HR-9 Board of Directors

What is the HR-9 Board of Directors control?

HR-9 Board of Directors Control is about demonstrating that your organization has established an oversight committee. The BoD provides oversight and guidance to the head of the organization (CEO). The oversight responsibilities include:

• Awareness of the organization’s internal performance in order to give constructive feedback.
• Independent BoD to ensure that decision-making is free from conflict-of-interest issues.
• The BoD is qualified to provide guidance to ensure sound decision-making.
• Regular meetings are held to discuss the organization’s progress.

However, some organizations may not have a BoD. In those cases, the executive team will serve in lieu of the BoD.

You also have the ability to customize the BoD controls to fit your requirements.

Available tools in the marketplace

Disciplinary Tools

No tool recommendation is made for this section

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• BoD Charter template

Control implementation

To implement the Board of Directors control, 

Document a charter or overview procedure establishing the BoD’s composition and responsibilities. Ensure the following documentation is taken into account:

• The BoD members’ details demonstrate that the majority of the board members are independent (i.e., outside the organization).
• BoD member’s details that demonstrate that the board members are qualified with industry experience
• The BoD meeting frequency and general agenda topics demonstrate that senior management meets frequently and discusses the organization’s goals and performance.

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. Provide a BoD charter or page on the website or internal document that includes:
   1. The BoD structure and its responsibilities
   2. A list of BoD members and their backgrounds and experiences
2. Provide a recurring meeting calendar and evidence of the agenda and meeting notes.

Evidence example

For the suggested action, an example is provided below:

1. Provide a BoD charter, page on the website, or internal document.
   The following screenshot is a BoD charter describing the roles and responsibilities and the structure.
   
   
2. Provide a recurring meeting calendar and evidence of the agenda and meeting notes.
   The following screenshot is an example of a BoD meeting calendar:
   
   The following screenshot is a TrustCloud example of BoD meeting notes: