Tax governance used to be the concern of large corporates with internal tax teams and Senior Accounting Officer obligations. That is no longer true. Boards, investors, lenders and HMRC increasingly expect mid-market businesses to demonstrate that their tax affairs are properly controlled — that someone owns the risk, that there is a framework, and that the business can evidence its approach. This guide explains what a tax governance framework actually is, why it matters now, and how a business without a tax department can build one.
What tax governance actually means
Tax governance is the system of oversight, controls and accountability that ensures a business manages its tax affairs deliberately rather than by accident. It is not about paying more tax, and it is not a compliance checklist. It is the answer to a simple question that surprisingly few mid-market businesses can answer cleanly: who is responsible for our tax position, how do we know it is right, and how would we prove that to someone who asked?
A governance framework brings structure to that question. It defines who owns tax risk, how decisions are made, what controls exist to catch errors, and how the whole thing is documented. In a large corporate this is formalised and resourced. In a mid-market business it can be proportionate and lightweight — but its absence is increasingly noticed at exactly the moments that matter.
Why it matters now, even for smaller businesses
Three forces have pushed tax governance down from the largest corporates into the mid-market:
- HMRC's direction of travel. HMRC increasingly assesses not just whether returns are correct, but whether a business has reasonable systems and controls to get them right. A demonstrable framework is part of showing reasonable care — and a defence if something goes wrong.
- Investor and lender expectations. Private equity, banks and other funders now probe tax governance as part of their risk assessment. A business that cannot demonstrate control of its tax affairs looks riskier — and is priced accordingly.
- Board accountability. Directors carry personal responsibility for the business's affairs, including tax. Boards increasingly want assurance that tax risk is owned and managed, not left to chance.
The result is that "we have a good accountant who files the returns" is no longer a sufficient answer. Filing is not governance. Governance is the layer that ensures the filing is right, the risks are understood, and the business can prove it.
📥 Free download: the OHT Decision Framework
Building tax governance is one of the core functions of senior tax leadership. The OHT Decision Framework helps you assess whether your business has the oversight it needs. Download the OHT Decision Framework →
The components of a tax governance framework
A proportionate mid-market framework does not need to be elaborate. It needs to cover, in a way that fits the business:
- Ownership and responsibility. A clear allocation of who owns the tax position overall, and who is responsible for each tax (corporation tax, VAT, employment taxes, and so on). The most common governance failure is simply that no one owns it.
- A tax risk register. A documented view of where the business's material tax risks sit, their likelihood and impact, and what is being done about each. This is the single most valuable governance artefact a mid-market business can have.
- Controls. The checks that catch errors before they become liabilities — review processes, reconciliations, sign-offs, and the segregation of who prepares versus who reviews.
- A tax policy or strategy. A short statement of the business's approach to tax — its appetite for risk, its commitment to compliance, and how decisions are made. Increasingly expected by investors and, for larger businesses, sometimes required to be published.
- Documentation and evidence. The records that allow the business to demonstrate its approach — to HMRC, to a buyer, to the board.
- Reporting. A regular rhythm of bringing tax risk and position to the board, so oversight is active rather than annual.
The tax risk register: where to start
If a business does only one thing, it should build a tax risk register. It is the foundation everything else rests on, and it is achievable without a tax department. A risk register is simply a documented list of the business's tax risks — an aggressive R&D claim, an undocumented intra-group arrangement, contractor status uncertainty, an overseas permanent-establishment question — each with an assessment of likelihood and impact and a note of the action being taken.
The value is twofold. First, the act of building it forces someone to look across the whole business and ask "where could tax go wrong?" — a question that often surfaces risks no one had consciously registered. Second, it becomes the evidence that the business is managing tax deliberately, which is exactly what HMRC, investors and boards want to see. A risk register is the difference between "we think we're fine" and "here is how we know, and here is what we are doing about what we are not."
To make that concrete, here is what a handful of rows from a real mid-market risk register might look like. The point is not the format — it is that each risk is named, scored, owned, and has an action against it:
| Tax risk | Likelihood | Impact | Owner | Mitigating action |
|---|---|---|---|---|
| R&D claim includes borderline qualifying activity | Medium | High | FD | Independent technical review before submission; contemporaneous project records retained |
| Intra-group management charge not supported by an agreement or benchmark | High | Medium | Head of Tax (outsourced) | Written intra-group agreement in place; charge benchmarked and documented |
| Contractor engaged off-payroll may be inside IR35 | Medium | High | HR / Finance | Status determination statements issued; annual review of working practices |
| Overseas activity may create a permanent establishment | Low | High | Head of Tax (outsourced) | Activity mapped against treaty PE thresholds; position documented and monitored |
| VAT partial-exemption method no longer reflects the business | Medium | Medium | Financial Controller | Annual review of the method; special method agreed with HMRC if needed |
None of this requires a tax department. It requires someone to sit down once, think across the whole business, and write it down — then keep it live. That single artefact is what turns "we think we're fine" into evidence you can hand to an auditor, an investor or HMRC.
Building governance without a tax department
The obvious objection is that a mid-market business has no one to build or run this. That is precisely the gap an Outsourced Head of Tax fills. Building and maintaining a proportionate governance framework — owning the risk register, designing the controls, reporting to the board — is core to what senior tax leadership does, and it does not require a full-time hire to do it.
An Outsourced Head of Tax can establish the framework, embed it, and then maintain it on a retained basis, giving the business institutional-grade tax governance at a fraction of the cost of an in-house function. This is also the governance that an eventual in-house hire would inherit — so building it early is rarely wasted. To understand how this fits the wider role, see our guide to what an Outsourced Head of Tax does, and the warning signs a business needs tax leadership.
📌 A typical scenario
The business: A £40m group — three UK companies, one UAE subsidiary, R&D activity — with no tax department and no documented view of where its tax risks sit.
The trigger: A private equity investor's due diligence asks a simple question: "How do you govern tax risk?" There is no register, no policy, no documented controls — just a good accountant who files the returns. The improvisation that follows reads, to the investor, as risk.
What governance changes: Twelve months earlier, an Outsourced Head of Tax could have built a proportionate framework — a risk register, basic controls, a short tax policy, board reporting. The same question would then have been answered with a document, not a scramble.
Not sure where your tax governance stands?
A short, confidential conversation can pinpoint the gaps that matter — and what closing them actually takes.
Assessing where you stand: a gap analysis
Before building anything, it is worth knowing honestly where the business currently is. The most useful way to do this — and the method used to assess governance in far larger groups — is a simple gap analysis: for each component, record the current state, the target, the gap between them, and the action that closes it. It turns a vague sense of "we should probably tighten this up" into a prioritised, ownable plan.
| Component | Current state | Target | Gap / action |
|---|---|---|---|
| Ownership | No one formally owns the tax position | Named owner for each tax, with overall accountability | Assign ownership at the next board meeting; minute it |
| Risk register | Risks known informally, nothing documented | Live register, reviewed at least twice a year | Build the register (see above); set a review cadence |
| Controls | Preparer also reviews; no segregation | Prepare-and-review split; key reconciliations signed off | Introduce a second-review step on material filings |
| Tax policy | No written approach to tax risk | Short board-approved tax policy | Draft a one-page policy; approve and revisit annually |
| Board visibility | Tax surfaces only when something goes wrong | Standing tax item at year-end and before major decisions | Add tax to the board agenda at defined points |
The exercise usually takes an afternoon and produces something more valuable than any policy document: a clear, honest list of what is missing and who is going to fix it. That is governance in practice, not on paper.
Governance and the moments that matter
The return on tax governance is rarely visible day to day. It shows up at the moments of highest scrutiny. When an investor's due diligence asks how tax risk is managed, a business with a framework hands over its register and policy; a business without one improvises, and the improvisation reads as risk. When HMRC opens an enquiry, a business with documented controls demonstrates reasonable care; a business without them is exposed. When the board asks "are we confident about tax?", governance is what lets the answer be "yes, and here is how we know."
Governance, in other words, is insurance that also happens to improve decisions. It is most valuable exactly when a business can least afford to be caught without it.
Does your business have a tax governance framework?
If the honest answer is "not really," that is the gap senior tax leadership fills. Download the OHT Decision Framework to assess your position, or book a confidential conversation to discuss building governance proportionate to your business.
Download the OHT Decision Framework → Book a confidential call →
Frequently asked questions
What is a tax governance framework?
It is the system of oversight, controls and accountability that ensures a business manages its tax affairs deliberately — defining who owns tax risk, how decisions are made, what controls catch errors, and how the approach is documented and reported.
Do mid-market businesses really need tax governance?
Increasingly, yes. HMRC assesses whether a business has reasonable systems and controls, investors and lenders probe tax governance in their risk assessment, and boards expect assurance that tax risk is owned. Filing returns is not the same as governing tax.
What is a tax risk register?
A documented list of a business's material tax risks, each with an assessment of likelihood and impact and a note of the action being taken. It is the foundation of tax governance and the single most valuable governance artefact a mid-market business can build.
Can we build tax governance without a tax department?
Yes. Establishing and maintaining a proportionate framework is core to what an Outsourced Head of Tax does, on a retained basis, giving a business institutional-grade governance without a full-time hire. If you are a CFO or finance director weighing up how to handle this, see how we work with finance leaders.
How do we assess where our tax governance currently stands?
Run a simple gap analysis: for each component — ownership, risk register, controls, tax policy, board visibility — record the current state, the target, and the action that closes the gap. It usually takes an afternoon and produces a prioritised, ownable plan. It is the same method used to assess governance in far larger groups, scaled to what a mid-market business actually needs.