Good governance depends on the quality of decisions, the information supporting them and the ability to establish who was responsible. A board can receive many papers and still lack a clear view of material risks. A committee can meet regularly while important actions remain unresolved. Governance controls should therefore examine substance as well as formal completion.
For lenders, the regulatory perimeter matters. A bank, an NBFC and a listed entity may face different requirements, and some institutions sit within more than one framework. SEBI obligations arise from the relevant listing and securities context; they should not be applied indiscriminately to every lender.
This article explains an operating approach to board information, delegated authority, conflicts and disclosure. Exact composition, approval and reporting requirements must be taken from the applicable rules and the institution's circumstances.
Map the governance framework to the entity
Identify the legal entity, applicable RBI category, listing status, instruments listed and other relevant facts. Determine which bodies and functions have responsibilities under the applicable framework. A group governance chart should not obscure the obligations of individual regulated entities.
RBI publishes institution-specific governance directions for commercial banks and NBFCs. [3] [4] SEBI's regulations directory provides the relevant starting point for current listing requirements. [2] Read the scope and operative provisions of the applicable instrument, including amendments and commencement arrangements.
Maintain a controlled record of committee terms of reference, delegated powers and reserved matters. The record should explain who may recommend, review, approve and execute each material decision. Similar titles across entities do not necessarily imply identical authority.
Give the board information it can challenge
A decision paper should identify the issue, relevant facts, options, risks and recommendation. It should state what decision is requested and what happens if no action is taken. Length is not a substitute for clarity.
Separate established facts from assumptions and management judgement. If a forecast depends on a planned capital issuance or a vendor delivery, identify that dependency. Directors cannot meaningfully challenge a recommendation when its uncertainty is hidden inside a headline result.
The Basel corporate-governance principles emphasise effective boards and control functions. [1] A practical way to support that objective is to make papers traceable to reliable source information and to give material limitations the same visibility as favourable results.
Preserve the distinction between oversight and execution
Boards and committees oversee matters within their mandate, while management executes decisions through defined responsibilities. A paper should make that relationship clear. “Board noted” does not assign an operational owner or establish that implementation occurred.
For each decision requiring action, record the owner, expected outcome, due date and reporting route. Some actions need completion evidence; others need continuing monitoring. The action register should reflect that difference rather than treating every item as a one-time task.
Avoid using committee escalation as a substitute for management decision-making. If management has authority to resolve a routine issue, repeated escalation can delay action and crowd out strategic oversight. Equally, matters reserved for higher approval should not be implemented first and presented later as information.
Manage conflicts before the decision
Conflicts of interest can affect how a matter is presented, discussed or decided. Establish a process for identifying relevant interests and applying the appropriate safeguards under the applicable framework. The process should cover the actual decision context, not merely an annual declaration.
Record how a conflict was handled. Depending on the requirements and circumstances, this may involve restrictions on participation, additional review or a different approval route. The evidence should show the treatment followed without unnecessarily circulating sensitive personal information.
Related-party questions require careful legal and factual assessment. A common name or group association is not a complete analysis, while the absence of a familiar label does not prove independence. Maintain reliable entity relationships and obtain appropriate advice for material or uncertain cases.
Connect disclosure obligations with operational events
A listed institution needs a reliable route from a potentially relevant event to an authorised disclosure assessment. The originating team may be finance, legal, treasury, human resources, risk or a business unit. Company secretarial staff cannot assess events they never learn about.
Define notification responsibilities and escalation routes. Record when the event occurred, when the institution became aware of it, what information was available and who assessed the applicable requirement. Use the relevant SEBI rules and other obligations for the actual decision. [2]
Keep assessment, approval and publication as separate steps. A prepared announcement is not a published disclosure. Retain the approved text, actual submission or publication evidence and any subsequent correction or clarification.
A worked example: a material operational development
Suppose a hypothetical listed lender experiences a significant service disruption. Technology investigates recovery, operations manages customer impact and management receives an initial incident report. At the same time, the disclosure process needs to assess whether and how the event engages applicable obligations.
The disclosure assessment should use verified facts and identify what remains uncertain. It should not wait for every technical detail if the applicable requirement calls for earlier action. Equally, unverified speculation should not become a confident public statement.
The record connects incident updates, the authorised assessment, approved communications and actual publication. Later developments may require reassessment. This example illustrates why event capture and disclosure governance must operate alongside incident management rather than beginning only after the incident is closed.
Keep minutes concise but meaningful
Minutes should record the matters considered, material challenge, decisions and actions at an appropriate level. They do not need to reproduce every sentence spoken, but they should establish the reasoning and authority behind significant outcomes.
Avoid formulaic records that make every discussion appear identical. If members requested further evidence, challenged an assumption or deferred a decision, that should be visible. A record that states only “discussed and approved” may not explain a difficult judgement.
Control versions and approval. Supporting papers, revised recommendations and final minutes should remain linked. If a paper changes after circulation, identify which version formed the basis of the decision. This protects the institution's ability to reconstruct the actual governance process.
Build an action register that tests implementation
An action register should describe the intended outcome rather than merely repeat a meeting phrase. “Improve reporting” is difficult to close objectively. “Introduce a reconciled monthly exception report with named owners and demonstrate its first review” is more testable.
Track overdue actions, repeated extensions and partial completion. Preserve the original deadline and the reason for changes. An extension should prompt consideration of the consequences and interim arrangements, not simply reset the ageing indicator.
Require evidence proportionate to the action's significance. A management confirmation may be sufficient for a simple administrative step, while a material control change may need independent testing. The closure authority should understand which standard applies.
Review the quality of the governance information chain
Trace important board metrics back to their sources. Capital, liquidity, asset quality, complaints and operational incidents may come from different systems with different cut-off dates. A coherent pack needs consistent definitions and explicit limitations.
Look for information that is repeatedly excluded because it is difficult to measure. Unresolved data quality, untested assumptions and incomplete remediation can materially affect the interpretation of otherwise positive results. These matters should not disappear between operational reports and board summaries.
Consider whether the pack enables comparison over time. Changing definitions or colour thresholds can make trends misleading. Where the reporting basis changes, explain the effect and preserve enough history for members to understand the movement.
Distinguish group oversight from entity accountability
A group committee can coordinate risk information, but its existence does not automatically satisfy every responsibility of a regulated subsidiary. Identify which matters require consideration or approval at entity level and which can be handled through valid group arrangements.
Papers should state the entity or entities affected. A consolidated capital or liquidity view may conceal constraints on transferring resources between entities. Similarly, a group policy may need local implementation decisions or additional requirements.
Keep the evidence chain clear when the same matter moves through several bodies. Record whether each body recommended, challenged, approved or received information. This prevents a later reviewer from assuming that an endorsement at one level supplied an approval required at another.
Evaluate governance by its effect on decisions
Useful review questions include whether material concerns reach the right body, whether members receive information in time, whether conflicts are handled and whether actions are completed. Meeting counts alone do not answer these questions.
Analyse repeated deferrals and recurring findings. They may indicate weak preparation, unclear authority or insufficient implementation capacity. Address the underlying cause rather than adding another committee layer automatically.
Effective governance creates a visible chain from reliable information to authorised decision and accountable action. For banks, NBFCs and listed lenders, that chain helps keep regulatory responsibilities, business judgement and public communication aligned without confusing their distinct purposes.
PRIMARY REFERENCES
Sources & further reading
Primary-source references checked on 12 October 2026. Follow the relevant authority’s current text for applicability, amendments and commencement dates. International standards provide context and are not automatically identical to domestic requirements.