What is “good governance” best practice?

And how is it different in an outsourcing vs a shared services model?