Some of the above must be (in most jurisdictions in the USA at least) expressed in the organization's charter of establishment or constitution.
Most countries have laws that regulate the establishment and management of NPOs and that require compliance with corporate governance regimes.