Composition and mandate
What the board reserves to itself and what it delegates.

Good governance defines who makes decisions, who challenges them, what can be delegated and how management remains accountable.
Good governance is not more documentation. It is the ability to show who decided, on what basis, and who was entitled to decide it.
Governance is often described in documents that nobody uses. The test of a framework is whether a decision taken last quarter can be traced to the person authorised to take it, the information they relied on, and the forum that reviewed it. That trace is what boards, auditors and regulators look for.
What the board reserves to itself and what it delegates.
Clear terms of reference and reporting lines.
Financial and non-financial limits that match reality.
Stated in terms management can actually apply.
A hierarchy, not a folder of documents.
Governance works as a cycle rather than a document set. Each stage produces something the next stage depends on.
The board agrees what it owns, what it delegates and the limits attached to that delegation. Without this, committees duplicate work and management escalates either too much or too little. A written schedule of reserved matters is usually the fastest improvement a board can make.
Delegated authority is expressed as concrete limits — financial thresholds, customer risk categories, product approvals, onboarding exceptions — and mapped to named roles rather than departments. Where a limit cannot be evidenced in a system or a record, it is not really a control.
Oversight depends on management information that shows exposure and control effectiveness, not just activity volumes. EGRC works on the reporting pack itself: what the board needs to see, at what frequency, and what should trigger an out-of-cycle discussion.
Independent assurance tests whether the framework operates as described, and the framework is refreshed when the business changes — a new product, licence, jurisdiction or acquisition should all trigger a governance review rather than waiting for the annual cycle.
Most appetite statements fail because they are written in language nobody can apply on a Tuesday afternoon.
EGRC translates risk appetite into concrete limits and indicators that appear in onboarding decisions, credit and product approvals, exception handling and board reporting — so appetite becomes a control rather than a paragraph in the annual report.
These four dimensions account for most of the findings EGRC raises during governance reviews.
Engagements are scoped around what the board and management actually need, from a focused delegation review to a full framework rebuild.
Speak with EGRC about board oversight, delegated authorities, risk ownership and policy architecture.