Corporate governance is being stress-tested — not at the margins, but at the level of its underlying architecture. That is the central argument in a new analysis of how modern boards work and why they are struggling to keep up.
The problem is simple to state: boards were built for a vertical world, but risk has gone horizontal.
Why the Modern Board Model Was Built Vertical
The modern board model was shaped in the industrial era. Companies were hierarchical. Risks were more contained. Change moved more slowly. Governance followed that structure in a straightforward way: information flowed up through management, and oversight flowed down from the board.
That model still defines how most boards operate today. But the environment it was built for has changed.
The Structural Tension Facing Corporate Boards
What is emerging is a structural tension: a governance architecture designed for a vertical world operating in a horizontal risk environment.
Many of the most consequential risks today do not respect the org chart. They move horizontally — across functions, across geographies and, increasingly, across organizational boundaries. Cyber risk is one example named in the analysis.
This matters because a vertical oversight model assumes risk can be captured, escalated, and reviewed inside a chain of command. Horizontal risks do not fit that path. They surface in several places at once, cross team lines, and often sit partly outside the company's own walls.
What This Means for How Boards Oversee Risk
The analysis does not offer a redesign. It frames the issue as a mismatch: the structure of oversight has not moved at the same speed as the structure of risk.
To put it plainly, the boardroom is not failing because directors are careless. It is straining because the model itself was drawn for a different kind of company and a different kind of threat.
Our Take: Governance Needs to Match How Risk Actually Moves
In our view, this is the most useful way to frame the current debate about corporate governance. Most criticism of boards focuses on people — who sits on them, how independent they are, how often they meet. This analysis points somewhere else: the architecture.
If risk now travels sideways, then oversight that only travels up and down will keep missing things. Boards do not need another layer of reporting. They need a way of seeing risk that matches how it actually moves — across functions, across borders, and across the boundaries between their company and everyone else it depends on.
For readers who work in or with large companies, the practical takeaway is this: when a risk appears in several departments at once, that is not a communication failure. It is a sign the governance model was never built for it. Until that changes, boards will keep reacting to horizontal risks with vertical tools.
