Holding the line on the right things: the board, the law, the risks worth managing and the responsibilities that come with leading.
A board cannot make every decision in a company, so it hands power down the line. The skill is handing down the power to decide without handing down the accountability for what gets decided. A delegation of authority is the document that makes that split work.
They sit around the same table and sign off the same decisions, but one group runs the company day to day, and the other is there mainly to make sure the first group is doing it well.
The moment you accept a board seat, the law stops treating you as an ordinary employee and starts treating you as a trustee of other people's money, with duties you cannot contract away and a liability that can follow you home.
A company is a legal person you invented, separate from you, able to own things, owe money, and be sued in its own name. Understanding where one entity ends and the next begins is half of what a board is actually governing.
A board sets the pay of the very people it depends on for information, advice and a quiet life, which is the whole reason the law eventually handed shareholders a vote.
A board is not a list of impressive CVs, it is a small group that has to disagree productively and decide under uncertainty, which is why the best-composed board on paper can still be the worst in the room.
A lawsuit is not the start of resolving a dispute, it is the most expensive, slowest and least controllable way to do it. Knowing the cheaper routes, and when to take them, is one of the quietly valuable things a leader can carry into the room.
Three words that decide who pays when a deal goes wrong, and the one of them, the liability cap, that quietly sets the ceiling on everything else in the contract.
A contract is not the document, it is the promise the document records, plus the law's willingness to enforce it. Knowing which parts the law actually cares about is the difference between signing with your eyes open and hoping it never goes wrong.
Most employment disputes are not won or lost on whether the manager had a good reason, they turn on whether the manager followed a fair process, classified the worker correctly, and stayed clear of a protected characteristic. Get those three right and you have handled the basics.
Two laws now sit on top of almost every product decision a leader makes: the data-protection rules that govern how you handle people's information, and the new AI rules that govern how you build with it. You don't need to be a lawyer to lead well here, but you do need to know what each one is actually asking.
Every business operates inside a web of rules it did not write and cannot ignore. The leaders who handle that well do not own the thickest policy binder, they can name the handful of rules that could actually sink them, and they have built something that catches a breach before a regulator does.
A crisis is the moment your normal processes stop coping, and the quality of your response is set long before the phone rings at 2am, in the unglamorous work of preparing for the trouble you hope never comes.
Most risk registers list threats one by one, as if they were independent. The shocks that actually hurt, a war, a heatwave, a virus, arrive tangled together, and the damage is rarely the event itself but everything it knocks over next.
A risk register only earns its place if it changes a decision, listing what could go wrong is the easy half; deciding what you will actually do about each one is where the discipline lives.
Buying insurance is the most familiar move in risk management and the most misunderstood, because it shifts the cost of a bad event to someone else, but it never shifts the responsibility for one.
A single risk number is reassuring precisely because it hides everything it left out, which is why the discipline that matters most is not the model that gives you the number, but the stress test that asks what happens when the model is wrong.
The three lines of defence is the simplest answer to a question most organisations get expensively wrong: when something goes badly wrong, whose job was it to stop it?
One of these says a company exists to make money for its owners; the other says it exists to create value for everyone it touches. The argument sounds abstract until it lands on your desk as a real trade-off, and then you need to know which rule you're playing by.
Almost no company owns its whole supply chain, but every company is answerable for it, which is why the real work is not writing a statement but knowing, and acting on, what happens three suppliers deep.
CSR stopped being about the cheque a company writes at year-end and became a question about how it earns the money in the first place. The leaders who get value from it treat community investment as strategy, not sponsorship.
The economy most companies still run on, take a material, make a product, throw it away, was never built to last; the circular economy is the attempt to redesign that loop so value keeps flowing instead of leaking out as waste.
Most ethical failures in business aren't villains twirling moustaches, they're ordinary people under pressure with no shared way to test a hard call. Frameworks give you that shared way.
A bribe is rarely a briefcase of cash. It's usually a "consultant" no one can quite describe, a gift that buys a decision, or a payment a salesperson made to hit the quarter, and under modern law, your company can be liable even if you never knew.
Leaders Loop
