Chapter 2: The Board's One Job — Oversight, Not Management
What Good Looks Like — a board-level guide to governance done well
A board has exactly one job. Make sure the company is being run well, and step in if it isn't. That's it. Strategy input, risk oversight, succession, culture — all of it is that one job, applied to a different part of the business.
Most boards don't fail because they misunderstand this. They fail because they drift off it, in one of two directions, usually without noticing.
Drifting into management's lane
The first drift shows up dressed as diligence. A board starts weighing in on which candidate to hire for a role two levels below the executive team. It re-litigates a marketing campaign in the boardroom. It asks for the detail behind a supplier contract that carries no material risk, just because a director finds it interesting.
None of this looks wrong from inside the room. It looks thorough. But a board doing the executive team's job isn't adding oversight — it's substituting its own judgement for the judgement of people who were hired, and are paid, to have better judgement on exactly that question. It also usually means something has already gone wrong upstream: either the board doesn't trust the CEO enough to have appointed them, or nobody has done the work of building that trust properly.
Abdicating oversight entirely
The second drift is quieter, and more common. A board defers. It takes management's account of a situation as the account of the situation, asks a handful of process questions, and moves on. Chapter 1 described a service that kept failing its "well-led" inspection while board meetings and paperwork carried on as normal — a board that had abdicated oversight so completely it no longer registered the gap between what it was being told and what was actually happening.
Both failures look identical from the compliance side. Attendance is fine, minutes are filed, the code is met. Only one version of that board is actually doing the job.
Where the line sits
The distinction is simpler than it feels in the room. Oversight asks whether something should be happening, and whether it's being managed properly. Management decides how it gets done.
"Should we be comfortable with this level of customer concentration risk" is oversight. "Which account manager handles the renewal call" is management. "Is our safety case for this product sound, and who signed it off" is oversight. "What the engineering team's sprint plan looks like this month" is management. The test isn't how technical or important a question sounds — plenty of oversight questions are simple, and plenty of management decisions are hard. The test is whether the board is asking "is this being handled properly," or reaching in to handle it.
Boeing is a well-documented case of what happens when that line gets missed on the abdication side. Before the two 737 MAX crashes, in 2018 and 2019, Boeing's board had no standing committee dedicated to engineering or product safety; safety-related risk moved through the same channels as everything else, filtered by the same executive team whose judgement it was meant to check. The House Transportation and Infrastructure Committee's investigation that followed found the board had not been shown the internal safety analysis for the flight-control system later linked to both crashes. Boeing's response, that same year, was to create a permanent board-level Aerospace Safety Committee with its own direct reporting line. That's what "where the line sits" looks like once a board decides it needs to see the evidence, not just hear the summary.
Where to start
None of this requires reorganising the board. It requires the habit of checking, deliberately, which side of the line a given discussion is actually on.
Before a topic gets boardroom time, ask "whether" or "how." If the real question is how something gets executed, it belongs with management, however tempting it is to weigh in. If it's whether something should be happening at all, or whether it's being managed properly, it belongs with the board.
Give your highest-risk oversight area a standing committee, not an agenda slot. Whatever would hurt the organisation most if it went wrong quietly — safety, clinical or service quality, financial controls — deserves a committee with its own charter and a direct line to the full board, not fifteen minutes inside a general update.
Set an explicit rule about who talks to whom. Directors shouldn't be directing operational staff below the executive team without going through the CEO first. It's a simple guardrail against the management-drift side.
Build in a standing question for the abdication side. Not "what does management's summary say," but "what would we need to see to know this is actually going well, and are we seeing it?"
Once a year, review which side the board actually spent its time on. If most of the year went on execution detail, that's drift into management. If most of it went on nodding through management's account of things, that's abdication. Either finding is worth acting on.
