31:51 Lena: Alright, Miles, let's bring this all together into something practical for our listeners. If someone is building or evaluating a corporate control system, what would be your step-by-step playbook?
32:02 Miles: Great idea, Lena. Let's start with assessment. First, you need to honestly evaluate where you are now. What control systems do you currently have? Are they adequate for your current size and complexity? Are they properly resourced and functioning effectively? Don't skip this step—many companies try to build new systems on shaky foundations.
32:23 Lena: So it's like a governance audit of your current state. What should people be looking for in that assessment?
32:29 Miles: Look at your risk exposure first. What could go wrong in your business, and what would be the impact? Financial fraud, regulatory violations, operational failures, reputational damage—map out the key risks and then evaluate whether your current controls adequately address them. Gaps in this analysis tell you where to focus your improvement efforts.
32:49 Lena: That risk-based approach makes a lot of sense. What's the next step?
32:53 Miles: Design your target state. Based on your risk assessment, your growth plans, and your regulatory requirements, what control system do you need? This is where you decide on governance structure—traditional, two-tier, or one-tier system for corporations. What committees do you need? What skills and independence requirements for your control body members?
33:14 Lena: And I imagine this is where you need to consider your company's specific circumstances—size, industry, ownership structure, growth ambitions.
1:05 Miles: Absolutely. A family-owned manufacturing company will have different needs than a tech startup seeking venture capital. The key is designing a system that fits your reality while still meeting professional standards and regulatory requirements.
33:36 Lena: What about implementation? How do you actually make the transition from your current state to your target state?
33:43 Miles: Phase it carefully. Don't try to change everything at once—that's a recipe for confusion and resistance. Start with the most critical gaps and build momentum with early successes. If you need new statutory auditors, begin the selection process early. If you need new policies and procedures, develop and test them before rolling them out company-wide.
19:10 Lena: That makes sense. Change management is crucial. How do you get buy-in from management and employees who might see new controls as bureaucratic overhead?
34:14 Miles: Communication is key. Explain why these changes are necessary and how they benefit the business. Share examples of companies that have benefited from strong governance or suffered from weak controls. And involve people in the design process—they're more likely to support systems they helped create.
34:30 Lena: What about selecting the right people for control roles? That seems like it could make or break the whole system.
34:37 Miles: It absolutely can. For statutory auditors, look beyond just technical qualifications. You want people with relevant industry experience, strong communication skills, and the courage to ask tough questions. Interview them like you would any key hire—this is not a ceremonial role.
34:55 Lena: And how do you structure the ongoing relationship between management and the control bodies?
35:01 Miles: Establish clear expectations and regular communication rhythms. Statutory auditors should have scheduled access to key information and regular meetings with management. But they should also have independent access to employees, systems, and external advisors when needed. It's about structured collaboration, not micromanagement.
35:21 Lena: What about measuring effectiveness? How do you know if your control systems are actually working?
22:44 Miles: Great question. Look for leading indicators—are controls catching issues before they become problems? Are you getting valuable insights and recommendations from your oversight bodies? Are stakeholders, including investors and lenders, expressing confidence in your governance?
35:42 Lena: And presumably, you want to see evidence that the controls are actually being used and providing value, not just existing on paper.
0:41 Miles: Exactly. Track metrics like the number and quality of control recommendations, time to resolve identified issues, and feedback from external auditors or regulators. But also look at business outcomes—are you making better decisions? Avoiding problems? Building stakeholder confidence?
36:07 Lena: What about ongoing maintenance and evolution of the system?
36:11 Miles: Build in regular review cycles. At least annually, assess whether your control systems are still adequate for your current business and future plans. As you grow, enter new markets, or change your business model, your governance needs will evolve too.
36:25 Lena: And stay current with regulatory changes and best practices in your industry.
6:10 Miles: Right. Join industry associations, participate in governance forums, benchmark against peer companies. Corporate governance is a dynamic field, and you need to keep learning and adapting.
36:41 Lena: For our listeners who are just starting this journey, what's the most important thing to keep in mind?
36:47 Miles: Don't let perfect be the enemy of good. You don't need to implement a Fortune 500 governance system overnight. Start with the basics, do them well, and build from there. The key is establishing a culture of transparency, accountability, and continuous improvement.
37:03 Lena: And remember that good governance is ultimately about building a stronger, more sustainable business, not just checking regulatory boxes.
37:13 Miles: Exactly, Lena. The companies that embrace governance as a strategic tool rather than a burden are the ones that tend to outperform over the long term.