The revised CUC Higher Education Code of Governance is a substantive and demanding document. The scale of change it implies should not be underestimated. Many higher education institutions will need to strengthen their governance infrastructure, enhance board development, and redesign reporting and assurance frameworks. 

In research conducted by Moorhouse Consulting for UUK in 2023, 45% of universities surveyed felt that regulation takes up a significant or major proportion of governing body time, and the revised Code's intensified requirements will add to this burden if not implemented thoughtfully. 

CGI recommendation

The Chartered Governance Institution (CGI) has recommended that CUC adopt a phased approach to implementation, provide detailed supporting guidance, templates and case studies, and commit to an early review of how the Code operates in practice. UUK has similarly called for CUC to work with Advance HE to update training and development support, to publish supplementary materials featuring good practice and examples, and to publish an annual report reviewing themes from governance reviews.

CUC has committed to publishing further supporting guidance alongside the Code. That guidance – particularly on the quality standards for 'apply or explain' explanations and on governance effectiveness reviews – will be an important practical resource, and institutions should not finalise their implementation plans until it has been reviewed. However, the publication of the revised Code itself creates immediate obligations, and boards should begin the implementation process now.

The following roadmap is intended as a practical starting point. It does not represent formal CUC guidance and should be read alongside CUC's own materials as they are published.

Gap analysis, Code of Conduct and SIBM appointment: Steps to take now

• Gap analysis against 'must' provisions: The first priority is to identify any 'must' provisions in the Revised Code that the institution does not currently comply with. These provisions set the minimum expectations for claiming compliance with the Code. Any identified gap in a 'must' provision requires urgent corrective action. 

A practical approach is to work through each section of the Code systematically, marking each 'must' provision as: (a) already met; (b) partially met with a clear path to full compliance; or (c) not yet met and requiring immediate action.

• Gap analysis against 'should' provisions: For each 'should' provision that the Board does not intend to adopt, a published 'compelling rationale' must be prepared. The revised Code specifies that explanations "should be clear, specific, concise and informative, enabling stakeholders to understand how governance arrangements operate". Institutions should avoid boilerplate rationales. Each explanation should be tailored to the institution's specific context and circumstances.
• Governance/management boundary review: Given the intensified expectations in the strategy, risk, academic governance and executive accountability sections, boards should formally discuss and agree how they will maintain the distinction between constructive challenge and operational involvement. This is particularly important for the academic governance provisions, where the risk of overreach is most acute.
• Code of Conduct review: The revised Code requires the Board to develop, publish, follow and regularly reflect on compliance with a Code of Conduct. Institutions that do not already have a published Code of Conduct should treat this as an immediate priority.
• SIBM appointment: Where the Board does not already have a Senior Independent Board Member (distinct from the Chair), the Board should prioritise this appointment or adopt a considered and published rationale for why the role is configured differently.

Skills audits, risk frameworks and academic governance interface: Steps for the next six months

Advance HE recommends that institutions evidence a structured, monitored programme of induction and ongoing development for all governors, including student and staff members, underpinned by an up-to-date skills matrix which should have an eye on the institution's future strategic ambitions and link directly to the institution's strategic aims, including succession planning.

Governing bodies should undertake a skills audit against the revised Code's expectations, including the specific requirement for sufficient collective academic literacy. The results should inform an updated recruitment pipeline.

• Risk appetite and assurance framework review: The revised Code's detailed provisions on risk appetite, the risk management and internal control framework, and the assurance framework represent the most significant intensification of board-level expectations in the Code. 
  • Boards should review whether the current format and content of their risk reporting, assurance framework and financial reporting are capable of delivering the level of challenge and triangulation the revised Code now requires.
• Academic governance interface: The Board should hold a dedicated discussion with the Vice-Chancellor and the Chair of the Academic Board or Senate to agree how the board-senate interface will operate under the Revised Code. This should address: what assurance will flow to the board; in what form; how it will be triangulated with other reporting; and how the board will engage directly with academic communities without crossing into operational involvement.
• Individual board member performance review process: The revised Code introduces an annual individual performance review for each board member by the Chair, and of the Chair by the SIBM. Boards should design and agree a process for these reviews, including the feedback mechanisms that will inform each review and how compliance with the Code of Conduct will be assessed.
• Remuneration policy: Whether or not the Board intends to remunerate its members, the Revised Code requires a clearly stated rationale. This rationale should be agreed and published as part of the Code compliance process. For charitable HEIs, this process must begin with a legal review of the governing document and, where appropriate, advice on whether a Charity Commission application is required.

External reviews, published action plans and OfS consultation readiness: Steps for 2027 and beyond

• External governance effectiveness review: The revised Code mandates an independent external review every three years. Institutions that are due for such a review should commission it within the current or next academic year.

Those that are not yet due should note the date of their last external review and plan accordingly. Boards should await CUC's forthcoming guidance on governance effectiveness reviews before finalising the scope and format of their next review, as this guidance is expected to set quality standards for reviewers and review content.

•  Annual published board development action plan: The obligation to publish an annual board development action plan is entirely new. Institutions should establish the process for producing this document and consider how it will be linked to the outcomes of self-assessments and external reviews.
• OfS governance conditions consultation: The OfS has indicated it will consult formally on its ongoing conditions of registration on effective governance in early 2027. Institutions should ensure that their revised Code implementation documentation, their annual published action plan and their governance effectiveness review findings are in good order before that consultation launches, as they are likely to form the evidence base for demonstrating regulatory compliance under any updated conditions.
• Crosswalk mapping exercise: Every institution should undertake a systematic crosswalk mapping exercise across the revised Code, the OfS conditions, the Charity Governance Code (for charitable institutions) and the Freedom of Speech Act 2023 governance obligations. This exercise will identify where a single governance process can satisfy multiple frameworks, and where separate provision is required, helping institutions manage the overlapping compliance landscape efficiently.

12 priorities for implementing the revised CUC Code of Governance

The published revised Code establishes a comprehensive, demanding and materially strengthened governance framework. Its principal new features and implementation priorities can be summarised as follows:

1. Step change in governance intensity: CUC frames the revised Code as requiring, in many cases, "a step change in governance intensity, with deeper engagement, stronger challenge and greater focus on the institution's purpose and strategy".
2. New Section 1 on institutional leadership and purpose: Including provisions on succession planning, executive team capability assurance and structured stakeholder engagement, which have no equivalent in the 2020 Code.
3. Two-tier framework with published quality standard for explanations: 'Must' provisions are mandatory; 'should' provisions require a published rationale that is clear, specific, concise and informative.
4. Culture and Code of Conduct: A published Code of Conduct with a defined non-compliance process, a SIBM appointment, structured non-executive-only and SIBM-led sessions, and individual performance reviews for each board member and the Chair.
5. Significantly intensified financial and risk oversight: Including mandatory risk appetite, stress testing and scenario analysis, cashflow and balance sheet scrutiny, assurance framework review and a Finance Committee.
6. Academic governance as an active Board discipline: The shift from passive receipt of information to active assurance, with collective academic literacy required; boards should be careful to observe the academic subsidiarity principle and obtain assurance through, not in place of, their academic governance structures.
7. Dedicated academic risk management provisions: Including geopolitical risk, research ethics, misconduct, partnership governance parameters and exit criteria: significant new requirements for research-intensive institutions and those with TNE operations.
8. Mandatory triennial external effectiveness reviews and annual published action plans: Creating new accountability mechanisms; CUC's forthcoming guidance on review quality and content will be important.
9. Comprehensive Appendix A role descriptions: Including for Committee Chairs, all Board Members and Members of the Executive; the University Secretary's Board reporting line must take priority; the Executive must escalate matters of ethical significance without delay.
10. Remuneration: an open position but with charity law constraints: The Code requires a published rationale either way; charitable HEIs must secure the necessary legal powers before remunerating board members.
11. OfS governance conditions consultation in early 2027: Implementing the Revised Code is also preparation for a regulatory consultation that will draw directly on its framework.
12. Systematic gap analysis and crosswalk mapping are essential first steps: Across the Revised Code, OfS conditions, the Charity Governance Code and the Freedom of Speech Act 2023.