From Fortune · Jane Sadowsky · · 2m
Boards are still built for a world that no longer exists
Corporate boards were designed to oversee companies, but the risks that matter now run sideways through systems nobody owns.
In brief
Corporate boards were designed to oversee companies, but the risks that matter now run sideways through systems nobody owns. Boards oversee what a company does, but the real exposure sits in what it depends on, and that is not something quarterly meetings can see. Originally reported by Fortune.
Built for a slower world
The board model came out of the industrial era: hierarchical companies, contained risks, information flowing up and oversight flowing down. That structure still runs most boardrooms.
“Governance followed that structure: information flowed up through management, and oversight flowed down from the board.”
Risk moves sideways now
A cyber incident stops being technical within hours and becomes legal, operational and reputational. AI touches product, compliance, employees and brand at once. These risks spread rather than report.
“These risks don't move neatly through reporting lines. They spread.”
Doing more is not fixing it
More meetings, longer agendas, more outside advisers. Every response adds capacity to the same scaffolding and assumes the existing model can absorb the complexity if it just works harder.
“adding more layers, more inputs and more capacity, without fundamentally changing the structure itself”
The company is the wrong unit
The biggest exposures now sit outside the firm: cloud infrastructure, AI ecosystems, supply chains, digital platforms. A retailer or hospital carries technology risk it does not control.
“Boards are no longer just overseeing what the company does. They are overseeing what the company depends on.”
Quarterly versus continuous
Cyber vulnerabilities appear overnight, AI systems shift through iteration, geopolitics moves in weeks. Boards still meet on a calendar built for scheduled strategy reviews.
“Oversight remains periodic. Risk has become continuous.”
Visibility has a ceiling
Too little information and oversight becomes symbolic. Too much and directors start managing. Meanwhile reporting is aggregated vertically, so horizontal risk arrives at the board already flattened.
“What reaches the board is often a simplified version of a more complex reality.”
Bandwidth is the real limit
Directors are asked to hold technology, AI, cyber, geopolitics and strategy in their heads at the same time, while the half-life of any given expertise keeps shrinking.
“Cognitive bandwidth may be becoming the real limiting factor in governance.”
Governance may outgrow the board
Boards are not failing, they are working inside an architecture built for a different era. Effective oversight may need to live partly outside the boardroom, closer to the systems it watches.
“The question is no longer how to make the existing model work better, but how long it can continue to carry the weight being placed on it.”
What it means
Boards oversee what a company does, but the real exposure sits in what it depends on, and that is not something quarterly meetings can see.
