Skip to content
Business, Operations & Fundraising·Lesson 49 of 49

Governance, Risk & Compliance for a Mature Program

Build the unglamorous infrastructure that protects a program at scale: a real board, financial controls, youth-protection and insurance, and a compliance calendar.

Sign in to track progress, earn XP, and save lessons.

Once a team handles tens of thousands of dollars and dozens of minors, amateur governance becomes a liability. Mature programs run like the small nonprofits they legally are.

A functioning board. If you operate as a 501(c)(3) or booster club, you have a board with real fiduciary duty — not a name on paper. Best practices: at least three unrelated directors, regular minuted meetings, a conflict-of-interest policy (the IRS asks about one on Form 1023), and defined officer roles (chair, treasurer, secretary). The board approves the budget and provides oversight independent of day-to-day operations.

Financial controls (segregation of duties). The single biggest fraud and error risk in small nonprofits is one person controlling all the money. Implement:

  • Two signatures (or two-person approval) for expenditures above a threshold.
  • The person who writes checks is not the person who reconciles the bank statement.
  • Monthly reconciliation reviewed by someone other than the bookkeeper.
  • A simple expense-reimbursement policy with receipts. These controls also directly protect against the private-benefit problems that sank Capital Gymnastics Booster Club.

Youth protection. FRC teams work with minors, and FIRST has Youth Protection Program expectations (screened mentors, multi-adult supervision, training). Treat compliance as mandatory, not optional — it protects students first and the organization second. Confirm and follow the current FIRST youth-protection requirements every season.

Insurance and liability. Mature programs carry appropriate coverage (general liability; consider directors-and-officers coverage for the board). Understand what your school or fiscal sponsor's policy covers and where the gaps are. Power tools, travel, and public events all carry real risk.

The compliance calendar. Build a recurring calendar so nothing legal slips:

  • Annual IRS filing (Form 990-N / 990-EZ / 990) — three missed years auto-revokes exemption.
  • State nonprofit/charitable-solicitation renewals (varies by state).
  • Insurance renewals.
  • Youth-protection screening/training renewals.
  • Board meetings and the annual budget approval.

Records retention. Keep articles, bylaws, the IRS determination letter, board minutes, financial records, and sponsor agreements in a durable, team-owned location. A funder or auditor may ask for any of these.

The payoff: governance is invisible when it works and catastrophic when it fails. A team with a real board, segregated financial duties, current youth protection, and a compliance calendar is one that funders trust with large gifts, that survives leadership turnover, and that never wakes up to a revoked exemption or a preventable incident. This infrastructure is the quiet foundation under every Hall of Fame program.

Key takeaways

  • Run a real board (3+ unrelated directors, minuted meetings, conflict-of-interest policy) with genuine fiduciary oversight.
  • Segregate financial duties — separate check-writing from reconciliation and require dual approval over a threshold — to prevent fraud and private-benefit problems.
  • Treat FIRST youth-protection requirements and appropriate insurance (general liability, consider D&O) as mandatory infrastructure.
  • Maintain a compliance calendar (IRS 990 filings, state renewals, insurance, youth-protection training) and durable team-owned records.

Lesson quiz

Required

Answer all 3 questions correctly to complete this lesson.

1.The IRS Form 990 specifically asks a nonprofit whether it has adopted which governance document central to managing board members' competing interests?

2.Which set of duties best describes the core fiduciary responsibilities of a mature nonprofit's board members?

3.What is a compliance risk if a 501(c)(3) program fails to manage conflicts of interest or allows insiders to receive excess benefits?

Answer every question to submit.