What Is Corporate Governance and Why It Matters in SA

Corporate governance is the system of rules, relationships and controls by which a company is directed and controlled to balance stakeholder interests and ensure accountability. In South Africa, that system now extends well beyond listed-company boardrooms, with King V effective for financial years beginning on or after 1 January 2026.

A familiar problem makes the point. Your business needs to pay an overseas supplier, but nobody can say with confidence who has authority to approve the transaction. The finance manager prepared it, the owner is travelling, the operations director says the invoice is urgent, and the bank platform shows several users with overlapping access. The payment might still be legitimate, but the company lacks a reliable way to prove who checked it, who approved it and whether the payment matched the agreed purpose.

That is a governance problem, not merely an administrative inconvenience. Corporate governance gives the company a repeatable way to make decisions, control risk, protect stakeholder interests and demonstrate accountability. It applies to family-owned businesses, exporters, professional services firms and SMEs, not only to large organisations with formal boards.

Introduction to Corporate Governance for South African Businesses

For a South African SME handling foreign suppliers, export receipts or international contractors, governance appears in ordinary moments. It determines whether one person can create and release a payment, whether a director's personal interest is recorded, whether financial information reaches decision-makers in time and whether the company can explain a disputed transaction months later.

At its simplest, corporate governance is how authority is organised and controlled. It answers practical questions:

• Who decides: Which person or body has authority over strategy, spending, hiring and risk?
• Who executes: Which managers and employees carry out the decision?
• Who checks: Who reviews the information, challenges assumptions and monitors outcomes?
• Who is accountable: Who must explain the decision if something goes wrong?

Governance is different from management. Management runs the business day to day. Governance sets the boundaries within which management operates and checks whether those boundaries are working. It's also broader than compliance. Compliance asks whether the company followed a particular rule. Governance asks whether the company has a dependable system for making responsible decisions and proving that it did so.

South Africa's context makes this especially important. The King IV Report, published on 1 November 2016, became effective for financial years beginning on or after 1 April 2017, replacing King III in full and establishing an outcomes-based approach built around ethical leadership, good performance, effective control and legitimacy, as outlined in Deloitte's overview of King IV.

Private businesses may not face every listed-company requirement, but lenders, major suppliers and international counterparties still want evidence of disciplined decision-making. A useful overview of how responsibilities can be arranged is this corporate governance structures guide.

This guide builds from the definition to the operating details. By the end, an owner or CFO should be able to identify unclear authority, separate oversight from execution and design controls that make cross-border payments easier to trust.

What Corporate Governance Really Means in Practice

Think of a company as a sporting team. The rulebook explains how the game works, the referee checks that the rules are applied fairly, and the players make decisions and perform under that structure. A team without rules may move quickly, but it can't resolve disputes consistently. A team without refereeing may let conflicts of interest or careless conduct go unchallenged.

In a company, the rulebook includes the constitution, policies, delegated authority schedule, committee terms of reference and approval procedures. The referees include the board, independent directors, audit or risk committees, internal reviewers and external auditors. The players include directors, executives, finance teams and other employees who make and implement decisions.

The formal idea is broader than shareholder control. A company must consider how its decisions affect shareholders, employees, customers, suppliers, lenders, regulators and communities. Balancing these interests doesn't mean every stakeholder gets an identical outcome. It means decision-makers should understand the relevant interests, act within their authority and be able to explain the basis for important choices.

Core definition: Corporate governance is the system through which an organisation is directed, controlled and held accountable.

Governance, management and compliance

These terms often blur together, but they serve different purposes:

• Governance: Sets direction, authority, oversight and accountability.
• Management: Converts strategy into operations, budgets, sales and delivery.
• Compliance: Confirms that the organisation meets applicable legal, regulatory and internal requirements.
• Internal control: Creates checks that reduce the chance of error, fraud, unauthorised activity or misleading reporting.

Suppose a CFO introduces a second approval for payments above an internally defined threshold. Management operates the process. The control reduces risk. Governance decides who may approve, how exceptions are handled and how the board receives evidence that the process works.

This distinction matters because a company can have policies without effective governance. A policy sitting in a shared folder doesn't control a transaction unless people understand it, systems enforce it and someone reviews exceptions. Governance becomes real when the company's rules shape behaviour and produce an audit trail.

For a concise visual explanation of governance principles and corporate decision-making, the following video provides useful background:

Core Principles and Frameworks That Shape Good Governance

Good governance starts with principles, but principles alone won't stop an incorrect payment or an unreliable report. They must flow into decisions, policies, controls and evidence.

The principles behind the system

Accountability means a named person or body owns the decision. “Finance approved it” isn't enough. A sound process identifies the responsible role and preserves the supporting evidence.

Transparency means relevant information is available to the people who need it. For an SME, that might include a current cash position, outstanding foreign-currency exposure, related-party transactions and exceptions to approval rules.

Fairness requires consistent treatment and a process for managing conflicts. A director who owns a supplier should not influence the supplier's appointment or payment.

Responsibility connects authority with consequences. Leaders should consider the effects of decisions on the company, its stakeholders and its ability to meet obligations.

Independence introduces challenge. The person reviewing a decision should have enough distance from the original transaction to question it objectively.

Sustainability asks whether the business can create value without undermining its future resilience. That includes financial durability, responsible conduct, information security and the ability to respond to changing risks.

From principles to evidence

A framework turns these ideas into an operating sequence:

1. Principle: The company commits to accountability.
2. Policy: The board or owners define who may approve which decisions.
3. Control: The payment system requires the right approval and prevents unauthorised release.
4. Evidence: The company retains the invoice, approval record, user identity and decision date.
5. Reporting: Management reports exceptions and material risks to the appropriate oversight body.

This is why outcomes-based governance is more useful than box-ticking. A company shouldn't ask only whether it has a payment policy. It should ask whether the policy reduces ambiguity, prevents one-person control and produces reliable evidence.

King IV placed ethical leadership, good performance, effective control and legitimacy at the centre of the South African governance approach, according to Deloitte's King IV analysis. The practical lesson for an SME is simple. A framework should help people make better decisions, not create paperwork disconnected from the way money and information move through the business.

Who Does What Inside a Well Governed Company

The most common governance weakness in a growing business is not always bad intent. It's unclear ownership. The founder approves strategy, the CFO controls payments, a director negotiates with a supplier and an administrator uploads the transaction, but nobody has defined where oversight ends and execution begins.

A board, where one exists, should focus on direction and oversight. It approves strategy, monitors material risk, appoints and evaluates senior executives, oversees financial reporting and challenges management's assumptions. It shouldn't become a second operations team.

Executives run the company. The CEO coordinates execution and performance. The CFO should maintain reliable financial information, oversee financial controls, explain cash and risk positions, and ensure that reporting gives decision-makers a usable picture of the business. Neither role should depend on informal authority that exists only because everyone knows the founder's preferences.

A well designed structure also uses segregation of duties. One person may prepare a supplier payment, another may approve it, and a third may reconcile the bank record. In a small company, complete separation may be difficult, but the risk should be acknowledged and offset with compensating review.

Shareholders or owners provide capital and retain important rights, but they shouldn't bypass the company's agreed decision structure. Employees need clear escalation routes. Auditors test information and controls within their mandate. Regulators and lenders rely on disclosures and evidence that the company can support.

South African listed-firm research reinforces the importance of structure rather than board presence alone. A study of 90 JSE-listed companies over 2012 to 2022 reported an average board size of 11 directors, with 61% independent directors, and found positive, significant relationships between board independence, audit committee meeting frequency and several disclosure models, as reported by Accounting Academy's discussion of the King V research. An SME may not replicate that structure, but it can apply the principle by assigning independent review and holding disciplined meetings.

Corporate Governance in South Africa From King IV to King V

King V changes the question governance must answer. King IV asked whether governance produced ethical leadership, good performance, effective control and legitimacy. King V places greater weight on whether those outcomes can be reconstructed from reliable records. For an SME, that means showing how an approval was made, who reviewed a payment, what conflict was disclosed and how an issue was escalated.

King IV's outcomes-based approach remains useful because it moves governance beyond a completed checklist. A business can apply the same test to an international payment or a new bank account: was the decision properly authorised, supported by appropriate information and recorded well enough for another person to review it?

King V and the wider governance perimeter

King V became effective for financial years beginning on or after 1 January 2026. It applies broadly across South African organisations, including listed and unlisted entities, state-owned enterprises, municipalities, non-profit organisations, retirement funds and SMEs, according to the Institute of Company Secretaries of India's summary of King V.

For finance teams, the change is operational. Governance evidence should be structured, repeatable and auditable. Useful records include board packs, delegated authority matrices, disclosure controls, conflict registers, decision records and escalation logs. “The owner checks everything” may work in a small operation, but it becomes difficult to test once the business adds staff, bank accounts, currencies and counterparties.

South Africa's market structure explains why governance must cover more than listed-company formalities. OECD material records that the number of listed companies fell from over 350 in 2018 to 280 in 2024, while 124 of those companies were dual-listed. Those figures point to a concentrated market in which ownership, reporting and cross-border obligations need clear boundaries. The OECD South Africa case study also records that shareholder meetings used virtual, hybrid and in-person formats. Digital participation raises the standard for timely notices, accurate attendance records and controlled disclosure of meeting materials.

The 2026 JSE simplified Listings Requirements add practical expectations, including fit-and-proper checks for director nominations, publication of a board diversity policy on the company website and expanded director declarations, as outlined in Chambers' South Africa corporate governance trends.

Changes to the Companies Amendment Act also bring governance closer to daily accountability. Public and state-owned companies face more detailed remuneration disclosures, named director and prescribed officer pay disclosures, and ordinary-resolution approval of remuneration policies for audited financial statements, according to Clyde & Co's analysis of the remuneration disclosure changes.

A private SME may not fall under every listed-company rule. Its banks and international partners may still ask who owns each decision, how directors are vetted and whether payment and disclosure records can support the company's position. That is the practical link between King V and everyday control.

Benefits of Strong Governance and Risks of Getting It Wrong

Strong governance makes a business easier to understand and easier to trust. A lender can assess a company more confidently when its financial information has clear ownership, its approval rules are documented and its directors disclose relevant interests. A supplier is more comfortable extending terms when the customer can explain how invoices are checked and payments are released.

The benefits are practical:

• Better decision quality: Defined authority makes it easier to challenge weak assumptions before money is committed.
• Stronger payment control: Separate preparation, approval and reconciliation reduce the chance that one error or unauthorised instruction passes unnoticed.
• More reliable reporting: Consistent data and review create a clearer basis for cash planning and stakeholder communication.
• Lower dispute risk: A retained decision trail can resolve questions about who approved an action and what information they considered.
• Improved funding readiness: Lenders and institutional counterparties can distinguish an organised operator from a business dependent on informal assurances.

Weak governance carries direct costs. The Auditor-General's reported 2024-25 results show that only 151 of 417 auditees achieved clean audits, meaning 266 did not. The same reporting recorded 58% of auditees with material findings and irregular expenditure of R42.58 billion, while the clean-audit group controlled only 12% of the expenditure budget, as reported in coverage of the Auditor-General's findings.

Those figures concern public entities, not a private SME's own results. They still illustrate the consequences of unclear controls at scale. For an exporter, the equivalent risks may appear as an incorrect beneficiary, an unauthorised currency conversion, a duplicated invoice, an undisclosed related-party transaction or a payment that nobody can reconstruct.

Governance isn't paperwork added after the business is built. It is the mechanism that lets the business grow without relying on memory and personal trust alone.

The strongest case for governance is therefore not regulatory fear. It's performance. A company that knows who decides, who checks and what evidence must survive can act quickly without confusing speed with control.

Practical Governance Best Practices for SMEs and CFOs

An SME doesn't need a large bureaucracy to build credible governance. It needs a small number of controls that match its risks and operate consistently.

Start with a one-page authority map. Name who approves supplier onboarding, payment creation, payment release, new borrowing, foreign exchange exposure, hiring and related-party transactions. Include a substitute approver and an escalation route for urgent exceptions.

Then establish a short monthly governance pack. It should show cash, material commitments, overdue receivables, foreign-currency exposures, unusual transactions, control exceptions and decisions requiring owner or board attention. The pack should be circulated before the meeting, discussed, approved and stored with the minutes.

For cross-border payments, use these controls as a baseline:

1. Separate roles: Keep payment preparation, approval and reconciliation with different users where practical.
2. Use multi-user approval: Require a second authorised person for material or unusual transactions.
3. Record the reason: Attach the invoice, contract, beneficiary details and business purpose to the payment record.
4. Review access: Remove former employees promptly and check whether current permissions still match each person's role.
5. Test exceptions: Review urgent payments, manual overrides, changed beneficiary details and transactions outside normal patterns.
6. Reconcile independently: Match the payment record to the bank statement and accounting system.

King V also brings governance attention to areas such as artificial intelligence, whistleblowing, sustainability, responsible remuneration, board accountability and information governance, according to the King V summary from ICSI. An SME can respond proportionately by recording where AI is used, restricting sensitive data access, providing a confidential reporting route and assigning a person to monitor material information risks.

A practical 90-day implementation plan looks like this:

• Days 1 to 30: Map decision rights, list high-risk payments and remove unnecessary access.
• Days 31 to 60: Approve policies, introduce dual approvals and standardise board or owner reporting.
• Days 61 to 90: Test the controls, document exceptions and present the evidence to lenders, auditors or directors.

Zaro provides multi-user access, customisable permissions, transaction approval rights and downloadable payment records showing who authorised a transaction and when. For an SME, that kind of platform can support the governance controls already defined in its authority map, rather than replacing the responsibility to design and monitor those controls.

---

Zaro helps South African businesses manage cross-border payments with multi-user permissions, approval workflows and transaction records that support clear accountability. Visit Zaro to see how its payment platform can help your finance team build a more transparent, auditable operating process.