customer asks if our supervisory oversight is organized independently, what does that mean for a small business

Independent oversight: what the question precisely covers

This question is usually about the separation between who holds day-to-day management and who exercises control over it. For a small company without a supervisory board, "independent oversight" in practice often means: an external auditor, an adviser with no operational role, or simply the owner who is not involved in day-to-day operations. There is no legal obligation for SMEs to have a separate oversight structure — the question tests whether you can explain how control and execution are separated in your case, not whether you comply with a formal standard.

If there is no separate oversight body, "no" with a brief explanation is a perfectly good answer. For example: the external auditor checks the financial statements, and the owner has no say in their own remuneration. That is not a weak answer — it is a factual answer. Avoid ticking "yes" based on a structure you would like to call such but which is not documented anywhere. This question is often linked to the question about the composition of the management: who sits on the board largely determines whether there is already a natural separation between execution and control.

Where this comes from: VSME and the scope of CSRD

The EFRAG VSME baseline module asks about governance and oversight as part of governance information, but does not set a minimum requirement for its form — an SME without a supervisory board can therefore answer the question factually without having to comply with a standard. Directive (EU) 2022/2464 (CSRD) places the reporting obligation itself on larger undertakings; smaller suppliers receive the question because their customer passes on that obligation, not because the directive directly applies to them. Anyone who also receives a question in the questionnaire about a procedure for reporting misconduct will find the explanation of that in the explanation of the whistleblower scheme, since oversight and a reporting channel are often placed side by side in the same question blocks.