Provision 29: The End of 'Checkbox' Governance
The January 2026 update to the UK Corporate Governance Code is here. Boards must now declare the effectiveness of material controls. Intention is no longer enough.
The grace period for the UK Corporate Governance Code update is over. As of 1 January 2026, Provision 29 requires Boards to issue an annual declaration on the effectiveness of their material controls.
This is the death of 'checkbox' governance. You cannot declare a control effective if you do not have the evidence to prove it. 'Reasonable assurance' now requires hard data, not just an internal audit memo.
Governance is not about restricting movement; it is about knowing where the brakes are. A robust GRC framework allows a company to move faster because the risks are quantified and the controls are verified.
Boards that fail to adapt will find themselves facing not just regulatory censure, but shareholder lawsuits. Design your systems for evidence, not for elegance.
✨ Recommended For You
Best GRC Software in the UK (2026): What to Choose and Why
Compare the best GRC software in the UK and understand which tools actually work under audit. Learn what to look for and how to choose a platform that gives real visibility, not just compliance reporting.
ISO 27001 for UK SMEs: The Practical Guide to Certification Without the Chaos
ISO 27001 certification costs UK SMEs £18,000-£35,000 in year one. Learn how to get audit-ready without spreadsheets or productivity loss using a unified platform approach.
How to master the risk monitoring process in 2026
Discover how to enhance your governance with our risk monitoring process guide. Take actionable steps for effective risk management in 2026.