40 Board Oversight and the ESG Committee

Learning Objectives

You will be able to:

Explain what board oversight of ethics, sustainability and conduct requires beyond receiving reports.
Evaluate the options for allocating ESG and conduct oversight among board committees.
Describe the information a board needs in order to oversee these matters, and its sources.
Explain how oversight connects to remuneration, to risk and to disclosure.
Assess an organisation’s oversight arrangements and recommend a structure with the reporting to support it.

40.1 Introduction

Chapter 39 designed the code. This chapter asks who at board level is answerable for whether any of it works.

The question is not decorative. Chapter 37’s governance post-mortem asked whether the board knew, whether it should have known, whether the risk was owned by someone with authority, which committee should have seen it, whether the board had the competence to ask, and whether an independent route existed. Those six questions are answered years in advance, by how oversight is structured and what information flows (A. C. Fernando, 2019).

The subject has moved quickly. Board attention to environmental and social matters was for a long period discharged through a corporate social responsibility committee concerned with statutory spending. That committee answers a different question from the one Module V posed, and the gap between them is why many boards have restructured (Anne T. Lawrence & James Weber, 2020).

flowchart TD
    B["<b>Board</b>"] --> A["<b>Audit committee</b><br>reporting integrity,<br>controls, related party,<br>vigil mechanism"]
    B --> R["<b>Risk committee</b><br>risk framework,<br>climate and operational<br>exposure"]
    B --> N["<b>Nomination and<br>remuneration</b><br>composition, evaluation,<br>pay linkage"]
    B --> E["<b>ESG or sustainability<br>committee</b><br>strategy, targets, disclosure,<br>conduct and culture"]
    B --> C["<b>CSR committee</b><br>statutory policy,<br>projects, spend"]
    E -.->|"boundary must<br>be defined"| A
    E -.-> R
    E -.-> C
    style B fill:#ede7f6,stroke:#7E57C2
    style E fill:#e8f5e9,stroke:#388E3C
    style C fill:#eceff1,stroke:#607D8B

40.2 What Oversight Requires

Oversight is not the receipt of reports. Chapter 24 made the point about boards generally, and it applies with particular force here, because reporting on ethics and sustainability is unusually easy to make reassuring.

The Components of Real Oversight

Component	What it involves
A defined mandate	A written remit stating which matters this body is accountable for, so that nothing falls between committees
Information the executive did not curate	Data from internal audit, assurance providers, the reporting channel and, where warranted, direct contact with people below the executive
Competence to interrogate	At least one member who can tell a sound emissions figure or a sound safety statistic from an unsound one
Time proportioned to significance	Enough of it, on the agenda before the routine items rather than after
The uncomfortable questions asked	A record of what the committee challenged, sent back or required, which Chapter 24 identified as the true diagnostic
Consequence	A connection to remuneration, to appointments and to the consequences applied when standards are breached

Common Misconception: The Board Oversees Ethics by Approving the Code

Approval of a code, a policy or a target is an event. Oversight is a continuing activity, and the distinction determines whether a board discovers a problem or is informed of one after everyone else.

Three specific substitutions recur. Approval for oversight, where a board approves a policy annually and asks nothing about whether it operates. Aggregate for pattern, where a board receives the number of ethics cases and not their nature, their location, their seniority or their outcome, so that a cluster in one function is invisible. And assurance for evidence, where a board accepts a statement that controls are effective rather than asking what was tested, by whom, and what was found.

The corrective is a small number of questions asked consistently. What did we learn this quarter that we did not know last quarter? Which of the matters reported involved someone senior, and what happened? What did the reporting channel receive from the locations we would expect to hear nothing from? And what did internal audit want to look at and not look at?

40.3 Where Should It Sit

Boards allocate ESG and conduct oversight in one of four ways, and each has a defensible case and a characteristic weakness.

Option	The case for it	The weakness
The whole board	These matters are strategic and should not be delegated; every director is exposed to them	Board time is scarce and these items lose to the routine; nobody prepares in depth
The audit committee	Already has independence, assurance access, the vigil mechanism and the disclosure remit	Already the busiest committee; its financial reporting duties will crowd out sustainability
The risk committee	ESG is substantially a risk question, and climate belongs with other risks	Frames everything as downside, missing opportunity, strategy and culture
A dedicated ESG or sustainability committee	Time, focus, and a place where the subject is the agenda rather than an item on it	Creates boundary problems with the other three, and can become a place where the subject is contained rather than integrated

There is no universally correct answer, and the choice depends on the company’s exposure. What is not defensible is leaving it undefined, since the six post-mortem questions of Chapter 37 all assume that somebody was answerable.

Two allocation rules help wherever the structure lands. Reporting integrity stays with audit. Sustainability disclosure is disclosure, it carries the exposures Chapters 27 and 34 described, and the committee that oversees the integrity of financial reporting should oversee the integrity of this reporting too, whoever oversees the underlying performance. And the vigil mechanism stays with audit, because the statute places it there and because separating the channel from the committee with assurance access weakens both.

40.3.1 The CSR Committee and the ESG Committee

These answer different questions, as Chapter 29 established, and combining them causes a specific confusion.

The CSR committee is a statutory body concerned with a policy, a set of projects and a spending obligation (Government of India, 2013, 2014). Its questions are whether the policy is appropriate, whether the projects are sound, whether the money was spent and accounted for, and what was achieved.

An ESG or sustainability committee is concerned with how the company operates: emissions, water, safety, labour and human rights in operations and value chain, product integrity, conduct, and the disclosure of all of it. Its questions reach the business rather than the philanthropy.

A board that gives both agendas to one committee will find that the CSR items, which have deadlines and a statutory report, consistently displace the ESG items, which have neither. Where the two must share a committee for reasons of board size, the agenda should be split with the operating items taken first.

40.4 The Information a Board Needs

Oversight fails most often through information rather than through structure. Boards receive volume and not evidence.

A Quarterly Oversight Pack

Item	What it should contain	Why
Safety	Injury and near-miss rates on the whole workforce including contract, by site, with the three most serious incidents described	Chapter 31 showed how a permanent-employee denominator conceals exposure
Environmental	Performance against targets, by site, with exceedances, notices and consent conditions at risk	Site-level data, since a group figure conceals the problem location
Conduct	Reports received by category, location and seniority; outcomes; time to resolution; matters involving anyone senior; retaliation allegations	Aggregates conceal patterns, which is the point of collecting them
Value chain	Supplier assessments completed against plan, findings by category, and what happened to suppliers that failed	The place Chapters 30 and 35 both located the real exposure
Disclosure	What will be said publicly next, on what evidence, and what has changed since last time	Connects oversight to the exposure in Chapters 27 and 34
Assurance	What internal audit and any external assurer examined, what they found, and what they wanted to examine and did not	Chapter 26’s private questions in written form
Emerging	What the executive is worried about that is not yet a number	The only item that reaches an incubating problem

Practitioner Insight: Three Sources That Are Not the Executive

A pack prepared entirely by management tells a board what management understands and what management wants it to understand, and the two are not separable from inside. Three additional sources cost little.

Site visits with unstructured time. A director who visits a plant, and spends thirty minutes without the plant head present, learns things no pack contains. What matters is the unstructured half hour, not the tour.

The reporting channel, read directly. The committee chair should see the actual reports for a period, not a summary. The language people use when they report a concern carries information that categorisation removes.

Assurance providers, seen alone. Chapter 26 set out the questions. The same discipline applies to any external assurer of sustainability data, and the question is the same: what did you propose that management resisted, and how was it resolved?

A board that has none of these is dependent on a single source for its view of the company, which is the condition Chapter 37’s post-mortem identifies after the event.

40.5 Connecting Oversight to Consequence

Oversight without consequence is observation. Three connections make it operative.

Remuneration. Chapter 26 set out the principles for pay design. Where safety, conduct or environmental performance forms part of executive reward, it must be a meaningful proportion, measured on outcomes that cannot be managed at year end, and capable of reducing the award rather than only adding to it. A safety modifier that has never reduced anyone’s bonus is not a modifier.

Appointments. The nomination committee’s skills matrix should reflect the exposures the company actually carries, which for a food, chemical, mining or infrastructure business means somebody who can read a safety or environmental report properly. Chapter 35’s case turned in part on a board where nobody had that background.

Enforcement. The consequence framework of Chapter 39 belongs to the board’s oversight, particularly its consistency at senior levels, since that is what determines what everyone believes.

40.6 Case Studies

40.6.1 Case Study 1: The Committee That Never Saw It

Return to Suvarna Foods. Before the crisis, the board had an audit committee, a nomination and remuneration committee, a stakeholders relationship committee and a CSR committee. Product safety was not in any committee’s written remit. The risk register carried one entry for product quality, rated medium, owned by the head of quality, who reported to the plant operations director. The board received a quarterly operations report containing production volumes, yield and cost per tonne. No director had a food industry background.

Discussion questions

Answer Chapter 37’s six post-mortem questions on these facts, and identify which failure was structural and which was informational.
Where should product safety oversight have sat in this company, and what would that committee have needed to receive?
The risk was owned by the head of quality. Apply the ownership and authority test and say what was wrong with that allocation.

40.6.2 Case Study 2: The Two Agendas

The following situation is constructed rather than reported.

A company combines CSR and sustainability in one committee meeting three times a year for ninety minutes. Its standing agenda begins with the CSR spending position, project approvals and the statutory report, which occupy roughly seventy minutes. Sustainability items appear last. Over two years, the committee has approved eleven CSR projects and has never completed a discussion of the company’s emissions target, water position or supplier assessment programme, each of which has been carried forward.

Discussion questions

Explain the mechanism producing this outcome, and why it would occur even with committed members.
Recommend a structure, considering both a split committee and a split agenda, and state the trade-offs.
What should the board look at to determine whether the change worked?

40.6.3 Case Study 3: The Pack That Reassured

The following situation is constructed rather than reported.

A board’s quarterly sustainability pack runs to sixty pages. It reports group-level injury frequency on permanent employees, showing improvement; group water withdrawal, showing a small increase attributed to production growth; the number of ethics cases received, with no breakdown; a statement that all suppliers have been assessed; and a summary of awards received. There are no site-level figures, no description of any individual incident, no mention of anything the executive is worried about, and no report from internal audit.

Discussion questions

Apply the three substitutions from the misconception callout. Which is present, and where?
Rewrite the pack’s contents page against the seven-item quarterly pack in this chapter, and state what each change would reveal.
A director asks for site-level water data and is told it would be onerous to produce. Evaluate that answer.

40.7 Applying the Chapter

Exercise: Designing the Oversight Structure

Return to Suvarna Foods after the crisis. The board has nine directors: the promoter managing director, two other executives, and six non-executives of whom four are independent. Two independent directors are chartered accountants, one is a retired banker, one is a marketing professional. The company has audit, nomination and remuneration, stakeholders relationship and CSR committees. It operates three food plants, sources agricultural raw material from farms and traders, exports to twelve countries, and is a listed entity with BRSR obligations.

Working in a group, design the oversight structure. CO-6 requires evaluation of a corporate episode and recommendation of governance, ethical, compliance and ESG improvements, so the design must be traceable to the failures of Chapters 35 to 39.

Define what must be overseen. List every matter this company’s board must be answerable for across product safety, environment, labour and human rights in operations and value chain, conduct, and sustainability disclosure. Be specific to this business.
Allocate. Assign each matter to a committee, choosing among the four options in this chapter and applying the two allocation rules. Write the remit of any new committee in full, and state what you have removed from existing committees’ remits.
Close the boundaries. Identify every matter that could fall between two committees under your structure and state how the remits prevent it.
Resolve CSR and ESG. Decide whether to separate the committees or the agendas, justify the choice against this company’s board size, and specify the standing agenda order.
Design the quarterly pack. Using the seven-item structure, specify exactly what this company’s pack must contain, with the denominator, the level of disaggregation and the source for each item. Identify which items management currently cannot produce.
Design the non-executive sources. Specify the site visit protocol, the arrangement for the committee chair to read reporting channel material directly, and the assurance provider sessions, including frequency and who attends.
Assess board competence. Using Chapter 24’s skills matrix, identify what this board lacks, and recommend the appointment or appointments required, stating the specific competence sought.
Connect to consequence. Recommend how product safety and conduct enter executive remuneration, on what measures, with what proportion and what ability to reduce awards. Name the committee that decides.
Specify the evidence of effectiveness. For each element of your design, state what you would look at in twelve months to know whether it worked, and what would tell you it had become a formality.

Present a committee structure with full remits, a boundary map, the quarterly pack specification, and a two-page implementation note to the board.

40.8 Summary

Chapter Summary

Board oversight of ethics, sustainability and conduct is answered years in advance by how oversight is structured and what information flows, which is what Chapter 37’s six post-mortem questions actually test (A. C. Fernando, 2019). Attention discharged through a CSR committee concerned with statutory spending answers a different question from the one Module V posed, which is why many boards have restructured (Anne T. Lawrence & James Weber, 2020).

Real oversight requires a written mandate so nothing falls between committees, information the executive did not curate, at least one member competent to interrogate the figures, time proportioned to significance, a record of what was challenged or sent back, and a connection to consequence. Three substitutions recur: approval of a policy standing in for oversight of whether it operates, aggregates standing in for patterns so that a cluster in one function is invisible, and assurance statements standing in for evidence of what was tested and found.

Oversight may sit with the whole board, the audit committee, the risk committee or a dedicated ESG committee, each with a defensible case and a characteristic weakness, and the choice depends on exposure. What is not defensible is leaving it undefined. Two rules hold regardless: reporting integrity stays with audit, because sustainability disclosure is disclosure and carries the exposures of Chapters 27 and 34, and the vigil mechanism stays with audit, because the statute places it there. CSR and ESG committees answer different questions, and where they share a committee the CSR items, which carry deadlines and a statutory report, will displace items that carry neither unless the agenda is ordered against it.

Oversight fails most often through information. A quarterly pack should carry safety on the whole workforce by site with serious incidents described, environmental performance by site with exceedances and consent conditions at risk, conduct reports by category, location, seniority and outcome including retaliation allegations, value chain assessment against plan with consequences for failures, forthcoming disclosure and its evidence, what assurance examined and what it wanted to examine and did not, and what the executive is worried about that is not yet a number. Three sources that are not the executive cost little and change what a board knows: site visits with unstructured time, reporting channel material read directly by the committee chair, and assurance providers seen alone.

Oversight without consequence is observation. It becomes operative through remuneration that can reduce an award rather than only add to it, through appointments reflecting the exposures the company actually carries, and through consistent enforcement at senior levels.

Key Terms

Oversight against approval · Defined mandate · Uncurated information · Competence to interrogate · Record of challenge · Approval for oversight · Aggregate for pattern · Assurance for evidence · Whole board option · Audit committee option · Risk committee option · Dedicated ESG committee · Reporting integrity stays with audit · Vigil mechanism stays with audit · CSR against ESG agendas · Agenda displacement · Quarterly oversight pack · Whole-workforce denominator · Site-level disaggregation · Conduct reports by seniority · Retaliation allegations · The emerging item · Site visits with unstructured time · Reading the channel directly · Assurance providers seen alone · Remuneration linkage · A modifier that never reduces · Skills matrix against exposure

Summary

Concept	Description
What Oversight Requires
Oversight against approval	The distinction between a continuing activity and an event on the annual calendar
Defined mandate	A written remit stating what a body is accountable for, so nothing falls between committees
Uncurated information	Information reaching the board from sources other than the executive presenting it
Competence to interrogate	At least one member able to distinguish a sound safety or emissions figure from an unsound one
Time proportioned to significance	Enough agenda time, placed before routine items rather than after them
Record of challenge	The record of what a committee challenged, sent back or required, which is the true diagnostic
Connection to consequence	The link to remuneration, appointments and enforcement without which oversight is observation
The Three Substitutions
Approval for oversight	The first substitution: approving a policy and never asking whether it operates
Aggregate for pattern	The second: receiving numbers of cases without nature, location, seniority or outcome
Assurance for evidence	The third: accepting that controls are effective without asking what was tested and found
The four questions	What was learned this quarter, which matters involved someone senior, what came from quiet locations, what audit did not look at
Where It Should Sit
Whole board option	Allocation to the full board, strategic but crowded out by routine items
Audit committee option	Allocation to the committee with independence, assurance access and the disclosure remit, already the busiest
Risk committee option	Allocation framing the subject as downside, missing opportunity, strategy and culture
Dedicated ESG committee	A body where the subject is the agenda, at the cost of boundary problems and possible containment
Reporting integrity stays with audit	The rule that sustainability disclosure is disclosure and belongs with reporting integrity
Vigil mechanism stays with audit	The rule following the statute and preserving the link to assurance access
CSR committee	The statutory body concerned with policy, projects and spending obligation
ESG committee	The body concerned with how the company operates and what it discloses about it
Agenda displacement	The mechanism by which items with statutory deadlines displace items without them
The Information
Quarterly oversight pack	The seven-item structure that carries evidence rather than volume
Whole-workforce denominator	The safety basis including contract workers, without which exposure is concealed
Site-level disaggregation	Reporting by site, since a group figure hides the location where the problem is
Conduct reports by seniority	The breakdown that makes a cluster in one function or level visible
Retaliation allegations	The category whose presence or absence says most about whether the channel is safe
Value chain against plan	Supplier assessments completed against plan, with what happened to those that failed
The emerging item	The only pack item capable of reaching a problem that is still incubating
Sources Beyond Management
Site visits with unstructured time	The thirty minutes without the plant head, which is what the visit is actually for
Reading the channel directly	The committee chair reading actual reports, since categorisation removes the information in the language
Assurance providers seen alone	The private session applying Chapter 26's questions to any external assurer
Consequence
Remuneration linkage	Performance entering executive reward on outcomes that cannot be managed at year end
A modifier that never reduces	The measure that is not a modifier, because it has never reduced anyone's award