the firm in interconnected systems (cloud, AI ecosystems, supply chains), which boards are not designed to oversee directly.
  • Directors face a cognitive bandwidth constraint due to the expectation of understanding diverse and rapidly evolving risks simultaneously.
  • The current governance model may be reaching its limits, suggesting a need to reconfigure oversight organization rather than just improving the existing model.