Guarding the Mission Through Nonprofit Governance and Internal Controls
A resource on fiduciary duties, governance best practices, and financial oversight.
Governance By Lisa Roberts
Serving on a nonprofit board is a profound legal, moral, and financial responsibility, not a passive honorary role. When governance fails, the consequences are severe. Staff go unpaid, donor trust is shattered, and vital community resources close their doors. High-profile collapses, such as Casa Ruby and the Wounded Warrior Project, show that board members can face personal liability and public scandal when they fail to provide active oversight.
To protect your nonprofit, directors must understand their core fiduciary duties, avoid common governance mistakes, and implement rigorous internal controls.
1. The Three Fiduciary Duties
Every nonprofit board member is a legal fiduciary bound by three core duties.
The Duty of Care. Board members must act in good faith with the care of an ordinarily prudent person under similar circumstances. This requires active participation, including attending meetings regularly, reviewing financial statements, and asking probing questions. Rubber-stamping decisions without review violates this duty.
The Duty of Loyalty. Directors must place the nonprofit's interests above their own. Self-dealing transactions must be fully disclosed to disinterested board members who must carefully review, authorize, and document that the arrangement is fair, reasonable, and in the organization's best interest.
The Duty of Obedience. Directors must ensure the nonprofit complies with all federal, state, and local laws, while adhering strictly to its bylaws and mission. This includes protecting tax-exempt status by observing federal rules on private benefit and lobbying.
2. Top Governance Mistakes
An effective board must provide high-level strategic oversight and financial direction without crossing the line into micromanaging the staff. Many boards fall into several common governance traps.
Treating the board as a rubber stamp. Simply approving whatever the executive director recommends without open discussion leads to groupthink and compromises decision quality.
Outdated or generic bylaws. Copying templates from the internet or failing to update bylaws as the nonprofit grows creates severe compliance vulnerabilities.
Failing to manage conflicts. Having a written conflict policy is useless if it is not actively enforced. Disinterested directors must explore alternative vendors before transacting with an insider.
Ceding unchecked control to founders. While founders bring immense passion, they serve at the pleasure of the board. Letting a chief executive control financial approvals and agendas without checks eliminates vital governance boundaries.
Lack of strategic and succession planning. Boards must maintain an annually updated strategic plan and a leadership succession plan to prevent operational crises during executive transitions.
Homogenous board recruitment. Recruiting exclusively from personal circles leads to narrow viewpoints. Boards should use a talent matrix to systematically recruit candidates with diverse legal, financial, and mission-related skills.
3. The Shield of Internal Controls
Nonprofits are highly vulnerable targets for fraud. Mission-driven cultures often relegate financial controls to the background, and organizations frequently operate with limited staff, volunteers who lack accounting knowledge, and high volumes of cash and check donations. Defensive internal controls are essential to prevent the misuse or misappropriation of funds.
Every nonprofit should implement these five tactical internal controls.
Segregation of financial duties. Never let one person manage all parts of a financial transaction. The person depositing funds must not maintain the bookkeeping. Require multiple signatures on large checks, and separate check writing from check signing.
Active board oversight. At least one member of your board should have a professional business or financial background. This individual must regularly review bank statements, reconciliations, and financial reports.
Mandate a strict paper trail. Require physical or digital receipts for every supply purchase, travel expense, or petty cash expenditure. Outside contractors must provide detailed invoices before any payment is approved.
Leverage fraud prevention technology. Enable real-time credit card text or email alerts so managers can spot unauthorized charges. Establish positive pay procedures with your bank, where the nonprofit provides advance verification of authorized checks to prevent forgery.
Add an element of unpredictability. Predictable routines are an embezzler's best friend. Implement surprise financial reviews, cross-train team members on financial tasks, and require employees to use their accrued vacation time.
Active Governance is Required
When a nonprofit's board operates as a disengaged rubber stamp, the organization is a single crisis away from ruin. Proactive oversight, strategic planning, rigorous adherence to fiduciary duties, and robust internal controls are the life support systems that keep your mission alive. By active, disciplined governance, board members ensure that public resources are maximized, donor trust is maintained, and the communities depending on the nonprofit are protected.
Aulgur, J. J. (2016). Governance and board member identity in an emerging nonprofit organization. Administrative Issues Journal: Connecting Education, Practice, and Research, 6(1), 6-21. https://doi.org/10.5929/2016.6.1.1
Wolff, B. M. (1998). Conflicts of interest on nonprofit boards: The law and institutional policy [PDF]. CPY Document.
Is your board equipped to provide real oversight?
Complivia helps mission-driven organizations strengthen fiduciary practice, modernize bylaws and conflict policies, and put right-sized financial controls in place before a crisis tests them.