The Economic Case

What is effective governance challenge worth? This chapter builds the economic case for SGaaS, framing the investment against the recovery gap and the permanent loss of relative market position that follows a severe governance failure, rather than against the cost of the failure event alone.

Do the economics work? Every figure cited below traces to a primary or authoritative source. Where evidence is suggestive rather than definitive, that limitation is acknowledged. The aim is to demonstrate that the economic logic of continuous governance challenge is sound, and that the cost of not having it is quantifiable and severe.

The Cost of Governance Failure

The case studies examined in Section 4 are quantifiable demonstrations of what governance failure costs. The figures are substantial enough to make the economic argument on their own terms.

Quantified financial cost of governance failure across five documented cases
Case	Financial Impact	Key Components
Boeing 737 MAX	~$20 billion total	$237.5M Caremark settlement; $2.5B DOJ Deferred Prosecution Agreement (Jan 2021); $1.1B additional settlements (2025); $1.77B airline compensation; $200M SEC penalty; 71% stock decline; 1,200+ cancelled orders
Wirecard	approximately €24 billion in shareholder value destroyed	€1.9B missing funds; €3.1B bank losses; share price collapse from €193 to €0.30
Silicon Valley Bank	$16.1 billion FDIC fund cost	$42B single-day deposit flight; $100B queued withdrawals; $209B in total assets
Post Office Horizon	>£1.44 billion in compensation (as of March 2026) and legal costs	£250M legal fees; 900+ wrongful prosecutions; 20+ years of governance failure
Wells Fargo	>$7 billion in cumulative penalties	$3.7B CFPB order; $3B DOJ settlement; $2 trillion asset cap (lifted in June 2025)

These are not outliers. They are the documented consequences of the structural defects this paper has identified, with oversight gaps that missed accumulating risk, suppressed internal challenge, and left boards without adversarial intelligence.

The headline cases sit inside a broader empirical pattern. Hunziker et al. ^[1] classified the underlying risk drivers behind 395 severe corporate crises in the DACH region between 2018 and 2024 using the Kaplan and Mikes (2012) framework. ^[2] Strategy risks accounted for 40.8% of events, external risks for a further 40.0%, and preventable (internal) risks for 19.2%. Eight in ten value-destroying events in a seven-year window originated in the two categories that rule-based, compliance-oriented governance was not designed to handle, namely strategic misjudgement and external shock. The point is not that compliance governance is failing at its own job; preventable-risk controls reduce the frequency of the events they target. The point is that the failures that matter most are happening in the space compliance governance was never built to cover, and that is the space an adversarial challenge function is designed to occupy.

The common thread across these cases is that governance structures were present and insufficient. Every organisation had boards, risk committees, internal audit functions, external auditors, and regulatory oversight. What each lacked was a mechanism for continuous, independent, adversarial challenge, the function that might have surfaced the risks before they became catastrophes. The economic question is whether the cost of providing that function is proportionate to the cost of not having it.

The Strategic Drift Cost

Catastrophic failures command the headlines, but routine value erosion is the more common economic consequence of the same structural defects. Failed M&A integrations, missed technological pivots, and unchallenged strategic assumptions produce damage that is chronic rather than acute, and, for mid-market firms, no less consequential over time.

The McKinsey finding that approximately 70% of mergers fail to achieve their stated value targets ^[3] is a strategy-risk statistic, not a compliance-risk statistic. Acquisitions fail because no function stress-tested the thesis, no one challenged the integration assumptions, and no adversarial mandate existed to ask what would need to be true for the deal to destroy value rather than create it. These are the same structural defects, episodic engagement and consensus dependency, operating at a lower amplitude than Boeing or Wirecard but with cumulative effects that compound across years.

The investor-side evidence reinforces the scale of the problem. Mauboussin and Callahan’s analysis of nearly 24,000 US public companies from 1926 to 2025 found that 70% produced lifetime earnings insufficient to justify their IPO price. A mere 0.7% of listed companies created more than 75% of aggregate shareholder wealth, measured at $91 trillion ^[4]. The default trajectory for most companies is value erosion. Returns on invested capital regress toward the sector mean at an average annual fade rate of approximately one-fifth ^[4]. The question is how long a company can resist that gravitational pull. Governance challenge is one of the mechanisms that determines the answer, because the assumptions that accelerate the fade (unchallenged strategy, unexamined competitive position, unquestioned capital allocation) are precisely the assumptions an adversarial function is designed to surface.

For a mid-market firm, the twelve-percentage-point recovery gap that Hunziker et al. document translates directly. A £500 million enterprise that suffers a severe governance-driven value event and then underperforms its sector benchmark by twelve points for two or more years has lost £60 million or more in relative market position. That loss does not appear in a single write-down. It appears in the price achieved at the next fundraise, the multiples available at exit, and the competitive ground ceded while the board was reviewing backward-looking reports.

The economic case for SGaaS does not depend on preventing the next Wirecard. It depends on the proposition that continuous, adversarial governance challenge prevents the quiet accumulation of strategic risk that, left unchallenged, produces either a catastrophic event or a slow bleed of competitive position. The catastrophic cases prove the mechanism. The strategic drift cost proves the frequency.

The Recovery Gap

The most under-recognised element of the cost of governance failure is not the initial share-price drop. It is the divergence that persists long after the crisis itself has passed.

Hunziker et al. ^[1] tracked the post-crisis performance of the 213 DACH-listed companies in their sample that suffered a monthly share-price decline of 25% or more, benchmarked against the average of the Austrian Traded Index total return, the German Prime All Share performance index, and the Swiss Performance Index total return over the 24 months following each event. Two findings carry the argument.

First, the initial shock is severe. Affected firms fall to roughly 60% of their pre-crisis value in the event month, an approximate 40% loss of market capitalisation at the moment of impact.

Second, and more consequentially, the recovery is illusory. Twenty-four months later, the average affected firm has regained only its starting point, approximately 103% of pre-crisis value. Over the same period, the DACH benchmark indices have advanced to approximately 115%. The resulting gap, around twelve percentage points, is not a delayed rebound. It is market position that was forfeited at the event and never recovered. The authors’ conclusion is explicit. “Severe firm-specific shocks leave long-lasting scars, not only in value destruction at the event but also in missed participation in subsequent market upswings”.

The finding is not isolated. Hunziker et al. follow the methodology of the 1998 Mercer Management Consulting study of the US Fortune 1000, which documented the same recovery lag in a different market, different period, and different regulatory regime. Two independent datasets, separated by twenty-seven years and an ocean, find the same structural signature. Severe firm-specific shocks produce a permanent relative loss of market position, not a temporary write-down that subsequent performance erases.

This changes the economic framing of governance investment. The cost of a governance failure is not the write-down in the month it occurs. It is the write-down plus two-plus years of missed market participation plus the relative underperformance that, on the evidence, does not recede. Governance challenge, measured against this frame, is a value-preservation investment measured against a documented, persistent, and quantified gap.

The mechanism behind that persistence is stakeholder amplification. Grimwade ^[5], drawing on McKinsey’s analysis of approximately 350 operational risk incidents at European and North American financial institutions, documents that total shareholder returns over the 120 working days following disclosure were impacted more than twelve times the actual monetary losses from fines, settlements, and direct costs. The initial write-down is the trigger; the amplification chain, through share price decline, credit rating downgrade, increased funding costs, and customer attrition, is what makes the damage permanent. For investment-grade institutions, a one-notch downgrade typically widens debt spreads by 10 to 50 basis points ^[6], a penalty that persists long after the operational loss itself has been absorbed; UBS’s Fitch downgrade following the 2011 rogue-trader incident took five years to recover to ‘A’ and a further fifteen months to reach ‘AA–’ ^[6] . At Credit Suisse, the amplification accelerated past recovery. In the fourth quarter of 2022, clients withdrew CHF 138 billion in deposits, the largest share leaving in October as media speculation and loss of client confidence reinforced each other; over the same three months, the wealth and asset management businesses recorded CHF 111 billion in net asset outflows, closing a year that totalled CHF 123 billion in AUM outflows ^[7]. Share price decline and client withdrawal compounded into a self-amplifying loop that ended in forced rescue. The recovery gap Hunziker et al. document is the aggregate signature of this amplification. Markets price the cascade, and the cascade outlasts the event.

The Recovery Gap Two years after a severe corporate crisis, DACH-listed firms had, on average, returned only to their pre-crisis share price. The broader market had advanced approximately 15% over the same period ^[1]. The resulting twelve-point gap is not an initial write-down. It is a permanent loss of market position. The economic case for continuous governance challenge is measured against this gap, not against the event itself.

The Cost Positioning of SGaaS

SGaaS occupies a deliberate position in the governance cost spectrum. It sits below the cost of building a permanent internal capability, above the cost of episodic advisory, and is structured for continuity rather than project-based engagement.

To contextualise this positioning, consider the alternatives. A full-time Chief Risk Officer at a mid-market financial institution commands base compensation of £180,000–£225,000 in the UK, with total compensation (including bonus, pension, and benefits) typically reaching £270,000–£400,000 annually. In the United States, the range is $171,000–$275,000 in base salary, with total packages at larger institutions exceeding $400,000. Beyond the CRO, a functioning internal governance capability requires supporting staff, technology, and operational budget, costs that escalate rapidly with organisational complexity.

At the other end of the spectrum, project-based governance reviews from major advisory firms provide episodic assessment but no continuity. They address the question of the moment but do not build institutional knowledge, do not provide ongoing challenge between engagements, and create the very episodic engagement problem this paper has identified as a structural defect.

The SGaaS Retained tier (the core offering) provides continuous, principal-led governance challenge at a fraction of the fully-loaded cost of an internal CRO function, while delivering something no internal function can provide, namely structural independence. The principal is not employed by the organisation, does not report to the CEO, and has no career incentive to moderate challenge. The retainer model ensures continuity; the adversarial methodology ensures rigour; and the principal-led delivery model ensures that the challenge comes with the authority and experience to be taken seriously at board level.

The Value Creation Argument

The strategic drift evidence above established the gravity that governance must resist. ROIC regresses toward sector means at fade rates averaging one-fifth, and 70% of US public companies produce lifetime earnings insufficient to justify their IPO price ^[4]. The CAP framework decomposes the resistance. Terminal value, which accounts for more than 70% of firm value in standard DCF, is a function of three variables, namely investment magnitude, ROIC-WACC spread, and competitive advantage period ^[4]. SGaaS provides the rigorous capital allocation governance and risk hedging frameworks that allow these three variables to be defended under transaction conditions. By aligning internal project hurdle rates with today’s macroeconomic realities and hardening interest-rate and supply-chain hedges, SGaaS ensures that the historical ROIC spread is structurally defensible and that the buyer cannot credibly model an accelerated reversion to the mean. The question that follows is what governance does to those three variables.

Koenig ^[8] answers it directly. Governance is an organisational design discipline that determines how much risk the firm can take and how well it allocates capital across the risks it does take. Strong governance lifts the mean of the firm’s outcome distribution and widens the range of upside the board can credibly underwrite.

The first mechanism is risk-taking capacity. A board with structured adversarial challenge can authorise larger and longer-horizon investments because it has a mechanism for detecting when a thesis is breaking. A board without that mechanism rations capital below the available opportunity set, because the oversight architecture cannot distinguish good risk from bad. Koenig ^[8] frames this as an application of Ashby’s Law of Requisite Variety to corporate governance, observing that a control system must possess at least as much variety as the system it governs to regulate it. A board whose oversight architecture lacks the variety to match its risk environment will, predictably, under-invest in the spread-creating opportunities available to it. The cost of weak governance shows up in the foregone investment that was never made.

The second mechanism is capital allocation quality. Mauboussin and Callahan’s analysis of nearly a century of US public company data establishes the scale of the variable. A mere 0.7% of listed companies created more than 75% of the $91 trillion in aggregate shareholder wealth ^[4]. McKinsey’s finding that approximately 70% of mergers fail to achieve their stated value targets ^[3] reinforces the same conclusion in transaction form. The distribution is heavily skewed. A small minority of allocation decisions accounts for the bulk of value created, which is direct evidence that allocation discipline, the cumulative quality of the capital decisions a firm makes year after year, is the dominant variable in long-run value creation. Adversarial governance challenge is the mechanism by which weak theses are killed before capital follows them, with strategic assumptions tested, integration logic stress-checked, and unexamined consensus interrogated.

Both mechanisms compound through the CAP identity. Risk-taking capacity expands investment magnitude and extends CAP duration. A board that can safely authorise more growth investment funds more spread-creating opportunities, and one that detects early when a thesis is fading buys additional years before regression sets in. Capital allocation quality widens the spread itself. Every avoided value-destructive acquisition, every challenged growth assumption, every reconsidered capital deployment increases the gap between ROIC and WACC. SGaaS operates directly on the three variables that drive the majority of firm value.

This reframes the proposition for upper-tier clients. For Embedded and Pre-Exit engagements, where the principal is integrated into the strategic and capital-allocation cadence of the organisation, the economic case rests on governance being the condition under which a longer CAP, a higher spread, and a larger investment programme are credibly sustainable. The price of the engagement is measured against the value created.

The value-creation logic of SGaaS Governance challenge expands the upside the board can credibly underwrite while it tightens the downside the board can absorb. Risk-taking capacity and capital allocation quality are the two variables Koenig ^[8] identifies as the governance contribution to value creation. They map directly onto the investment magnitude, spread, and CAP duration that drive the majority of firm value in standard valuation ^[4]. The case for the upper tiers rests on the value-creation arithmetic above. The case for the lower tiers rests on the loss-avoidance arithmetic that follows.

The Loss Avoidance Argument

The most straightforward economic case for SGaaS is loss avoidance. This paper does not claim that SGaaS would have prevented every failure documented in Section 4. Counterfactual certainty is not available, and claiming it would undermine the intellectual discipline this paper seeks to maintain. What the evidence supports is a more measured proposition, that a continuous, adversarial, independent governance function, had one been in place, might have surfaced the risks earlier, challenged the assumptions more forcefully, and given the board the information it needed to intervene before the damage became irreversible.

The value of that ’might have’ is economically significant even at modest probabilities. If a retained governance challenge function costing £200,000–£400,000 per year reduced the probability of a catastrophic governance failure by even a single percentage point for an organisation facing £100 million or more in potential loss exposure, the expected value calculation is overwhelmingly positive.

The logic is the same that underlies insurance, internal audit, and compliance expenditure. Organisations invest in preventive functions not because they guarantee that losses will not occur but because they reduce the probability and severity of losses to a degree that justifies the investment. SGaaS extends this logic to the governance architecture itself, the layer that oversees all other risk management functions creating, in effect, a form of strategy insurance.

Exit Value Creation

For private equity portfolio companies, the economic case for SGaaS has an additional dimension, namely exit value. Governance quality is a recognised factor in M&A diligence, and demonstrable governance maturity can reduce diligence friction, accelerate transaction timelines, and strengthen buyer confidence.

McKinsey research ^[3] documents that approximately 70% of mergers fail to achieve their stated value targets, with governance and integration capability identified as key differentiators in successful transactions. Due diligence limitations can overlook significant proportions of potential merger value, and governance maturity is among the factors that can reduce transaction friction.

Recall the CAP decomposition introduced earlier in this section. At the exit moment, the buyer’s central forecasting question is how long the target firm can sustain its current ROIC spread before regression sets in. Mauboussin and Callahan’s analysis of ROIC persistence, drawing on 55 years of data, shows five-year fade rates averaging 0.21, with sector-specific variation from 0.10 (consumer staples) to 0.30 (utilities) ^[4]. Every year of additional CAP a buyer can justify in their valuation model lifts the exit multiple, because terminal value compounds at the spread the buyer is willing to underwrite for the duration the buyer is willing to underwrite it.

Governance architecture is one of the factors that determines whether that CAP assumption is credible. A portfolio company with 12–24 months of documented, continuous, independent governance challenge (governance pulse reports, board challenge memos, red team assessments, and a governance maturity scorecard) gives the buyer evidence that the conditions sustaining ROIC above the cost of capital are being actively managed. Strategic assumptions are stress-tested, emerging risks are surfaced early, and decision-making at board level is subject to structured adversarial review.

A buyer’s underwriting team seeks any structural, regulatory, or operational governance gap to justify modeling a faster fade rate (f), which translates directly into a late-stage purchase price deduction. In a congested 2026 exit market where average hold periods exceed six years, assets are highly vulnerable to these price-chipping tactics.A company whose governance documentation consists of annual board minutes and an internal audit plan offers no such basis.

The Pre-Exit tier is structured so that the principal’s engagement is oriented toward exit value defense. The commercial model is agreed in advance and tied to the defined scope of governance work, creating a shared interest in the quality of the governance evidence base presented to prospective buyers.

Regulatory and Compliance Efficiency

The regulatory direction documented in Section 5 creates economic pressure as well as legal pressure. Boards facing Provision 29 declarations, SM&CR personal accountability, DORA resilience testing requirements, and Caremark-driven fiduciary duties must invest in governance capability regardless of whether they engage SGaaS. The decision is how to invest most effectively, not whether.

PwC research ^[9] identifies 20% cost reduction potential through the transition from periodic to continuous risk and compliance monitoring. While this figure relates to compliance functions broadly rather than to SGaaS specifically, the underlying principle is directly applicable: continuous governance challenge, by identifying issues earlier and maintaining a current understanding of the governance environment, reduces the cost of remediation, regulatory response, and crisis management.

The compliance cost literature reinforces this logic. Research by the Ponemon Institute ^[10], conducted in the context of data protection compliance, found that organisations spend on average 2.71 times more on the consequences of non-compliance than on building and maintaining compliance programmes. While this finding is specific to data protection regulations, the underlying cost dynamic, namely that reactive management of compliance failure substantially exceeds the cost of proactive investment, applies with comparable logic to governance challenge investment: the documented costs of governance failure in the cases above dwarf any plausible preventive expenditure.

Insurance and Risk Transfer

Directors’ and officers’ liability insurance is priced, in significant part, on underwriters’ assessment of governance quality. Willis Towers Watson research ^[11] documents that D&O underwriters scrutinise governance structures, risk management frameworks, and board oversight capability as primary factors in premium determination.

While the D&O market softened in 2024, with 81% of clients experiencing premium decreases averaging 5.2%, this cyclical trend does not diminish the structural relationship between governance quality and insurance pricing. As emerging risks (AI-related shareholder claims, economic insolvency, ESG litigation) enter the D&O market, underwriters are likely to differentiate more sharply between organisations with demonstrable governance challenge capability and those without.

An organisation that can present evidence of continuous, independent governance challenge (documented through SGaaS deliverables) is better positioned in D&O renewal negotiations than one relying solely on standard governance structures. The insurance premium benefit alone does not justify SGaaS engagement; but as one component of a comprehensive economic case, it contributes to the overall cost-effectiveness of the model.

The Governance : Performance Relationship

The broader academic evidence supports the economic logic of governance investment. A meta-analysis conducted by Clark, Feiner, and Viehs ^[12], examining over 200 academic studies on ESG and sustainability practices, found that 90% demonstrated a positive relationship between strong sustainability practices and lower cost of capital, while 88% showed a positive correlation between ESG quality and operational performance. Given that governance constitutes a core pillar of the ESG framework, these findings are relevant to the governance investment argument, though they should be understood as applying to ESG broadly rather than to governance in isolation.

These findings do not prove that SGaaS specifically will deliver financial returns. No honest analysis can make that claim for any governance investment. What they establish is that governance quality is an economically significant variable. Organisations with stronger governance architectures demonstrably perform better on cost of capital, operational efficiency, and long-term value creation. SGaaS strengthens the governance architecture; the economic evidence suggests that doing so has measurable financial consequences.

The economic case for SGaaS rests on three pillars.

First, the cost of governance failure is quantifiably catastrophic, measured in the billions across documented cases.

Second, the cost of continuous governance challenge is modest by comparison: measured in the hundreds of thousands annually.

Third, the broader evidence consistently links governance quality to financial performance, lower cost of capital, and more effective risk management.

The question facing boards is starker: can they quantify the cost of not having it?

References

Stefan Hunziker et al.. (2025). Corporate Crises in Germany, Austria, and Switzerland: Empirical Evidence on Risk Drivers. ERM Report 2025. Institute of Financial Services Zug IFZ, Lucerne School of Business.
Robert S. Kaplan & Anette Mikes. (2012). Managing Risks: A New Framework. Harvard Business Review.
McKinsey & Company. (2010). Perspectives on Merger Integration. McKinsey & Company.
Michael J. Mauboussin & Dan Callahan. (2026). Competitive Advantage Period: The Neglected Value Driver. Counterpoint Global Insights, Morgan Stanley.
Michael Grimwade. (2025). How Can Effective Operational Risk Management Genuinely Deliver Commercial Value?. LinkedIn. https://www.linkedin.com/posts/michael-grimwade-a0661a17_how-can-op-risk-management-deliver-commercial-activity-7451540211920130048-Lh9L
Michael Grimwade. (2023). Approaches for Quantifying the Financial Impacts of Reputational Damage from Climate Change. Journal of Risk Management in Financial Institutions.
Swiss Financial Market Supervisory Authority (FINMA). (2023). FINMA Report: Lessons Learned from the CS Crisis. Swiss Financial Market Supervisory Authority (FINMA). https://www.finma.ch/en/news/2023/12/20231219-mm-lehren-aus-der-cs-krise/
David R. Koenig. (2018). Governance Reimagined: Organizational Design, Risk, and Value Creation. (b)right governance publications.
PricewaterhouseCoopers. (2023). Continuous Monitoring and Compliance Cost Reduction. PricewaterhouseCoopers.
Ponemon Institute. (2017). The True Cost of Compliance with Data Protection Regulations. Ponemon Institute.
WTW. (2025). Insurance Marketplace Realities 2025. WTW (Willis Towers Watson).
Gordon L. Clark et al.. (2015). From the Stockholder to the Stakeholder: How Sustainability Can Drive Financial Outperformance. University of Oxford Smith School of Enterprise and the Environment and Arabesque Partners.