One in five privately held companies face regulatory action or fines when basic board and record controls are missing.
This guide explains what that means for founders, directors and finance leads in 2026.
Singapore’s framework blends the Companies Act “must do” duties with a Code that asks firms to comply or explain. That mix creates legal duties and commercial expectations from banks and investors.
Read on to learn what is mandatory under the Act, what is sensible to borrow from listed practice, and why oversight is now an operating habit rather than a dusty policy.
The guide previews common risks to avoid: late filings, undocumented decisions, unmanaged conflicts, weak financial records and poor data controls. Use it as a practical checklist when scaling, fundraising or planning an exit.
Key Takeaways
- Distinguish legal duties from best-practice expectations.
- Prioritise decision rights, records and approvals as daily habits.
- Avoid common compliance risks with simple controls.
- Use this guide as a checklist for scaling and fundraising.
- Expect commercial scrutiny from banks and investors.
Corporate governance in Singapore for SMEs in 2026: why expectations are rising
By 2026, what used to be a boardroom standard for listed companies is now expected of closely held and family-run firms too.
From “listed companies only” to baseline oversight
Regulators and counterparties now assess how oversight works in practice. They look at decisions, records and follow-up actions, not just a policy on a shelf.
What external parties check
- Clear approval authority — who can sign and why.
- Evidence of active oversight — meeting minutes, reviews, and reconciliations.
- Consistent financial reporting and proper handling of sensitive information.
Why “I didn’t know” is no longer a shield
ACRA and lenders expect company directors to ask questions about cash flow, probe unusual payments and confirm compliance systems exist.
Weak practice shows up in shareholder disputes, tax reviews and funding delays. Strong processes create a defensible record of diligence and protect both the firm and the individuals who run it.
Singapore’s corporate governance framework: laws, codes and listing rules
Understanding the layers of law and market codes helps leaders decide which controls to adopt now.
The dual-system approach: Companies Act vs Code of Corporate Governance
The Companies Act sets non-negotiable duties. These are statutory steps every director must follow, like filings and registers.
The Code of Corporate Governance works on a comply or explain basis. For listed firms it is enforced through disclosure. For private firms it creates market expectations from banks and investors.
Legal, quasi-legal and best-practice layers
Think in three tiers: laws, listing rules and best-practice codes. The SGX Listing Manual and related takeovers rules sit between law and guidance.
“Is it in the Companies Act?” — if yes, do it. If not, ask whether the Code or listing rules make it a market norm.
| Layer | Who it binds | Practical example |
|---|---|---|
| Companies Act | All companies | Statutory filings and director duties |
| Listing rules (SGX) | Listed issuers | Disclosure and board composition benchmarks |
| Code of Corporate Governance | Listed + market | Comply or explain on board practice |
Where firms get caught: informal agreements instead of resolutions, mixed roles, missing registers or ignored conflicts.
Key building blocks ahead: decision rights, records, disclosures, financial reporting, risk oversight and internal controls. Use the decision tool above as a quick filter when you review controls.
Key regulators and how enforcement works: ACRA, MAS and SGX
Three regulators shape practical oversight and what a company must do to stay compliant.
ACRA: day-to-day filings and director accountability
ACRA administers the Companies Act and handles registration, statutory returns and registers. It can impose fines, strike off a company or disqualify directors for breaches.
MAS: supervision of financial firms and market conduct
MAS oversees banks, insurers and capital-market intermediaries. It enforces standards under the Securities Futures Act and can revoke licences or prosecute for serious misconduct.
SGX: the listing manual and frontline market sanctions
SGX enforces the listing manual and SGX listing rules. Penalties can be substantial — regulators issued S$27.45 million in July 2025 to nine institutions for weak oversight. SGX can fine up to S$250,000 per contravention and apply market sanctions.
Real-world consequences
- Director exposure: disqualification, personal liability and long-term reputational harm.
- Companies face fines, public scrutiny and financing delays from poor reporting or missing records.
- Enforcement often starts with a query and can escalate to court orders or prosecution.
corporate governance requirements singapore sme under the Companies Act
Under the Companies Act, a director’s legal duties are simple in words but strict in practice.
Section 157 requires directors to act honestly and to exercise reasonable diligence. That means asking questions, checking financials and not rubber-stamping transactions.
A company must appoint a company secretary within three months of incorporation and keep core registers (ss190–192). Accurate accounting records and timely filings are non-negotiable.
Practical checklist for SMEs
- Secretary in place; minutes and resolutions signed and stored.
- Registers of members and directors kept up to date.
- Clear approval lines for related-party transactions and expense claims.
- Annual financial statements presented at AGMs where required.
“Directors must not use company information for improper personal gain.”
Disclose actual or potential conflicts and document approvals. False statements or misuse of information can attract fines up to S$50,000 and two years’ imprisonment, and directors may face personal liability.
How SMEs should structure decision-making between shareholders, directors and management
Well-defined roles between owners, the board and day-to-day managers reduce friction. Section 157A confirms that the directors direct the business; shareholders set broad aims and replace directors if needed.
Directing the business without micromanaging
A board should focus on strategy, risk and oversight, not daily tasks. Use monthly management accounts, cash-flow updates and KPI dashboards to stay informed.
Delegated authority limits help: set approval thresholds for spending and require escalation for unusual transactions. Clear reporting rhythms let managers act fast while the board keeps control.
Reserved matters and shareholder approval
Formalise major decisions in the constitution or shareholders’ agreement. Typical reserved matters include share issues (s161), sale of the whole business, related-party deals and large borrowings.
| Reserved matter | Why it matters | Who decides |
|---|---|---|
| Issue of shares (s161) | Affects ownership and dilution | Shareholders |
| Sale of whole/substantially whole undertaking | Ends or alters the business | Shareholders |
| Related‑party transactions | Risk of self-dealing | Independent board review + shareholder sign-off |
Minority protections and practical steps
Section 216 offers an oppression remedy; s216A allows derivative actions for wrongs to the company. These steps are triggered by unfair prejudice or self-dealing.
Practical insurance: keep decisions documented, use a decision-rights matrix, require written resolutions for key matters and set quorum rules. Good practice reduces dispute risk and supports long-term success.
Board composition, independence and leadership structure: what scales with growth
Boards evolve as businesses scale: founders must plan when to add outside challenge and expertise. Early-stage firms often start with founder-only boards. As a company takes on capital or hires senior managers, add non-executive and independent members to strengthen oversight and credibility.
What “independence” means and why it matters
Board independence in local standards tests links to employment, recent service and relationships with large shareholders (over 10%). An independent member should lack recent executive roles or close family or business ties that bias judgment.
Commercially, independence signals objective oversight to banks, investors and partners. Even private companies benefit from the credibility that independent directors bring.
Chairman and CEO separation
Listed companies expect separation of the chairman and CEO to reduce power concentration. For growing firms, splitting these roles improves decision quality and succession planning.
Tenure, skills and diversity
- Use the one-third independent benchmark and reassess independence if tenure exceeds nine years.
- Map board skills to strategy: finance, tech, compliance and market expertise.
- Prioritise diverse perspectives that enhance performance; document the selection rationale to show thoughtful practice.
“A balanced board protects the company and prepares it for the next stage of growth.”
For a practical primer on oversight and standards, see what is corporate governance.
Committees and oversight: what is mandatory for listed companies and sensible for SMEs
Board-level committees turn policy into action. For listed companies the listing manual and the code corporate governance set clear expectations: three formal committees must exist with written terms of reference.
The three mandatory committees
The three required panels for listed companies are Audit, Remuneration and Nominating. Each must have clear roles and minutes that show active oversight.
Audit committee composition and expertise
Audit committees must have at least three non-executive directors, a majority who are independent and a chair who is independent. At least two members, including the chair, should have recent accounting or financial management expertise. Committees meet the external auditor without management annually (Companies Act s201B supports these rules).
Right‑sizing committee functions for smaller firms
Smaller boards can mirror the functions without creating heavy bureaucracy. Assign owners for audit & risk, pay review and nominations. Use quarterly “audit & risk” sessions led by a financially literate director or adviser.
- Purpose—Audit: financial integrity and controls.
- Purpose—Remuneration: align pay to performance and risk.
- Purpose—Nominating: appointments, independence checks and succession.
“Lightweight terms of reference, used and dated, prove oversight when questions arise.”
Keep brief, written terms of reference and document outcomes. For secretarial support and formal filings, consider using a professional company secretary to ensure compliance with the listing manual and the code corporate.
Financial reporting, audit and accountability: getting the basics right
Accurate accounts and timely filings are the backbone of any healthy company. All companies must prepare annual financial statements and file them with ACRA in XBRL format. Directors must approve the accounts and be able to explain the underlying figures.
Annual statements and XBRL filing
Annual statements should include balance sheet, profit and loss, cash‑flow and notes. Most firms use an external accountant to prepare XBRL filings, but directors should review management accounts before sign‑off.
When an audit becomes mandatory
An audit applies if a company meets two of these tests for two consecutive years: total assets > S$10m, annual revenue > S$10m, or employees > 50. Growth can trigger an audit unexpectedly, so track these thresholds quarterly.
Director oversight and bookkeeping quality
Directors must ensure proper accounting records. Review monthly management accounts, probe cash‑flow movements and question unusual or related‑party transactions.
What good documentation looks like
- Accurate ledgers and timely closes.
- Invoices, receipts and approval notes for every spend.
- Dual authorisation for payments and a clear payment trail.
- Written rationales for one‑off transactions and reconciliations.
“Consistent supporting documents and audit trails turn financial reporting into a defensible asset during due diligence.”
Good practice reduces regulatory exposure and speeds up bank or investor checks. Strong accounting, clear control steps and simple accountability avoid delays, valuation discounts and compliance queries.
Risk management, internal controls and data governance for modern SMEs
Effective risk oversight turns vague worry into clear, manageable actions for boards and management.
Boards hold ultimate responsibility for risk and must ensure simple, repeatable routines exist. Good internal controls are basic business hygiene: authorisation limits, dual signatories, segregation of duties and monthly reconciliations stop errors and fraud.
Minimum‑viable controls
Start with a short list that is easy to follow. Set spending and contract approval thresholds. Require two signatories on transfers. Separate payment initiation from approval. Reconcile bank and ledger monthly.
What to monitor
Risk categories to review each quarter include financial (cash and receivables), operational (supplier reliance), compliance (filings and employment) and IT/cyber (access, backups).
Data and local oversight
Protecting personal information is a board-level duty. Assign data owners, vet vendors and have an incident response plan. For foreign-owned companies, demonstrate local director oversight and real substance to ease banking checks.
Quarterly risk reviews plus an annual controls assessment create a lightweight but defensible record of action.
Conclusion
A simple, repeatable governance routine gives directors confidence and keeps the company resilient, helping turn checks into predictable steps rather than crises.
The hybrid framework combines non‑negotiable obligations under the Companies Act with market expectations from the Code and listing rules. Meet statutory requirements and adopt sensible corporate governance practices to build credibility with banks, investors and regulators.
Priority actions: confirm director duties, tighten minutes and registers, fix financial reporting discipline, and implement basic internal controls and data protection. Make compliance routine, not ad hoc.
Documented approvals, conflict disclosures and regular reporting are the best defence for directors. For faster funding, fewer disputes and long‑term success, schedule an annual governance review and consider professional company secretarial support to avoid missed filings and gaps.
FAQ
What are the baseline expectations for governance in Singaporean SMEs in 2026?
Which laws and codes should directors of private companies know?
What are a director’s core duties under section 157 of the Companies Act?
When must an SME appoint a company secretary and why is this important?
How should related‑party transactions and conflicts of interest be handled?
What reporting and audit thresholds apply to small companies?
How can an SME structure decision‑making between shareholders and the board?
What does “board independence” mean for smaller companies?
Which board committees are mandatory for listed firms and are they useful for SMEs?
What internal controls should small businesses implement first?
How does data protection feature in board oversight?
What risks do foreign‑owned SMEs face regarding substance and banking relationships?
What enforcement actions can follow governance failures?
How should SMEs prepare for investor or bank due diligence?
Can “I didn’t know” be used as a defence by directors?
Dean Cheong is a Singapore-based commercial growth architect and CEO of VOffice, known for helping B2B companies turn fragmented sales efforts into predictable revenue systems. He specializes in sales process optimisation, CRM-driven visibility, and market entry strategy, combining execution discipline with a strong academic grounding in business banking and finance from Nanyang Technological University. His focus is on building repeatable, data-backed growth frameworks that companies can scale with confidence.