Summary. Directors are judged on process rather than outcome, and the record of that process is built in ordinary meetings long before anyone is sued. This checklist converts the substantive law of fiduciary duty into operational practice: how materials are distributed, how conflicts are surfaced and handled, how oversight of the company's genuinely existential risks is structured and documented, and how the protective stack of exculpation, indemnification, advancement, and insurance is assembled and maintained. Work through it once to establish the baseline, then use the annual section as a recurring calendar item.

What this checklist is for. Operationalizing fiduciary duty for a board and its officers. For the doctrine behind each item, see Fiduciary Duties of Directors and Officers.

Phase 1 — Foundations, to establish once

  • Confirm the certificate of incorporation contains an exculpation provision eliminating director monetary liability for duty-of-care breaches, and consider extending it to officers where the statute permits.
  • Confirm the bylaws provide mandatory indemnification — "shall," not "may" — to the fullest extent permitted by law.
  • Execute a standalone indemnification agreement with every director and officer, containing mandatory advancement of expenses on an undertaking, a defined procedure for determining entitlement, a change-of-control provision, and a covenant not to amend adversely.
  • Adopt a forum-selection bylaw designating a single court for internal-affairs claims.
  • Adopt or confirm committee charters — audit, compensation, nominating and governance, and any risk committee — each stating the committee's authority, composition, meeting cadence, and reporting obligation.
  • Adopt a conflicts of interest policy with an annual questionnaire and a real-time disclosure obligation.
  • Adopt a code of conduct and a related-party transaction policy with defined approval thresholds.
  • Adopt a whistleblower policy with an anonymous channel and a stated escalation path to the audit committee.
  • Consider a corporate opportunity renunciation in the charter, scoped to the actual activities of investor-designated directors.
  • Confirm the stockholders' or operating agreement addresses information rights, transfer restrictions, and any protective provisions, and that the board understands them.

Why this matters. Every item above is cheap, is adopted by a single board action, and is unavailable retroactively. The indemnification agreement in particular is the one document a director should insist on before joining a board, because bylaws can be amended by the people who would otherwise owe the indemnity.

Phase 2 — Meeting mechanics

  • Distribute materials in advance — at least three business days for a routine meeting, longer for a significant transaction. Record the distribution date.
  • Confirm notice complies with the bylaws, or obtain waivers.
  • Circulate an agenda identifying each action item and each informational item.
  • Include in the materials, for any decision of consequence: the background, the alternatives considered, the risks, the financial analysis, and the recommendation with its basis.
  • Identify conflicts at the start of the relevant agenda item, before discussion.
  • Have any conflicted director leave the room for deliberation and vote; record the departure and return.
  • Where advisors are used, confirm they were selected with reasonable care and ask about their conflicts, including contingent fees.
  • Where the board is not ready, adjourn rather than deciding.
  • Hold executive sessions without management present, on a regular cadence.

Why this matters. Van Gorkom was decided on distribution, duration, and the absence of anything in writing. Nothing about the substance of the decision was wrong. The record either shows that a judgment was exercised or it does not.

Phase 3 — Minutes

  • Record who attended, including advisors and observers, and any partial attendance with times.
  • Record what materials were distributed and when, by reference to an exhibit.
  • Record the topics presented, the questions asked, and the alternatives discussed — in substance, not verbatim.
  • Record conflict disclosures, recusals, and abstentions by name.
  • Record the resolutions adopted and the vote.
  • Avoid characterizing the board's state of mind ("the board was satisfied that…") unless it is accurate and supportable.
  • Have counsel review minutes for significant meetings before circulation.
  • Approve minutes at the next meeting and maintain a complete, indexed minute book.
  • Maintain written consents with the same care, including the recitals establishing the basis for the action.

Why this matters. Minutes are produced in every books-and-records demand and in every transaction's diligence. One-line minutes on a topic the board actually discussed at length destroy the evidence of engagement. Verbatim minutes create impeachment material. The workable middle is a record showing the topic was presented, questioned, and decided.

Phase 4 — Conflicts and related-party transactions

  • Collect the annual conflicts questionnaire from every director and officer, and require prompt updates during the year.
  • Maintain a register of related parties and screen transactions against it.
  • For any interested transaction, determine the approval path before negotiations begin: disinterested director approval, stockholder approval, or both.
  • Where the transaction involves a controller, condition it from the outset on both an independent, empowered special committee and an informed majority-of-the-minority vote.
  • Charter any special committee with authority to say no, to negotiate, and to retain its own counsel and financial advisor of its own choosing.
  • Document the committee's independence analysis for each member, addressing professional, social, institutional, and philanthropic ties.
  • Ensure disclosure to the deciding body is specific — the nature of the conflict, the amounts, and the implications — not a general acknowledgment.
  • Present corporate opportunities to the disinterested board formally, and record the refusal in the minutes.
  • Confirm compliance with the related-party disclosure obligations in financial statements and any securities filings.

Why this matters. Loyalty claims are not exculpated, may not be covered by all insurance, and shift the burden to the defendants to prove entire fairness. The cleansing procedures are available only if they are put in place before the negotiation, not after.

Phase 5 — Oversight of the risks that matter

  • Identify, in writing, the two or three risks that are existential to this specific company — the mission-critical risks.
  • Assign each to the full board or to a named committee, in a charter.
  • Place each on a recurring agenda with a defined cadence, and hold to it in quiet periods.
  • Require management reporting against each risk, including negative information, leading indicators, and near misses.
  • Confirm the reporting reaches the board rather than stopping at management.
  • Establish a red-flag escalation protocol: a regulatory warning letter, a whistleblower complaint, a failed audit, a recall, a material incident, or a significant litigation development goes to the board with a documented response.
  • Minute the discussion of each mission-critical risk at every meeting where it appears.
  • Review the whistleblower log at the audit committee, with disposition of each report.
  • Confirm the compliance function has adequate resources, direct access to the board, and independence from the business it monitors.
  • Test the system periodically — an internal audit, an external assessment, or a tabletop exercise — and document the results and the response.

Why this matters. Oversight claims survive motions to dismiss where the board had no system for a risk central to the business, or where red flags reached the board and produced nothing. Both are visible in the minutes, and both are entirely preventable.

Phase 6 — The protective stack, reviewed annually

  • Confirm the exculpation provision is in the current certificate.
  • Confirm indemnification agreements are executed with every current director and officer, including recent additions.
  • Confirm advancement is mandatory and the undertaking form is on file.
  • Review D&O insurance: total limits against actual exposure, the adequacy of Side A and any dedicated Side A excess, the conduct exclusion (negotiate for a final adjudication trigger), the insured-versus-insured exclusion (confirm carve-outs for derivative suits and for a bankruptcy trustee), prior-acts and prior-knowledge provisions, and the allocation provision.
  • Confirm the reporting obligations under the claims-made policy are understood, and that a books-and-records demand or a subpoena is evaluated as a potential claim or circumstance.
  • Confirm tail coverage is addressed in any transaction, and priced.
  • Provide directors with a summary of the coverage — most have never seen it.

Why this matters. These four mechanisms fail in different places, and a company that has three of them has a gap. The most common gap is a policy whose insured-versus-insured exclusion swallows derivative claims, which are precisely the claims most likely to be brought.

Phase 7 — When something happens

  • On a books-and-records demand, a subpoena, a demand letter, or a complaint: issue a litigation hold immediately, covering directors, officers, and the compliance function, and covering personal devices and messaging applications.
  • Suspend automated deletion and confirm in writing that it is suspended.
  • Notify the insurer promptly, under every potentially applicable policy.
  • Engage counsel who did not advise on the underlying conduct to evaluate the claim.
  • Assess whether the interests of the company, the directors, and any individual defendant diverge, and arrange separate representation where they do.
  • Evaluate honestly whether a system existed for the risk, whether red flags reached the board, and whether anyone benefited personally — and write the evaluation down.
  • Consider whether the governance defect should be fixed now, on the merits, independent of the litigation.
  • Do not "clean up" any file, ever.

Why this matters. A spoliation finding layered on an oversight claim converts a defensible matter into an indefensible one, and disappearing-message settings have produced exactly that result in recent cases.

Phase 8 — Annual calendar

  • Conflicts questionnaires collected and reviewed.
  • Code of conduct certifications collected.
  • Committee charters reviewed and, where needed, updated.
  • Mission-critical risk list reconsidered — the risks change as the business does.
  • Board education on fiduciary duty, on the industry's regulatory environment, and on any new obligation.
  • D&O program reviewed at renewal, with the broker present at a board or committee meeting.
  • Indemnification agreements confirmed for all current directors and officers.
  • Board and committee self-evaluation, documented.
  • Minute book reviewed for completeness and gaps closed.
  • Delegation of authority matrix reviewed against actual practice.

Common mistakes

  1. Materials distributed at the meeting, which makes informed deliberation impossible and is visible in the record.
  2. Minutes that record only resolutions, erasing the evidence of the discussion that occurred.
  3. A conflicted director who stays in the room "just to answer questions," and votes.
  4. A special committee that cannot say no, or whose advisors were chosen by management.
  5. A mission-critical risk with no owner, no cadence, and no board-level reporting.
  6. Red flags that reached the board and produced no documented response.
  7. Bylaws that say "may indemnify," and no separate agreement.
  8. A D&O policy nobody has read, with an insured-versus-insured exclusion that reaches derivative claims.
  9. A books-and-records demand treated as correspondence rather than as the opening of litigation.
  10. Officers assumed to be covered by exculpation that, in the relevant jurisdiction, does not reach derivative claims against them.

Primary authority

Related

This checklist is educational and not legal advice. Fiduciary standards, exculpation and indemnification rules, and the permissible modification of duties vary by state and entity type. Consult qualified corporate counsel before adopting or amending governance documents.