1. How to Conduct a Corporate Governance Risk Assessment
A corporate governance risk assessment should compare a company's governing documents with the way decisions are actually made. For a New York corporation, the review commonly covers the certificate of incorporation, bylaws, board and shareholder records, officer authority, ownership records, conflicts of interest, and significant transactions. The purpose is to identify legal or procedural gaps and determine which issues require documentation, formal approval, or changes to the governance framework.
Review the Governing Documents
The first step is to examine the certificate of incorporation, bylaws, shareholder agreements, voting arrangements, stock records, board resolutions, and committee materials. Under New York BCL § 701, the business of a corporation is generally managed under the direction of its board, subject to statutory exceptions and qualifying provisions in the certificate of incorporation.
The review should look for inconsistent voting thresholds, outdated delegations of authority, unclear approval procedures, and provisions that no longer reflect the ownership structure. Companies preparing for an investment, acquisition, or restructuring may incorporate this work into broader corporate due diligence.
Examine Corporate Records and Approvals
Corporate records should show how significant decisions were authorized. BCL § 624 requires New York corporations to maintain specified books and records, including complete and correct books and accounts, minutes of shareholder and board proceedings, and records containing shareholder information.
A governance review can compare those records with major actions taken by the corporation. Equity issuances, financing transactions, executive appointments, acquisitions, dividends, and related-party transactions may warrant particular attention. Incomplete records do not automatically establish liability, but they can make it more difficult to establish what was approved and how the corporation reached a decision.
Map Officer Authority and Internal Controls
A company should also identify who has authority to sign contracts, approve expenditures, appoint personnel, negotiate financing, or commit the corporation to significant obligations. BCL § 715 addresses corporate officers and allows officer authority and management duties to be established through the bylaws or, where the bylaws do not address them, by the board.
Unclear authority can create problems even when the underlying transaction makes business sense. Reviewing governance policies alongside bylaws and board resolutions can help determine whether internal procedures reflect the company's formal allocation of authority.
2. Board Duties and Conflict-of-Interest Risks
Directors of New York corporations are subject to statutory standards governing how they perform their duties. BCL § 717 requires directors to act in good faith and exercise the degree of care that an ordinarily prudent person in a similar position would use under comparable circumstances. The statute also addresses circumstances in which directors may rely on information, reports, opinions, or statements prepared by officers, employees, counsel, accountants, and other professionals.
Review How the Board Makes Decisions
A risk assessment should consider whether board procedures support informed decision-making. Meeting materials, minutes, resolutions, committee records, and documentation of professional advice may help establish what information directors considered before acting.
The analysis should not assume that complete minutes automatically protect directors or that incomplete minutes automatically establish a breach of duty. The relevant question is whether the decision-making process and director conduct satisfy the standards that apply to the particular circumstances.
Identify Interested-Director Transactions
Transactions involving a director with a financial or other interest require closer review. Under BCL § 713, a transaction is not automatically void or voidable merely because a director has an interest in it. The statute addresses disclosure and approval by disinterested directors or shareholders and provides a fairness standard in circumstances where the specified approval requirements have not been satisfied.
A governance assessment should therefore examine how the interest was disclosed, who participated in the vote, whether the required approval occurred, and whether the transaction was fair and reasonable to the corporation when that standard becomes relevant.
3. Managing Shareholder and Ownership Risks
Ownership disputes frequently expose governance weaknesses that were less visible during ordinary operations. Voting rights, transfer restrictions, buy-sell provisions, board appointment rights, information rights, and procedures for resolving deadlocks should be compared across the certificate of incorporation, bylaws, shareholder agreements, and corporate records. Conflicting provisions can become significant when control or ownership changes.
Review Voting and Transfer Provisions
Closely held corporations may rely on negotiated arrangements that allocate voting power or restrict transfers of shares. A governance assessment should determine whether those arrangements remain consistent with the corporation's governing documents and current ownership structure.
Changes in ownership, financing, succession planning, or management can make older provisions difficult to apply. Rather than assuming the same governance controls remain appropriate indefinitely, companies can review them when significant corporate events change the relationship among shareholders.
Prepare for Shareholder Record Requests
Recordkeeping also affects shareholder rights. Under BCL § 624, qualifying shareholders may inspect specified corporate records after satisfying the statute's requirements. Certain inspection rights depend on a written demand and a purpose reasonably related to the shareholder's interest as a shareholder.
A corporation should have a process for receiving, evaluating, and responding to record requests. Maintaining reliable ownership records and meeting minutes before a dispute develops is generally more effective than reconstructing the corporate history after competing shareholder positions have emerged.
4. State Corporate Law and Federal Compliance
Governance requirements for a New York corporation arise primarily from state corporate law, while federal obligations depend on the company's status and activities. A privately held operating company should not automatically be assigned the same compliance framework as a public issuer, financial institution, investment business, or government contractor.
The risk assessment should therefore identify the entity type, ownership structure, industry, securities status, and regulatory exposure before determining which federal requirements apply. This distinction prevents sector-specific federal rules from being presented as universal corporate governance duties.
When Federal Rules May Affect Governance
Public companies may face federal securities disclosure and internal-control requirements that do not apply in the same way to an ordinary private corporation. Companies in regulated industries may also face federal obligations tied to their particular activities.
The same approach should be used for internal reporting and whistleblower procedures. Instead of assuming that one federal framework governs every New York business, counsel should identify the statutes and regulations triggered by the company's actual operations.
5. When Should a Company Reassess Governance Risks?
New York corporate law does not establish a universal annual legal-review requirement for every private corporation. The need for a new assessment depends on the company's circumstances.
A governance review may be particularly useful after a financing round, significant ownership change, acquisition, leadership transition, restructuring, new shareholder agreement, or material regulatory development. Companies facing these changes may also need broader business counseling when governance issues overlap with contracts, financing, ownership, or operational decisions.
24 Dec, 2025
