Strategic Business Leader · Governance scope and approaches

Rules-Based vs Principles-Based Governance Approaches in ACCA SBL

Updated 11 October 2026 · Fact-checked

A principles-based approach sets broad principles and lets companies comply or explain why they did not, as in the UK Corporate Governance Code. A rules-based approach sets mandatory requirements enforced by law, as in Sarbanes-Oxley. To answer, define each, apply it to the scenario, then weigh strengths and weaknesses.

Understand Rules-Based vs Principles-Based Governance Approaches

Every country must decide how to make companies governed well. There are two broad choices. You can tell companies exactly what to do and punish them if they do not. Or you can set out good practice and let companies decide how to meet it.

The principles-based approach sets out broad principles and provisions of good practice. Companies follow them or explain why they have not. This is the comply or explain approach. It is used in the UK Corporate Governance Code and in many other countries. Compliance is usually a listing requirement, not a criminal matter. Shareholders judge the explanation and act on it by voting, engaging or selling.

The rules-based approach sets detailed, mandatory requirements backed by law, with penalties for breach. The main example is the US Sarbanes-Oxley Act (SOX), passed after scandals such as Enron and WorldCom. It applies to companies listed in the US. It requires, for example, that senior executives certify the financial statements, and that management report on and the auditor attest to internal control over financial reporting. It also created the Public Company Accounting Oversight Board to oversee auditors, and it restricts some non-audit services provided by the auditor.

Neither approach is better in every case. Rules give certainty and are easy to enforce, but they cost money, can be met in form only and may not cover new situations. Principles are flexible and fit different company sizes and sectors, but they depend on honest, informed shareholders and can be used as an excuse for weak practice. Your marks come from weighing these against the facts in the scenario.

In SBL you rarely just describe the two. You are asked to advise a board, a regulator or an investor in a specific company. Link your choice to the company's size, ownership, country, history of failure and the strength of its shareholders.

Key rules to remember

Principles-based approach: Comply or explain = follow the provision, or disclose the departure and give reasons; Typical of the UK Corporate Governance Code. Enforced mainly through disclosure and shareholder pressure.
Rules-based approach: Comply or face legal penalty; Typical of Sarbanes-Oxley in the US. No option to explain a departure.
Key SOX features: Executive certification of accounts + management report on internal control + auditor attestation + PCAOB oversight + limits on auditor non-audit services; Use these as concrete evidence when you discuss a rules-based approach.
Evaluation frame: Strengths vs weaknesses, then apply to the scenario; Always give a reasoned conclusion, not just two lists.

How to solve Rules-Based vs Principles-Based Governance Approaches questions

Use this method for any question on governance approaches. It keeps you on the requirement and earns application marks.

1Read the requirement. Decide whether you must explain, compare, evaluate, advise or recommend.
2Define the two approaches in one or two lines each. Name an example, such as the UK Code for principles and SOX for rules.
3Pick scenario facts that matter: country, listing, size, ownership, past scandals, strength of shareholders, cost sensitivity.
4List strengths and weaknesses of each approach, but only those that fit the facts. Link every point to the scenario.
5Weigh the points. Say which approach, or which mix, suits this company or country better and why.
6Add a risk or limitation, such as box-ticking under principles or high cost under rules.
7Finish with a clear conclusion or recommendation that answers the requirement directly.
8Check professional skills: a clear structure, a balanced view and a recommendation the reader can act on.

Quickest way: Define, apply, weigh, conclude

When to use it: Use when time is short and the question asks you to compare or advise on governance approaches.

Write one line defining each approach with an example.
Pick the two or three scenario facts that decide the answer.
Give two strengths and two weaknesses of each, tied to those facts.
Write a one or two line conclusion that picks an approach or a blend.
Check that every point refers to the company and not to governance in general.

Common mistakes in Rules-Based vs Principles-Based Governance Approaches

Writing a textbook list of strengths and weaknesses with no link to the scenario.
Students memorise the points and reproduce them under pressure.
Fix: Start from the scenario facts. Use only the points that fit and say why they fit.
Saying principles-based means companies can ignore the code.
Students confuse flexibility with optional.
Fix: State that departures must be disclosed and explained, and that shareholders can challenge poor explanations.
Saying a rules-based approach guarantees good governance.
Mandatory sounds stronger.
Fix: Point out that rules can be met in form only, can lag behind new risks and are costly. Compliance is not the same as good behaviour.
Describing SOX as a voluntary code or as a UK requirement.
Students mix up the two regimes.
Fix: Remember SOX is US law that applies to US-listed companies, with legal penalties. The UK Code is principles-based.
Ending without a conclusion.
Students run out of time after listing points.
Fix: Reserve the last minutes for a direct recommendation. Say which approach fits and why, or suggest a blend.
Treating the two approaches as the only options and as pure opposites.
Textbooks present them in a simple contrast.
Fix: Note that most systems mix both. Principles-based codes sit on top of company law, and rules-based systems still need judgement.

Worked examples

Example 1

Zentra Ltd is a fast-growing company whose shares are about to be listed in a country with no governance code. Its chair asks you to explain the difference between a principles-based and a rules-based approach and to advise which the regulator should adopt. Zentra has many small, widely spread shareholders and a history of weak controls in the local market.

Show the solution

Define: a principles-based approach sets broad good practice that companies follow or explain; a rules-based approach sets mandatory legal requirements with penalties.
Examples: the UK Corporate Governance Code is principles-based, using comply or explain. Sarbanes-Oxley in the US is rules-based and legally enforced.
Apply the facts: the market has a history of weak controls and Zentra's shareholders are small and spread out. Small shareholders have limited ability to challenge explanations, which weakens comply or explain.
Rules-based strengths here: clear, enforceable minimum standards, legal penalties that deter, and certainty for investors who cannot monitor the company closely.
Rules-based weaknesses: high compliance cost for a growing company, and a risk that managers meet the rules in form only.
Principles-based strengths: flexible and cheaper, and it encourages the board to think about what suits Zentra. Weakness: it relies on informed investors and an active market that may not exist here.
Conclusion: in a new market with weak controls and dispersed investors, a rules-based core of minimum requirements is more suitable at first, with principles-based guidance added as investors and regulators mature.

Answer: A principles-based approach uses comply or explain, while a rules-based approach uses mandatory, enforceable rules. Given weak local controls and dispersed small shareholders, the regulator should adopt a rules-based core of minimum standards, supported by principles-based guidance over time.

Example 2

Berrow plc, listed in the UK, did not appoint a majority of independent non-executive directors to its board, a provision of the UK Corporate Governance Code. An investor asks whether Berrow has broken the law and what the investor can do. Explain.

Show the solution

State the approach: the UK Code is principles-based and works on comply or explain. It is not a criminal rule in itself.
Apply: Berrow is allowed to depart from a provision, but it must disclose the departure and give a reasoned explanation. The listing rules require this statement, so failing to disclose would be a problem.
Assess the explanation: the investor should judge whether it is credible, for example a short-term situation with a plan to correct it, or a weak, unsupported reason.
Investor actions: raise concerns with the chair or senior independent director, engage with other shareholders, vote against the re-election of directors or the remuneration report, or sell the shares.
Limitation: this works only if shareholders pay attention and have enough power. If the explanation is weak and shareholders do not react, the system fails.
Conclude: not appointing a majority of independent directors is not itself a breach of the law, but Berrow must explain and the investor can use voting and engagement to hold the board to account.

Answer: Berrow has not necessarily broken the law. Under comply or explain it may depart from the provision if it discloses and explains the departure. The investor should assess the explanation and, if it is weak, engage, vote against directors or sell.

Exam tips

Always link your answer to the scenario: country, listing, size and shareholder base decide which approach fits.
Name a real example for each approach. The UK Code for comply or explain and Sarbanes-Oxley for rules gives you concrete evidence.
Give a reasoned conclusion. A balanced list with no recommendation loses professional skills marks.
When asked to advise a regulator or board, mention cost, flexibility, enforcement and the risk of box-ticking.
Show scepticism about explanations and compliance: ask whether a company really follows the spirit and not only the wording.

Practice questions from Governance scope and approaches

Rules-Based vs Principles-Based Governance Approaches in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Rules-Based vs Principles-Based Governance Approaches: frequently asked questions

What is the main difference between rules-based and principles-based governance?

A rules-based approach sets mandatory requirements enforced by law, with penalties for breach. A principles-based approach sets broad good practice that companies follow or explain why they did not. The first stresses compliance, the second stresses judgement and disclosure.

What does comply or explain mean in the ACCA SBL exam?

It means a company follows a code provision, or discloses that it has not and gives reasons. Shareholders then decide whether the reasons are acceptable. Use it as the key feature of the principles-based approach.

Is Sarbanes-Oxley rules-based or principles-based?

It is rules-based. It is US law with legal penalties and applies to companies listed in the US. It requires, for example, executive certification of accounts and reporting on internal control over financial reporting.

Which approach is better for corporate governance?

Neither is better in every case. Rules give certainty and enforcement but cost more and can be met in form only. Principles give flexibility but need active, informed shareholders. In the exam, choose the one that fits the scenario and justify it.