From Ambiguity to Architecture: What a Well-Governed Small NFP Actually Looks Like

Part 2 of Governance Beyond Compliance — building accountable leadership, resilient organisations and healthy cultures. First published on LinkedIn, 29 April 2026.

What a well-governed small NFP actually looks like — and how to build it

The first question I ask when I enter a new organisation is not about the budget, the strategic plan, or the compliance calendar. It is a simpler and more revealing question.

Who is responsible for what — and can anyone show me where that is written down?

The answer tells me more about the health of an organisation’s governance than any set of board papers. Because in a well-governed organisation, the answer is immediate and unambiguous. Roles are documented. Delegations are recorded. Accountability is structural rather than personal. The organisation is legible to its own board.

In a poorly governed organisation — and in my experience, this describes the majority of small Australian NFPs — the answer is hesitant, qualified, and ultimately circular. Responsibility is assumed rather than assigned. Delegations exist in practice but not on paper. Accountability depends entirely on who is currently in the room.

The good news is that governance architecture is not complicated to build. It does not require expensive consultants, lengthy restructures, or the wholesale replacement of people and culture. It requires clarity — applied systematically, starting with the board itself, and working outward through the organisation.

Start with the board — not with management

The most common mistake I observe in small NFP governance recovery is the assumption that the problem lives in management and the solution should be directed at management. In my experience, this gets the sequence wrong.

Before any intervention in management, culture, or operations can be sustained, the board must first be able to answer four questions about itself:

• Do we have documented role boundaries — between the chair, the board as a whole, the CEO, and management — that everyone has read and agreed to?
• Do we have a delegation framework that specifies what decisions belong to the board, what decisions belong to the CEO, and what decisions require both?
• Do we receive information that is relevant, accurate, timely, and sufficient — from sources that are independent of the management line when necessary?
• Do we have a mechanism for staff voice to reach the board without being filtered through the CEO?

If the answer to any of these four questions is no — or uncertain — that is where the governance work begins. Not with a performance review of the CEO. With the board asking honest questions about its own architecture.

The role boundary document

The single most practical governance instrument in a small NFP is a role boundary document — sometimes called a governance framework or a board-management protocol — that specifies in plain terms who is responsible for what.

It does not need to be long. It does not need to use legal language. It needs to be clear, agreed, and accessible to everyone who operates within it.

At a minimum it should specify: the board’s primary responsibilities — strategy, oversight, risk, compliance, CEO accountability; the chair’s specific responsibilities — board effectiveness, information flow, stakeholder relationships; the CEO’s operational mandate — what they are empowered to decide without board approval, and what requires board sign-off; and the escalation pathway — what circumstances trigger a matter being elevated from management to board.

The delegation framework

Role boundaries tell you who is responsible. Delegations tell you who is empowered to act — and to what extent.

A delegation framework answers the questions that role boundaries leave open. The CEO is responsible for operations — but can they sign a contract without board approval? Up to what value? Can they hire and terminate staff independently? At what level?

Without documented answers to these questions, two equally dangerous things happen. Either the CEO over-reaches — making decisions that should have come to the board — or the CEO under-reaches, bringing decisions to the board that could and should have been resolved at management level, consuming board time and signalling a lack of operational confidence.

A simple delegation matrix — listing decision categories, the threshold at which board approval is required, and the relevant approval pathway — resolves this ambiguity. It takes an afternoon to draft and a board meeting to ratify.

Information flow — the board’s lifeline

The board can only govern what it can see. And in a small NFP, what the board sees is almost entirely determined by what management chooses to show it.

Building independent information flow into the governance architecture is the remedy — and it does not require the board to distrust management. It requires the board to design its oversight function so that it is not entirely dependent on management’s goodwill for its intelligence.

In practice this means: board papers that follow a standard template and include standing items that management cannot omit — staff turnover rates, complaint and incident logs, financial variance reports, compliance status; direct board access to the external auditor and company secretary without management intermediation; and a clear whistleblower pathway that allows staff to raise concerns with the board without going through the management line.

When size becomes an excuse — and why it isn’t one

One of the most consistent patterns I have observed across small NFP governance failures is the use of organisational size as justification for non-compliance. The reasoning sounds plausible: we are a small organisation, we cannot be held to the same standards as a major NFP or a listed company.

This reasoning is wrong. The obligations imposed by WorkSafe, Fair Work Australia, the ACNC, and ASIC do not scale to organisational size in the way that argument implies. Size explains resourcing constraints. It does not excuse non-compliance.

No organisation argues it is too small to pay tax. The same logic applies to governance, risk management, employment compliance, and workplace safety. When a CEO argues that a governance requirement is beyond the organisation’s capacity because of its size, the board’s first question should not be: is that true? It should be: is this argument being made in good faith?

Staff voice as a governance instrument

One of the most consistently absent elements of small NFP governance is a mechanism for staff voice to reach the board independently of management.

Staff are the organisation’s primary intelligence source on culture, morale, and operational reality. The issues most likely to generate regulatory exposure — psychosocial risk, compliance failures, conduct matters — are precisely the issues that staff are most likely to observe first and least likely to raise through formal management channels if those channels are perceived as unsafe.

A well-governed small NFP builds mechanisms — anonymous surveys, direct access to the chair or a designated board member, a genuinely independent whistleblower pathway — that allow staff voice to reach governance level without distortion.

Building the architecture — a practical sequence

For a board chair or governance leader looking to build or rebuild the governance architecture of a small NFP, I recommend the following sequence:

1. Begin with an honest assessment. Convene the board — without management present — and work through the four questions above. Be honest about what exists and what does not.
2. Draft the role boundary document. This is the board’s first governance act — defining its own responsibilities and the boundaries of its relationship with management.
3. Build the delegation matrix. Working with the CEO, identify the decision categories that matter most and define the thresholds and pathways for each. Start simple.
4. Design the information architecture. Review the current board paper template. Add the standing items that should be there but are not. Establish direct access pathways to the external auditor and company secretary.
5. Review annually. Governance architecture requires regular review to ensure it remains fit for purpose as the organisation grows and changes.

Architecture without culture is a set of documents that no one follows

Culture without architecture is goodwill that no one can rely on. The goal is both — governance structures that are embedded in a culture where people understand why they matter, feel safe to use them, and trust that the mechanisms will function as designed when they are needed most.

That culture emerges from the board’s consistent behaviour — from a chair who models transparency and accountability, from board members who ask the uncomfortable questions rather than avoiding them, and from a CEO who understands that governance architecture is not a constraint on their authority but the foundation on which their authority rests.

In every organisation where I have built governance architecture from the ground up — whether a listed company in Hong Kong, an Anglican church in Melbourne, or a not-for-profit navigating a leadership crisis — the turning point has never been the documents. It has been the moment when the people responsible for governance decided to take it seriously.

The architecture makes that decision durable. That is what a well-governed small NFP looks like. Not perfect. Not bureaucratic. But legible, accountable, and built to last.

---

Dennis Chew is a Corporate Governance specialist, Company Secretary, and Director of Operations professional with forty years of experience across NFP, faith-based, educational, and corporate organisations in Australia, Malaysia, New Zealand, and Hong Kong.

---

Previous: Part 1 — The Greatest Danger in a Small NFP Is Not Bad Intent
Next: Part 3 — Why Good Governance Protects Everyone – Including the CEO
All articles in Governance Beyond Compliance

Working through a governance challenge? Dennis is available for board and non-executive director roles, interim executive engagements and advisory conversations. Get in touch or see Governance & Leadership.