Governance can’t be left to boards.