Governance · Boards · Risk Intelligence
What Boards Need to Evidence Culture Oversight
By Nicole Vaughan · 3 July 2026
Introduction
Most boards can describe their organisation's culture. Fewer can evidence that they're actually overseeing it. That distinction matters more than it used to — culture oversight has moved from a soft, values-statement exercise to an explicit governance expectation, and "we discussed it at the away day" is no longer a credible answer to "how do you know?"
What "Evidence" Actually Means Here
Evidence, in a governance context, means something a board can point to after the fact: a defined process, a data source, a paper trail. It doesn't mean a good feeling from the last town hall, and it doesn't mean an engagement score that management summarised into three bullet points before it reached the board pack.
The UK Corporate Governance Code has for several years included an explicit expectation that boards assess and monitor culture, not simply approve a values statement and move on. Similar expectations run through governance codes and listing requirements in most major markets. The direction of travel is consistent: boards are expected to have their own line of sight into culture, not one filtered entirely through the executives whose performance that culture reflects.
Where the Evidence Gap Usually Sits
In practice, most boards receive culture information in one of two forms: an annual engagement survey summary, prepared by the people function and presented as a small number of headline scores, or anecdotal input from site visits and informal conversations. Both have the same structural problem — they're curated by management before they reach the board, and neither gives independent visibility into what employees are actually saying, in their own words, at scale.
That's not a criticism of the people function. Summarising thousands of open-ended comments into a board-ready format by hand is genuinely hard, and something has to give. The result, though, is that boards are often making culture-related governance judgements on a filtered, months-old snapshot.
Three Layers of Evidence a Board Should Be Able to Point To
- Systematic internal listening. Structured, comprehensive analysis of open-ended employee feedback — not just headline scores, but the themes and patterns underneath them, refreshed on a cadence the board actually sees.
- Independent external signal. Visibility into what employees say publicly, on anonymous review platforms, that doesn't depend on what management chooses to escalate internally.
- A defined escalation and follow-up trail. A record of what was raised, what the board asked, and what happened next — the part that turns a data point into governance.
What This Looks Like in Practice
The boards that do this well tend to treat culture intelligence as a standing agenda item with a consistent format, not a once-a-year deep dive. They see structured findings, not just scores. And critically, they have at least one source of signal that isn't filtered by the people it's reporting on — which is exactly what independent monitoring of public review data is designed to provide.
Read more on how compliance and risk functions and board chairs use structured organisational intelligence to build this kind of evidence trail.
What This Looks Like When It Goes Wrong
The pattern in most post-incident reviews is depressingly consistent: a board is shown, after the fact, that warning signs existed in employee feedback for months, sometimes years, before the issue became visible externally. Nobody suppressed the data deliberately. It simply wasn't structured, prioritised, or escalated in a way that gave the board a chance to act on it in time. The engagement survey ran on schedule. The scores were reported. The specific comments that would have told a different story never made it past the summary slide.
That's the scenario a proper evidence trail is designed to prevent — not by generating more data, but by making sure the data an organisation already collects actually reaches the people responsible for acting on it, in a form they can use, before it becomes a finding rather than a warning.
Conclusion
The bar for culture oversight has moved from "we care about this" to "here's how we know." Boards that can't answer the second question with something more specific than a survey score are exposed — not just to regulatory or investor scrutiny, but to being genuinely surprised by a culture problem they had no independent way of seeing coming.
