Is the Wells Fargo board of directors responsible for the unauthorized accounts and insurance mess at Wells Fargo?
Earlier this month, the Federal Reserve Board answered with an emphatic yes.
The Fed imposed strong sanctions on Wells for opening "several million unauthorized retail customer accounts," "firing thousands of employees for improper sales practices" and "charging hundreds of thousands of customers for unneeded, unauthorized, guaranteed collateral protection insurance for their automobile loans."
Central to the Fed's actions was Wells' pursuit of a "business strategy that emphasized sales and growth" absent a sufficiently robust risk management process in place to assess and mitigate the risks of that strategy.
Remarkably, the Fed didn't stop there. It turned to the duties of the Wells board, chair and lead director, describing important performance failures. The Fed made it clear that directors had failed to oversee and evaluate management's implementation of an effective risk management system which had the stature, resources, authority and independence to assess and mitigate the risks of Wells' rapid sales growth strategy. Further, the Fed stated that management's reports to the board lacked detail, and faulted the board for failing to press management for greater specificity, initiating its own investigation or directing management to further investigate the matters of concern.
Then, in two very pointed letters to Wells' board chair and lead director, the Fed turned its attention to the responsibilities and failures of both, concluding the performance of each amounted to "ineffective oversight."
What we see in the Wells board leadership structure is a classic illustration of the risks of combining the chair/CEO role. Note that the Fed addressed the chair's performance as chair, not as CEO, underscoring the critical importance of a board carefully reviewing the chair separately when the roles are combined.
We've known for years that boards are responsible for seeing that companies have ethical cultures which embrace legal compliance. They're also responsible for having in place systems and processes that provide the board with information it needs to perform its oversight responsibilities. It's not enough for directors to say, "We didn't know." They have a duty to know, and the Fed has made that clear.