Last updated: 7 August 2026 | By CS Sapna Malpani, Practising Company Secretary, Bangalore
In the first five months of 2025, 85 companies filed draft IPO papers with SEBI, the busiest such stretch in more than a decade. A large share of them were sent back with observations, and the single most common reason a draft red herring prospectus stalls is not the numbers. It is the board. A company that spent three years perfecting its revenue chart but appointed its first independent director six weeks before filing walks into SEBI’s review with a corporate governance gap that no banker can paper over. This is the diagnostic that finds those gaps while you still have time to fix them.
A governance gap analysis is a structured audit of the distance between how your board runs today and what the Companies Act, 2013 and the SEBI listing framework will demand of you the day you list. Run it 18 months out and the fixes are routine. Run it after the DRHP is drafted and each gap becomes a filing delay measured in quarters. This guide gives IPO-bound founders, CFOs and company secretaries the exact checklist, the committee-by-committee mandate, the penalty each gap carries once you are listed, and a realistic timeline to close them.
- What it is: A pre-IPO corporate governance gap analysis maps your current board, committees, key managerial personnel and policies against Companies Act, 2013 and SEBI LODR requirements, and lists what must change before listing.
- Who must run it: Any company that intends to file a DRHP in the next 12 to 24 months, and every funded startup told by its bankers to “get IPO-ready”.
- The biggest gaps: Too few independent directors, no woman director, missing or wrongly-constituted audit, nomination and stakeholders committees, no company secretary or CFO on record, and no secretarial audit trail.
- The penalty once listed: Board composition default under LODR Regulation 17(1) draws a fine of ₹5,000 per day; a second consecutive quarter of default can push your scrip into the “Z” category with trading frozen.
- Time to act: Start 18 months before your target filing, independent directors, a full year of properly-minuted committee meetings, and a clean secretarial audit cannot be manufactured retrospectively.
What a corporate governance gap analysis actually is
Every private company runs its board informally. Founders, a couple of investor nominees, decisions taken over WhatsApp and ratified later. That works right up until the moment you decide to sell shares to the public, and then the rulebook changes overnight. A listed company in India answers to two masters at once: the Companies Act, 2013, administered by the Ministry of Corporate Affairs, and the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015. The corporate governance gap analysis is the exercise of laying your present-day board against both rulebooks and writing down, line by line, everything that does not yet comply.
It is not the same as your DRHP disclosure work. The prospectus describes your business; the gap analysis rebuilds your governance so that the description passes muster. It sits one layer below the offer document. If you have already read our guide on the 12-month pre-IPO compliance countdown, treat this as the deep dive into the governance line of that checklist, the part that has the longest lead time and the least room to catch up.
The problem: governance gaps have the longest cure time of anything in an IPO
You can restate a set of accounts in a few weeks. You can redraft a risk-factor section in days. You cannot conjure an independent director with a year of attendance behind them, and you cannot backdate an audit committee that never met. This is why governance sits on the critical path of every listing, and why it is the quiet reason IPOs slip.
Consider the board itself. SEBI’s LODR Regulation 17(1) requires a listed company’s board to have at least six directors, at least one woman director, and, where the chairperson is a non-executive unrelated to the promoter, at least one-third independent directors, rising to half the board where the chair is an executive or a promoter’s relative. Section 149 of the Companies Act sets the statutory floor beneath this. A founder-run startup with three directors, all executives, has not one gap but four, and each independent director takes months to identify, vet, appoint and season on the board so that their attendance record is real by the time the DRHP is filed.
The committees are worse, because they cannot exist on paper alone. An audit committee under Section 177 read with LODR Regulation 18 must meet at least four times a year with no more than 120 days between meetings. SEBI reviewers look at minutes, attendance and the actual gap between sittings. If your committee was constituted the same month you filed, the record shows it, and the observation letter follows. A year of clean minutes is not a document you draft; it is a year you have to have lived.
A real cost, not a hypothetical one
The consequences are priced in rupees and lost time. Under SEBI’s Standard Operating Procedure circular of 22 January 2020, once you are listed a Regulation 17(1) board-composition default costs ₹5,000 for every day it continues, and a Regulation 18(1) audit committee default ₹2,000 a day. Fail for two consecutive quarters on board composition or the audit committee and the stock exchange can move your scrip to the “Z” group and suspend trading in it. Before listing, the same gaps do not fine you, they simply cost you your slot, as SEBI returns the draft and the window you were chasing closes.
Diagram 1, The 18-month governance readiness runway
The seven governance gaps SEBI looks for first
A gap analysis worth the name checks far more than seven items, but these are the ones that recur in observation letters and that a founding team most often gets wrong.
1. Board composition. Six directors minimum, a woman director, and the right proportion of independent directors under LODR Regulation 17 and Section 149. Our detailed walk-through of what the board must look like before you file sets out the arithmetic.
2. The audit committee. At least three directors, two-thirds of them independent, every member financially literate and the chair independent, under Section 177 and Regulation 18. Four meetings a year, gap never more than 120 days.
3. The nomination and remuneration committee. At least three non-executive directors, half of them independent, chaired by an independent director, under Section 178 and Regulation 19. This committee owns your board-appointment policy and executive pay, both disclosed in the prospectus.
4. The stakeholders relationship committee. Chaired by a non-executive director under Regulation 20, it handles shareholder and investor grievances. It is small, it is often forgotten, and its absence is an easy observation for a reviewer to raise.
5. Key managerial personnel. Section 203 requires a managing director or chief executive, a whole-time company secretary and a chief financial officer on record. Many startups run for years without a qualified company secretary; that person cannot be hired the week before filing and be credible.
6. Secretarial audit. Section 204 read with LODR Regulation 24A makes a secretarial audit in Form MR-3, signed by a practising company secretary, mandatory for listed companies. The auditor’s findings on your past compliance become part of the diligence record. A first secretarial audit almost always surfaces old ROC lapses that then need regularising, which is why it belongs at T−9 months, not T−1.
7. Policies and the insider-trading framework. A listed company needs a code of conduct, a related-party transaction policy, a whistle-blower and vigil mechanism under Section 177(9), a board diversity policy, and a full insider-trading code under the SEBI (Prohibition of Insider Trading) Regulations, 2015, including a structured digital database of unpublished price-sensitive information and a trading-window mechanism. None of these are hard to draft. All of them are expected to be in force, not freshly signed.
Diagram 2, Committee mandate and the penalty for getting it wrong once listed
| Requirement | Governing provision | Core rule | Listed-company default fine |
|---|---|---|---|
| Board composition | Sec 149 / LODR Reg 17 | 6+ directors, 1 woman, 1/3 to 1/2 independent | ₹5,000 per day |
| Audit committee | Sec 177 / LODR Reg 18 | 3+ members, 2/3 independent, 4 meetings/year | ₹2,000 per day |
| Nomination & remuneration committee | Sec 178 / LODR Reg 19 | 3+ non-exec, half independent, independent chair | ₹2,000 per day |
| Stakeholders relationship committee | LODR Reg 20 | Non-executive chair, handles grievances | ₹2,000 per day |
| Company secretary & CFO | Sec 203 | Whole-time CS + CFO + MD/CEO on record | ₹5 lakh company + ₹50,000 officer |
| Secretarial audit (MR-3) | Sec 204 / LODR Reg 24A | Annual audit by a practising CS | ₹2 lakh company + ₹50,000 officer |
Per-day fines follow SEBI’s SOP circular of 22 January 2020. Section fines are the statutory maxima under the Companies Act, 2013. A second consecutive quarter of default on Reg 17(1) or 18(1) can move the scrip to the “Z” category and suspend trading.
What you must do now: running the gap analysis in seven steps
Here is the sequence a company secretary follows to turn “we should get IPO-ready” into a governance base that survives SEBI’s review.
Step 1, Fix the target and count backwards. Set a realistic DRHP filing month and place it at T−0. Everything below hangs off that date. If you cannot yet name a quarter, you are not 18 months out, you are earlier, which is good news.
Step 2, Audit the board on paper. List every director, their category (executive, non-executive, independent), gender, and date of appointment. Compare against LODR Regulation 17. Almost every startup finds it is short on independent directors and has no woman director. Both take the longest to fix, so they start today.
Step 3, Map the committees against reality. For each of the audit, nomination and remuneration, and stakeholders relationship committees, check composition, chair, and whether it has actually met with proper minutes. A committee that exists in a resolution but has never sat is a gap, not a tick.
Step 4, Check your KMP. Confirm a whole-time company secretary, a CFO and a managing director or CEO are appointed and filed with the Registrar. If your company secretary seat is vacant, fill it first, this is the person who will run the rest of the exercise.
Step 5, Commission the secretarial audit early. Get Form MR-3 done at T−9 months, not at the end. Its whole value is that it surfaces past ROC lapses, unfiled MGT-14 resolutions, a missed related-party transaction approval, an overdue annual return, while there is still time to regularise them, if needed through the compounding route.
Step 6, Adopt the policy suite and the insider-trading framework. Put the code of conduct, RPT policy, whistle-blower mechanism, board diversity policy and the SEBI insider-trading code in place, with the structured digital database and trading window live. Circulate them, train the board, and record adoption in the minutes.
Step 7, Season the record. From here to filing, run every committee on schedule, minute every meeting properly, and complete an annual board evaluation. The point of starting early is precisely this: to hand SEBI a year of governance that was lived, not assembled.
The deeper implication for 2026 filers
According to CS Sapna Malpani, the companies that clear SEBI cleanly in this cycle are the ones that treated governance as a build with an 18-month lead time, not a document produced alongside the prospectus. The SEBI (Issue of Capital and Disclosure Requirements) Regulations were amended through 2025 and 2026 to streamline the disclosure and lock-in mechanics, but none of those changes shortened the time it takes to season a board. If anything, with draft filings at their highest in over a decade, reviewers have more comparators and less patience for a governance record that was clearly built in a hurry.
The prediction for the next 12 months is simple: expect SEBI to keep returning drafts where the committee minutes and independent-director tenure do not match the story the prospectus tells. The companies that win the race to list will not be the ones with the best bankers. They will be the ones whose company secretary started the gap analysis a year and a half before anyone drafted a word of the offer document.
How this differs from your DRHP work and your annual filings
Founders often collapse three separate exercises into one and lose the thread. The governance gap analysis rebuilds your board and committees so they comply. The DRHP is the disclosure document that describes the company and the offer, covered separately in our guide to the SEBI ICDR pre-IPO and DRHP readiness rules. Your annual ROC compliance, AOC-4, MGT-7, board and general meetings, continues underneath all of it and must be spotless, because the secretarial audit will read every past filing. Think of the gap analysis as the foundation, the annual filings as the walls that must already be sound, and the DRHP as the facade you show the market. Build them out of order and the facade cracks under SEBI’s review.
- ✓ A pre-IPO governance gap analysis has the longest cure time of anything on the listing path, start it 18 months before filing.
- ✓ LODR Regulation 17(1) needs 6+ directors, a woman director, and one-third to one-half independent; the default fine once listed is ₹5,000 a day.
- ✓ The audit committee (Sec 177 / Reg 18) must meet 4 times a year with no more than 120 days between meetings, and the minutes must prove it.
- ✓ Section 203 requires a whole-time company secretary, a CFO and an MD/CEO on record; a missing CS is the gap that stalls everything else.
- ✓ Commission the secretarial audit in Form MR-3 at T−9 months so old ROC lapses surface while there is still time to regularise them.
- ✓ A second consecutive quarter of default on board composition or the audit committee can push your scrip into the “Z” category with trading suspended.
- ✓ With 85 DRHPs filed in five months of 2025, a decade high, SEBI reviewers reward governance that was lived, not assembled.
Sources and references
- SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, Regulations 17 to 21, 24A, sebi.gov.in
- Companies Act, 2013, Sections 149, 177, 178, 203, 204, indiacode.nic.in
- SEBI SOP circular on fines for non-compliance with LODR, 22 January 2020, analysis at AZB & Partners
- SEBI (Prohibition of Insider Trading) Regulations, 2015, structured digital database and trading window, sebi.gov.in
- SEBI (Issue of Capital and Disclosure Requirements) (Amendment) Regulations, 2026, overview at MMJC
- Report on 2025 DRHP filing volumes, 85 draft filings January to May, a decade high, Business Standard
Run a governance gap analysis before your bankers do. CS Sapna Malpani builds IPO-ready boards, committees and secretarial audit trails for companies across Bangalore and India.
- Check exposure on past lapses with the MCA Penalty Calculator
- See the full scope of an IPO compliance readiness engagement
- Read the companion 12-month pre-IPO compliance countdown
- Contact the office or message on WhatsApp for a governance gap review
Frequently asked questions
What is a corporate governance gap analysis for an IPO?
A corporate governance gap analysis is a structured audit that compares a company’s current board, committees, key managerial personnel and policies against what the Companies Act, 2013 and the SEBI LODR Regulations require of a listed company. It produces a written list of every gap, too few independent directors, a missing woman director, an audit committee that has never met, no company secretary on record, along with the fix and the lead time each one needs. For an IPO-bound company it is the exercise that prevents SEBI from returning the draft prospectus on governance grounds.
How long before an IPO should governance work start?
About 18 months. Some governance fixes are quick, but the slowest ones set the timeline: identifying, appointing and seasoning independent directors, and building a full year of properly-minuted committee meetings. Neither can be backdated. A company that begins its governance gap analysis a year and a half before its target DRHP filing has time to close every gap comfortably; one that starts six months out is usually forced to delay the filing.
What board composition does SEBI require for a listed company?
Under LODR Regulation 17(1) a listed company’s board must have at least six directors and at least one woman director. Where the chairperson is a non-executive director unrelated to the promoter, at least one-third of the board must be independent; where the chair is an executive or a promoter’s relative, at least half the board must be independent. Section 149 of the Companies Act sits beneath this as the statutory minimum. A board default carries a fine of ₹5,000 per day once the company is listed.
Which committees must a company set up before listing?
At a minimum, an audit committee under Section 177 and Regulation 18, a nomination and remuneration committee under Section 178 and Regulation 19, and a stakeholders relationship committee under Regulation 20. Companies in the top 1,000 listed entities by market capitalisation also need a risk management committee under Regulation 21. Each committee must be correctly composed, correctly chaired, and, the part companies miss, must actually meet on schedule with minutes on record well before the DRHP is filed.
Is a secretarial audit needed before an IPO?
Yes. Section 204 read with LODR Regulation 24A makes an annual secretarial audit in Form MR-3, signed by a practising company secretary, mandatory for listed companies. It is best commissioned around nine months before filing, because a first secretarial audit almost always surfaces past ROC lapses, unfiled resolutions, a missed related-party approval, an overdue annual return, that then need regularising, sometimes through compounding, while there is still time.
What happens if governance gaps are found after the DRHP is filed?
SEBI reviews the draft and issues observations, which the company must answer before it can proceed. Governance gaps, an independent director appointed too late, committee minutes that do not match the disclosed timeline, typically mean amending the draft and refiling, which pushes the listing back by one or more quarters. Because governance fixes carry the longest lead time, a gap found at the DRHP stage often costs the company its intended IPO window rather than a few weeks.