Governance needs to be about more than a set of rules. But behaviour is not easy to change, writes Simon Lee
