A newly appointed board member at Halden Group asks the chief audit executive to explain, in plain terms, what organisational governance actually is. Which description best captures organisational governance?
- AThe day-to-day activities through which managers deploy resources and supervise staff to deliver operational targets.
- BThe independent assessment internal audit performs to give the governing body assurance over the organisation's risk management.
- CThe combination of processes and structures put in place to inform, direct, manage, and monitor the organisation's activities towards its objectives. Correct
- DThe set of controls that line managers operate to keep individual operational process risks within their stated tolerance.
Why A is wrong: This describes the work of management rather than governance; it is tempting because managing is part of running the organisation, but governance is the wider set of processes and structures that direct and monitor that work.
Why B is wrong: This describes internal audit's assurance role, not governance itself; the two are easily confused, but internal audit evaluates governance rather than being the whole of it.
Why C is correct: This matches the recognised meaning of organisational governance, which is the processes and structures used to inform, direct, manage, and monitor the organisation so its objectives are pursued responsibly.
Why D is wrong: This describes process-level controls owned by the first line; controls sit within governance but are not its definition, so the option confuses a component with the whole.