Vision 2030 Corporate Governance: Documentation Requirements for Saudi Listed Companies
Saudi Arabia's CMA Corporate Governance Regulations set extensive documentation requirements for Tadawul-listed companies. Here's what's required, common gaps, and how to review governance documentation.
Vision 2030 has transformed Saudi Arabia's corporate governance landscape. The Capital Market Authority's Corporate Governance Regulations, combined with Tadawul's listing requirements, create one of the most comprehensive governance documentation frameworks in the region. With the number of Tadawul-listed companies growing through the IPO pipeline — driven by Vision 2030's privatisation agenda — governance documentation quality has become a differentiator for investor confidence.
The CMA's approach combines mandatory provisions with guidance provisions on a "comply or explain" basis. Listed companies must not only have governance structures in place but must document and disclose them with increasing transparency. Generic governance disclosures are no longer sufficient — investors, the CMA, and proxy advisers expect company-specific explanations with evidence.
CMA Corporate Governance Regulations: Key Documentation
Mandatory Board Documentation
| Document | CMA Requirement |
|---|---|
| Board charter | Written charter defining board role, responsibilities, authorities, meeting procedures |
| Board member selection criteria | Documented criteria for nominating and selecting board members |
| Independence criteria | Documented assessment of each independent director's independence |
| Board diversity policy | Policy addressing gender and other forms of diversity |
| Related party transaction policy | Procedures for identifying, approving, and disclosing related party transactions |
| Disclosure policy | Framework for continuous disclosure and material information management |
| Insider trading policy | Prevention of insider dealing, restricted trading periods, notification requirements |
| Code of conduct | Ethical standards for directors, officers, and employees |
| Whistleblowing policy | Mechanism for reporting violations confidentially |
| Conflict of interest policy | Identification, management, and disclosure of conflicts |
Committee Documentation
The CMA requires specific committees with documented terms of reference:
Audit Committee
| Document Element | Requirement |
|---|---|
| Terms of reference | Board-approved TOR covering all CMA-required responsibilities |
| Financial reporting oversight | Review of financial statements, accounting policies, significant judgements |
| Internal audit oversight | Review of internal audit plan, reports, and effectiveness |
| External audit oversight | Recommendation of external auditor, review of audit plan and findings |
| Risk management | Review of risk management framework and internal controls |
| Compliance | Oversight of regulatory compliance programme |
| Meeting minutes | Documented discussions, decisions, and recommendations to the board |
Remuneration and Nomination Committee
| Document Element | Requirement |
|---|---|
| Terms of reference | Board-approved TOR covering nomination and remuneration functions |
| Remuneration policy | Board-approved policy for directors and senior executives |
| Nomination procedures | Process for identifying, evaluating, and recommending board candidates |
| Performance evaluation | Annual evaluation of board, committees, and individual directors |
| Succession planning | Documented succession plan for board and key management positions |
| Independence assessment | Annual assessment of independent directors' continuing independence |
Risk Management Committee (If Established)
| Document Element | Requirement |
|---|---|
| Terms of reference | Risk oversight responsibilities, risk appetite, emerging risks |
| Risk management framework | Board-approved risk management framework |
| Risk appetite statement | Quantitative and qualitative risk parameters |
| Key risk register | Documented key risks with assessment and mitigation plans |
Annual Report Governance Disclosures
The CMA requires extensive governance disclosures in the annual report:
| Disclosure | Content |
|---|---|
| Board composition | Members, independence status, qualifications, experience, other directorships |
| Board meetings | Number of meetings, attendance records for each director |
| Committee reports | Activities, membership, and meeting attendance for each committee |
| Remuneration disclosure | Board and senior executive remuneration — aggregate and individual |
| Related party transactions | Details of all transactions with related parties |
| Internal controls | Board assessment of internal controls effectiveness |
| Risk management | Key risks and risk management approach |
| Compliance record | Any penalties or sanctions imposed by regulatory authorities |
| Governance deviation | Explanation for any CMA governance provisions not applied |
ESG Reporting in Saudi Arabia
Current ESG Landscape
ESG reporting in Saudi Arabia is evolving rapidly, driven by Vision 2030's sustainability objectives and international investor expectations:
| Development | Status |
|---|---|
| Tadawul ESG disclosure guidance | Published; voluntary but increasingly expected |
| CMA sustainability disclosure | Requirements under development, aligned with ISSB |
| Saudi Green Initiative | Driving climate-related disclosure expectations |
| GOSI ESG requirements | Government pension fund increasingly considering ESG factors |
| International investor expectations | MSCI, FTSE Russell ESG ratings driving disclosure |
ESG Documentation Recommended
| Document | Purpose |
|---|---|
| ESG/sustainability report | Annual report on environmental, social, and governance performance |
| GHG emissions data | Scope 1 and 2 emissions, with Scope 3 where material |
| Climate risk assessment | Assessment of climate-related risks and opportunities |
| Workforce data | Saudisation ratios, gender diversity, training investment |
| Health and safety records | Lost time injury rates, safety programme documentation |
| Community investment | Social contributions aligned with Vision 2030 objectives |
| Anti-corruption programme | Policies and procedures documentation |
Saudisation (Nitaqat) Documentation
Unique to Saudi Arabia, Nitaqat compliance requires documented workforce data:
| Document | Requirement |
|---|---|
| Saudisation ratios | Current ratios by job category against Nitaqat targets |
| Saudi employee records | Employment contracts, GOSI registration, qualification records |
| Training and development plans | Plans for developing Saudi employees |
| Nitaqat classification | Current band (Platinum, Green, Yellow, Red) with supporting data |
Common Governance Documentation Gaps
Gap 1: Generic Board Charter
Board charters that use template language without reflecting the company's specific circumstances, industry, and strategic priorities. The CMA expects charters to be tailored to the company.
Gap 2: Inadequate Independence Assessment
Independent director assessments that are a checkbox exercise rather than a substantive evaluation of each director's relationships, interests, and potential conflicts. The CMA's independence criteria are specific and must be documented for each independent director.
Gap 3: Related Party Transaction Gaps
Related party transactions not identified, not properly approved through the required process, or not disclosed in the annual report. This is a high-risk area for CMA enforcement.
Gap 4: Remuneration Disclosure Insufficiency
Remuneration disclosures that aggregate rather than individualise, or that omit variable components, benefits, and long-term incentives. The CMA expects transparent individual disclosure.
Gap 5: ESG Reporting Without Data
ESG reports with qualitative statements ("we are committed to sustainability") without quantitative data. Investors and rating agencies require specific metrics, targets, and progress reporting.
Reviewing Governance Documentation
Board and Committee Documentation Review
| Criterion | Weight | What to Check |
|---|---|---|
| CMA compliance | 3 | All mandatory CMA governance provisions addressed |
| Company specificity | 3 | Documents tailored to the company, not generic templates |
| Independence rigour | 2 | Substantive independence assessments for each INED |
| Related party controls | 2 | Comprehensive identification and approval procedures |
| Disclosure completeness | 2 | All annual report governance disclosures covered |
ESG Documentation Review
| Criterion | Weight | What to Check |
|---|---|---|
| Quantitative data | 3 | Specific metrics with year-on-year comparison |
| Vision 2030 alignment | 2 | ESG initiatives aligned with national strategy |
| Saudisation compliance | 2 | Nitaqat data current and accurately reported |
| Climate disclosure | 2 | Climate risks and opportunities assessed |
| Target setting | 1 | Measurable ESG targets with progress reporting |
Frequently Asked Questions
Which CMA governance provisions are mandatory vs guidance?
The Corporate Governance Regulations clearly distinguish mandatory provisions (must comply) from guidance provisions (comply or explain). Mandatory provisions include board composition requirements, audit committee requirements, and disclosure obligations. Guidance provisions include recommended practices that companies should apply or explain why they haven't.
Do all Tadawul-listed companies need ESG reports?
Currently, ESG reporting is voluntary but strongly encouraged. Tadawul's ESG disclosure guidance sets expectations, and international index inclusion (MSCI, FTSE Russell) effectively requires it. The CMA is developing mandatory sustainability disclosure requirements aligned with ISSB standards.
How does Saudi governance compare to international standards?
The CMA's Corporate Governance Regulations draw from OECD Principles, UK Corporate Governance Code, and regional best practice. They are broadly comparable to international standards, with specific provisions reflecting the Saudi context (e.g., Sharia compliance considerations, Saudisation requirements, Vision 2030 alignment).
Can AI review help with governance documentation?
AI review can check governance documentation for CMA provision coverage, company specificity versus generic language, disclosure completeness in annual reports, consistency across governance documents, and ESG data quality. Assessment of governance effectiveness and regulatory compliance requires qualified governance professionals.
Key Takeaways
- Vision 2030 has driven significant governance reform — documentation requirements are more extensive and disclosure expectations higher than ever.
- Board charters, committee TORs, and governance policies must be company-specific — generic templates are insufficient.
- Independence assessments must be substantive — documented for each independent director against CMA criteria.
- Related party transaction documentation is a high-risk area — comprehensive identification, approval, and disclosure procedures are essential.
- ESG reporting is moving from voluntary to expected — quantitative data with Vision 2030 alignment is increasingly required.
- Saudisation (Nitaqat) documentation is unique to Saudi Arabia and forms part of the governance and social reporting framework.
- AI review checks CMA coverage, specificity, and disclosure completeness — governance adequacy requires qualified professionals.
This article is for informational purposes only. CMA Corporate Governance Regulations and Tadawul listing requirements are subject to amendment. Consult a qualified governance professional, company secretary, or legal adviser for guidance specific to your listed company.