It's Friday night. This can't wait... Can it?

It's 8pm on a Friday when your phone buzzes with a new email. You're the Board Chair of a mid-sized community health and social services organisation. The sender is Emilia, a programme coordinator you've met twice at staff events. The subject line reads: 'Something you need to know — please keep this confidential'.

In the email, Emilia alleges that Desmond, a fellow director on your board, has been directing a supplier contract toward a company in which his brother holds a significant financial interest. She says the decision bypassed the normal tendering process and that her manager dismissed her concerns when she raised them internally two months ago. She names two other staff members who she says witnessed parts of this. She ends with: 'I'm only telling you because I didn't know where else to go. Please don't tell anyone I sent this.'

You sit with the email for a moment. You know Desmond — he's been on the board for four years, is well-regarded, and is mid-way through chairing a major strategic review. You also know that if even part of what Emilia says is true, this is a serious governance failure: a potential conflict of interest, a procurement breach, and a possible misuse of a director's position. The organisation serves vulnerable communities and receives public funding. The stakes are real.

It's Friday night. You have no EA, no governance advisor on call, and the next scheduled board meeting is six weeks away. You need to decide how to move — and how fast.