Corporate Governance Framework Design: Who Needs It and Who Does Not
Whether Corporate Governance Framework Design applies to a given business is the first thing worth settling, and it is where most of the early questions land. The questions below are the ones raised most often in practice; the full scope of the service is on the Corporate Governance Framework Design page.
What exactly is a Corporate Governance Framework, in practical terms?
It is the complete set of documents and practices — a Board Charter, committee charters, a Delegation of Authority matrix, a Related Party Transaction Policy, a Risk Management Policy, a Whistleblower Policy, and a Code of Conduct — that together define who in your company can decide what, how significant transactions are approved and disclosed, and how risk is identified and escalated to the Board. It converts abstract Companies Act and SEBI LODR obligations into documents your company actually uses to run itself.
In practice: The most common misconception we correct: governance is not the same as secretarial compliance. Filing your AOC-4 and MGT-7 on time is compliance. Having a Board that actually exercises oversight, with committees that meet and function, is governance. You can have one without the other — and investors specifically test for the second.
Does my private company need a formal governance framework if we are not listed?
It depends on your stage and thresholds. If your paid-up capital, turnover, or borrowings cross the levels prescribed under Sections 149, 177, and 178 of the Companies Act, mandatory committees and independent directors are triggered regardless of listing status. Even below those thresholds, any company planning institutional funding, an eventual IPO, or professionalising ahead of a leadership transition benefits significantly from a documented framework — investors and acquirers assess governance maturity as part of due diligence.
In practice: Companies below the statutory threshold that delay governance work entirely may have to scramble to build a credible framework in the weeks before a funding round closes. A framework built under term-sheet deadline pressure is rarely as robust as one built with time to actually operate and test it.
What triggers mandatory independent directors and an Audit Committee under the Companies Act?
Under Section 149(4) read with Rule 4 of the Companies (Appointment and Qualification of Directors) Rules, 2014, public companies crossing prescribed paid-up share capital, turnover, or aggregate outstanding loans/borrowings/debentures/deposits thresholds must appoint at least 2 independent directors. Section 177 mandates an Audit Committee for the same category of companies once thresholds are crossed. These requirements apply to public companies; private companies are not required to have independent directors or an Audit Committee under Sections 149(4) and 177, and since the Companies (Amendment) Act 2015 a private company that is a subsidiary of a public company is no longer deemed a public company for this purpose. A private company may still adopt them voluntarily.
In practice: Thresholds are defined by Rule and can be amended by the Ministry of Corporate Affairs — we verify the current applicable figures against your latest audited financials each year rather than relying on a fixed number, since threshold amounts are precisely the kind of statutory detail that changes and should not be assumed static.
Is CSR Committee formation mandatory for our company?
Section 135 applies to a company with a net worth, turnover or net profit at or above the thresholds prescribed in Section 135 in the immediately preceding financial year, and such a company must constitute a CSR Committee of the Board — except that where the CSR amount to be spent does not exceed the small-spend limit set in the Act, no committee is needed and the Board discharges its functions. If the company ceases to meet any of these thresholds for three consecutive financial years, the CSR Committee is not mandatory and the CSR provisions do not apply until the thresholds are met again.
In practice: We check CSR applicability against audited financials every year as part of the annual governance review — a company crossing the net profit threshold for the first time is often unaware the CSR Committee and 2%-of-average-profits spending obligation has just become mandatory.
What is the difference between an Independent Director and a Non-Executive Director?
A Non-Executive Director is simply a director who is not involved in day-to-day management — this could include a promoter's family member or a nominee of an investor. An Independent Director must additionally satisfy the specific independence criteria under Section 149(6) — no pecuniary relationship with the company or its promoters beyond permitted director remuneration, no relative who is or was a KMP or employee in specified periods, no material pecuniary relationship with the company's auditors or advisors, and other conditions. The Audit Committee must have a majority of independent directors; genuine independence is required for statutory Independent Director roles under the Act.
In practice: Appointing a 'friendly' non-executive director and labelling them independent on paper without checking the Section 149(6) criteria carefully is a mistake — a mislabelled independent director undermines the entire Audit Committee's compliance status and is a red flag in both statutory and investor scrutiny.
What is a Whistleblower Policy or Vigil Mechanism, and is it mandatory for us?
A Vigil Mechanism under Section 177(9) of the Companies Act is mandatory for listed companies and for companies that accept deposits from the public or have borrowed money from banks and public financial institutions in excess of prescribed limits. It provides directors and employees a channel to report genuine concerns about unethical behaviour, fraud, or violation of the company's Code of Conduct, with protection against victimisation and, in appropriate cases, direct access to the Audit Committee Chairperson.
In practice: Even companies below the mandatory threshold benefit from adopting one voluntarily — it is one of the lowest-cost, highest-signal governance documents you can put in place, and investors routinely ask whether one exists even for early-stage companies.
What is a Board Evaluation and is it mandatory for us?
Board Evaluation is a structured annual assessment of the performance of the Board as a whole, its committees, and individual directors — typically conducted through a questionnaire or facilitated discussion covering strategic oversight, risk management, and governance effectiveness. It becomes a formal requirement once independent directors are appointed under Schedule IV of the Companies Act, and is mandatory with detailed disclosure requirements for listed companies under SEBI LODR.
In practice: Even where not strictly mandatory, we recommend a lightweight annual Board evaluation process for any company with external investors on the Board — it surfaces governance friction early and demonstrates a maturity that investors specifically look for at the next funding round.
We are an NBFC / insurance intermediary / SEBI-registered entity. Does sector regulation change our governance framework?
Yes, materially. Sector regulators (RBI for NBFCs, IRDAI for insurance intermediaries, SEBI for registered entities) impose governance requirements over and above the Companies Act baseline — for NBFCs, for example, RBI prescribes board-level committees such as a Risk Management Committee according to the NBFC's category and size, rather than the market-capitalisation test that applies under the LODR Regulations — together with sector-specific disclosure obligations.
In practice: We always confirm the applicable sectoral regulator's specific governance circulars before finalising a framework for a regulated entity — a generic Companies Act/LODR framework alone is insufficient for an RBI-regulated NBFC or an IRDAI-regulated intermediary, and using one exposes the company to sector-specific regulatory action.
Can a governance framework be too heavy for a small or early-stage company?
Yes — over-engineering governance for a 5-person, pre-revenue startup wastes management time on committee meetings and approval layers the business does not yet need. PNPC scopes the framework to the company's actual stage: an early-stage company typically gets a lightweight Board Charter and a simple DoA; the full committee suite and LODR-grade policies are built only as the company approaches the thresholds or funding stage that actually require them.
In practice: We actively push back when a founder asks for a 'full SEBI-grade governance framework' at seed stage — it is not what investors expect at that stage, and it creates process overhead that slows decision-making without a corresponding risk-reduction benefit. Right-sizing the framework to the stage is itself part of good governance advice.
Where this sits in the wider engagement
Corporate Governance Framework Design rarely arrives on its own. The statutory basis and the current requirements are set out on the Corporate Governance Framework Design service page, and the related services are grouped under Corporate Law.
What PNPC does
PNPC Global has practised since 1986 across India and the UAE. On Corporate Governance Framework Design we take the work end to end — reviewing the facts, preparing and filing what is required, and dealing with the authority through to closure.