The review record of a single piece of material is evidence that the board's internal controls are actually working. The reviewer is not an enforcer who makes people follow the rules. They are the person who, day after day on the floor, writes down whether governance is functioning. In this final installment, we gather the threads we have followed — the separation of oversight and execution, fiduciary duty, and risk appetite — and lay them over materials review from the board's side.
01Review Records Become Evidence That Controls Are Working
For the board, materials review is evidence that internal controls and the three lines of defense are actually working. Review records, responses to deviations, measures to prevent recurrence — these become visible material that shows shareholders and regulators that the framework you put in place has not become a mere formality. Minutes recording that a framework was decided are not enough. What is asked is whether traces of it operating remain.
The construction and operation of internal controls required by Article 362, paragraph 4, item 6 and paragraph 5 of the Companies Act, and a director's discharge of the duty to monitor, are judged to have been "fully met" only when they are backed by evidence from the floor. Put the other way, if the records on the floor are thin, then no matter how splendidly the higher-level controls are designed, you cannot show that they were functioning. The deviation cases listed in the Ministry of Health, Labour and Welfare's report on its surveillance of sales-information-provision activities can be read as the result of controls breaking down on the floor and that failure becoming visible to the outside. A single deviation is, at once, carelessness on the floor and a trace of control operation that failed to reach it.
Review criteria and structure
Who drafts and who approves, and by what criteria the judgment is made. Well-maintained review criteria and a separated structure are evidence that the internal controls required by Article 362 were "built."
Review records and deviation handling
How each piece of material was reviewed, and how expressions exceeding the permissible range were handled. Recorded judgments and the traces of send-backs show that the framework is "in motion."
Recurrence prevention and monitoring
Escalating deviations to higher levels, analyzing causes, and preventing recurrence. A record of this cycle backs up that the directors' duty to monitor is being discharged.
02The Quality of Review Becomes a Proxy for the Quality of Governance
Take one step further, and we can say that the quality of review is a proxy indicator that mirrors the quality of governance. A review with thin records and no response to deviations lets one infer that the internal controls above it are hollow. If materials review — the final step on the floor — is loose, it is no surprise to be read as meaning that the criteria, training, and monitoring upstream of it are just as loose. Conversely, a thick review record that preserves even the basis for each judgment supports, from below, the board's discharge of its duty of care.
This view runs continuously from the earlier installments. If the duty to build an internal control system is the stage of "build the framework," then the operation of materials review is the stage of confirming, day by day, "whether the framework you built is actually working." And as we saw in why "I didn't know" doesn't hold, a director's duty to monitor extends not only to building the framework but to operating it. Since the Daiwa Bank shareholder derivative suit brought even the responsibility for neglecting to monitor operation within its range, leaving evidence that things are working on the floor is also work that protects management. A review record is a peacetime preparation for showing, in a crisis, that "we were doing what we should have done."
03Materials Review from the Boardroom — Translating It into the Language of Management
So what should the reviewer do? The final key is to hold the management side's logic at high resolution. The separation of oversight and execution, the duty of care owed as a fiduciary, and the risk appetite that the board approves. Once you can explain these three in your own words, you can speak of "why we keep this record" on the other party's terms. Not "we keep it because it is a rule," but whether you can say "this is evidence that internal controls are working, and it is material that backs up the directors' duty to monitor." The same task, but its persuasive force changes completely.
Seen from the boardroom, materials review is not a cost. It is one of the few pieces of visible evidence that can show the outside world that governance is functioning. When a reviewer can speak of its value in the logic of management, review is understood not as a "brake that stops things" but as a front line that supports governance. The judgment on a single piece of material, and its record. In them is mirrored how the board's responsibilities are being discharged on the floor. To stand on the review floor is to stand on the front line of governance.
- Review records, deviation handling, and recurrence-prevention measures become visible evidence that internal controls and the three lines of defense are working.
- The construction, operation, and monitoring required by Article 362 of the Companies Act are judged to have been "fully met" only when backed by evidence from the floor.
- The quality of review is a proxy for the quality of governance. A review with thin records lets one infer that the higher-level internal controls are hollow.
- The deviation cases listed in the MHLW's surveillance report can be read as the result of control failures becoming visible to the outside.
- If you can put the separation of oversight and execution, fiduciary duty, and risk appetite into your own words, you can explain "why records are necessary" in the measure of management.
- Companies Act, Article 362, paragraph 4, item 6 and paragraph 5. Provides that the board of directors shall decide on the establishment of a system to ensure the propriety of operations (an internal control system), and makes that decision mandatory for large companies.
- Daiwa Bank Shareholder Derivative Suit (Osaka District Court, September 20, 2000). In addition to a director's duty to build a risk-management framework, it brought within its range the duty to monitor the operation of the framework once built, and affirmed liability for damages where that duty is neglected.
- Ministry of Health, Labour and Welfare. Report on the Surveillance Project for Sales-Information-Provision Activities. Compiles, with company names anonymized, deviation cases in the provision of information on prescription drugs. Can be read as a record of control failures becoming visible to the outside.
- Tokyo Stock Exchange. Corporate Governance Code, General Principle 4 (Responsibilities of the Board). Places the board's oversight function at the core of corporate governance.