Most boards can name the skills they think they are missing. Far fewer can evidence it. A skills matrix closes that gap: it converts a vague sense that "we probably need someone with digital experience" into a recorded, defensible view of where the board is strong, where it is thin, and what the next appointment has to deliver. What follows is the audit end to end, with a filled-in worked example you can copy.
What is a board skills matrix?
A board skills matrix is a grid mapping the competencies a board needs against the depth of expertise each director holds. Competencies run down one axis, directors across the other, and each cell records a rated judgement. Its purpose is to make composition decisions evidence-based rather than instinctive, and to leave a record of how the board reached them.
The real value is not the grid but the conversation it forces: a deliberate, recorded judgement about whether the people around the table can credibly oversee the organisation's strategy and principal risks.
The matrix has become a near-expectation of good practice rather than a nice-to-have. The Financial Reporting Council's UK Corporate Governance Code 2024, which applies to financial years beginning on or after 1 January 2025, asks boards to maintain an appropriate combination of skills, experience and knowledge, and places succession planning and board composition firmly with the nomination committee. A current competency grid is the most practical way to evidence that the board has thought rigorously about composition rather than relying on instinct or incumbency. It also gives the chair and nomination committee a shared, neutral reference point when difficult conversations about renewal arise.
For company secretaries, the exercise does triple duty: it underpins the annual board performance review, it anchors succession planning, and it supplies much of the raw material for diversity and composition disclosure in the annual report. Build it once, properly, and several governance obligations become easier to discharge.
What the nomination committee needs to decide
Before anyone fills in a cell, the committee should settle four things and minute them:
- Which competencies count. Agreed against the current strategy and principal risks, not inherited from last year's template.
- What the rating scale means. A shared definition of each level, so "strong" means the same thing to every director.
- Who validates the ratings. Self-assessment alone is not enough; agree that the chair moderates, and who moderates the chair.
- What triggers action. The threshold at which a gap becomes a recruitment brief rather than a development objective.
- How the data is held. Competence ratings and personal characteristics stored separately, with a stated retention period.
What should a board competency matrix cover?
A board competency matrix should cover roughly eight to fifteen competencies drawn from the organisation's current strategy and principal risks, not a generic template. Most boards need governance and chairing, finance and audit, sector and commercial, risk and resilience, digital, data and AI, people and remuneration, and ESG and sustainability, defined precisely enough to discriminate between directors.
The most common failure mode is a generic competency list lifted from a template. A grid that lists "leadership", "financial literacy" and "integrity" tells you nothing, because every director will rate highly and no gap will ever appear.
Start from two source documents: the current strategy and the principal risks in the most recent annual report. For each strategic priority and each principal risk, ask what expertise the board needs to oversee it credibly. A retailer pursuing direct-to-consumer growth needs genuine digital and data competence; a financial services firm needs prudential regulation and conduct-risk depth; an organisation with significant overseas operations needs relevant geographic or geopolitical experience.
A defensible competency set for most boards spans:
- Governance and chairing: listed-company or sector-equivalent board experience, committee chairing, regulatory engagement.
- Finance and audit: recent and relevant financial experience, treasury, capital allocation, audit committee competence.
- Sector and commercial: deep knowledge of the markets, customers and operating model.
- Risk and resilience: enterprise risk, cyber security, operational resilience, crisis management.
- Digital, data and AI: technology strategy, data governance, and increasingly the oversight of artificial intelligence. As AI moves into core processes, boards need at least one director who can ask informed questions about model risk, data provenance and emerging obligations under frameworks such as ISO/IEC 42001, the international management-system standard for AI, and the EU AI Act. Our guide to AI governance and board oversight explores what this expertise looks like in practice.
- People, remuneration and culture: talent, workforce engagement, executive pay.
- ESG and sustainability: climate, environmental and social risk, and the disclosure regimes that attach to them.
Keep the list to roughly eight to fifteen competencies. Fewer, and it lacks resolution; many more, and directors disengage and rate themselves generously across the board. Agree the definitions with the nomination committee so that everyone is scoring against the same standard.
Worked example: a filled-in skills matrix for a board of directors
The fastest way to see what a finished audit looks like is to read one. The tables below are illustrative, not drawn from a real client, and use a nine-person board simplified to its five independent non-executives.
First, the rating scale. Four levels give enough resolution to separate a director who once sat on an audit committee from one who chaired a FTSE audit committee for six years, without inviting false precision.
| Rating | What it means | Evidence expected |
|---|---|---|
| Aware (A) | Follows the board discussion and understands the terms | None |
| Working knowledge (W) | Can interrogate a paper and spot an obvious omission | Relevant role or committee exposure |
| Strong practitioner (S) | Has run or overseen this in an executive or committee role | Named role and dates |
| Recognised expert (E) | Externally recognised: qualification, professional standing, or a long specialist track record | Qualification or external recognition |
Now the grid itself, with tenure carried as the final row so composition and refreshment can be read together.
| Competency | Chair | SID | NED A (audit chair) | NED B (remuneration chair) | NED C |
|---|---|---|---|---|---|
| Governance and chairing | E | S | S | W | W |
| Finance and audit | W | W | E | A | W |
| Sector and commercial | S | E | W | S | S |
| Risk and resilience | W | S | S | A | W |
| Digital, data and AI | A | A | W | A | W |
| ESG and sustainability | W | W | A | S | E |
| Tenure (years served) | 6 | 8 | 7 | 2 | 1 |
Three findings fall out of that grid without any further analysis.
A gap in digital, data and AI. No director rates above working knowledge, and two rate aware. If the strategy involves AI-enabled processes or a significant data estate, the board cannot currently interrogate the papers it receives. That is a recruitment brief, not a training objective.
An over-reliance in finance and audit. NED A is the only director above working knowledge, and chairs the audit committee. If NED A is unavailable, conflicted or resigns, the board loses its entire depth in a competency the audit committee depends on.
A tenure overlay that sharpens both. The two strongest directors on the grid, the senior independent director at eight years and NED A at seven, are also the closest to the end of a typical independent tenure. The board is not simply short of finance depth in the abstract; it is short of it within a defined and approaching window.
Build the grid so it can be read this way in a single sitting. A matrix that needs a covering note to be understood will not survive contact with a nomination committee agenda.
Running the board skills assessment: capture and validation
With competencies agreed, capture each director's profile. The most reliable method combines self-assessment with chair validation. Ask directors to rate their own depth in each competency against the scale above, supported by a short evidence note. Resist a simple yes or no tick: it flattens real differences in depth, which is exactly what the audit exists to surface.
Self-assessment alone carries an obvious bias, so the chair should review and, where necessary, moderate ratings. A brief conversation during the annual evaluation cycle is usually enough to calibrate. This pairs naturally with individual director appraisal; our guides to the annual board performance review and the individual NED appraisal set out how to run those conversations constructively.
Capture demographic and background data separately and with care. Diversity characteristics, including gender, ethnicity, professional background, geographic experience and tenure, belong in the composition picture because they inform appointment decisions, but they are personal data. Collect them on a voluntary, clearly explained basis, store them securely, and apply the data-minimisation and transparency obligations under UK GDPR; the Information Commissioner's Office guidance is the reference point. Keeping competence ratings and demographic data in distinct sections also keeps the two analyses cleanly separable when you report.
Reading the matrix: gaps, over-reliance and tenure
A completed audit earns its keep at the reading stage. Two patterns matter most, and they call for different responses.
How to read a gap versus an over-reliance
A gap is a competency tied to the strategy or a principal risk where no director rates beyond working knowledge. The board has no depth to draw on, and the answer is usually recruitment or external advice.
An over-reliance, sometimes called key-person concentration, is a competency where exactly one director rates as a strong practitioner or recognised expert. The board has depth, but it is a single point of failure, and the answer is usually redundancy: a second appointment, targeted development, or a standing external adviser.
The distinction matters because the two are easy to confuse on a busy grid and lead to different decisions. A gap is a hole in the board's capability. An over-reliance is a risk to the board's continuity.
Read both alongside tenure. A board strong on every competency but heavily weighted towards long-serving directors faces a refreshment challenge that pure skills data can mask. Plotting competence against length of service, as the worked example does, shows whether expertise is concentrated in directors approaching the end of their term, which is precisely the question the 2024 Code's emphasis on composition and succession makes relevant.
Four ways a skills audit fails in practice
- The list is written to flatter. Competencies chosen because the incumbents hold them produce a full grid and no findings.
- The scale has no definitions. Without agreed wording for each level, ratings are not comparable between directors and cannot be tracked across years.
- It is filed rather than used. A grid that never reaches the nomination committee's agenda has cost director time and changed nothing.
- It never changes. Rolling forward last year's ratings unchanged is the most common way a matrix quietly stops being evidence.
Linking the skills audit to succession and diversity reporting
The audit is the connective tissue between assessment and action. For succession, gaps and over-reliances translate directly into role specifications: instead of recruiting a generic non-executive, the nomination committee can seek the specific competencies the board is missing, set against the diversity it wants to improve. This makes the recruitment brief defensible and reduces the temptation to appoint in the image of the incumbents.
For reporting, the grid supplies evidence for board composition and diversity disclosure. The FTSE Women Leaders Review recommends 40% women on boards and in leadership teams; its February 2026 report, covering data to the end of 2025, records 69% of FTSE 350 companies having passed the 40% board target (checked 3 August 2026). The Parker Review asks FTSE 100 boards to have had at least one director from a minority ethnic group by 2021 and FTSE 250 boards by 2024, and asks chief executives to build a pipeline of minority ethnic candidates below board level (checked 3 August 2026). A record that holds background data alongside competence lets you report progress with confidence and explain composition decisions in your own terms, consistent with the Code's comply-or-explain approach. For the disclosure dimension specifically, see our board diversity and ESG reporting guide.
The point is to hold competence and diversity in the same view. The strongest appointments improve both at once, and a single grid helps you find them rather than trading one against the other.
How often should a skills matrix be refreshed?
Refresh the matrix annually, alongside the board performance review, so directors complete one assessment rather than several. Revisit the competency list against the current strategy and principal risks each time, refresh ratings with chair validation, and version the result so the board can evidence how its composition has changed over time.
Anchoring the refresh to the performance review has a practical advantage as well as a scheduling one. Provision 21 of the UK Corporate Governance Code 2024 asks for a formal and rigorous annual review of the performance of the board, its committees, the chair and individual directors, and asks the chair to commission a regular externally facilitated review, at least every three years in FTSE 350 companies. Competency data gathered in the same cycle feeds that review directly instead of being assembled again from scratch. Our overview of board effectiveness frameworks sets out how composition sits within the wider review.
Ratings decay for the same reasons strategy does. Risks emerge, directors join and leave, and competencies that mattered three years ago (AI oversight being the clearest recent example) may now be a baseline expectation. Keep prior years, so you can show how composition has changed and evidence the board's deliberate approach over time. The company secretary is the natural custodian of this discipline, and tying it to the wider governance calendar set out in our company secretary's guide to the 2024 Code keeps it from slipping.
A completed grid is ultimately a decision-support tool, not a compliance artefact. Used well, it gives the chair, the nomination committee and the board a clear, defensible answer to the question that matters most: do we have the right people to oversee where this organisation is going? If you would like to see how BoardServe structures skills audits, competency matrices, succession planning and diversity reporting in one place, book a walkthrough with our team.