Assessing corporate governance quality: substance over form