How to Reduce Key-Person Risk in a Small Business

Key-person risk exists when the absence of one person could stop sales, delivery, payments, customer relationships or important decisions. In many small businesses, that person is the founder—but the same risk can sit with a salesperson, bookkeeper, technical specialist or operations lead.

Find the real dependencies

Ask what only one person can currently do, access, explain or approve. Review:

• Major customer and supplier relationships
• Pricing and commercial approvals
• Passwords, banking and system access
• Technical and product knowledge
• Payroll, tax and compliance deadlines
• Sales, quoting and negotiation
• Exception handling and quality control

Look for work that is undocumented, unobserved or impossible without a particular person.

Prioritise by impact and likelihood

Not every dependency needs the same treatment. Rank the consequence of absence and how quickly the business would be affected. Start with work that could stop cash, breach an obligation, harm customers or prevent recovery.

Use four controls

1. Document: record the outcome, trigger, inputs, steps, decisions and escalation points.
2. Share access: use secure role-based access, current contacts and approved emergency pathways. Do not share passwords casually.
3. Cross-train: let another person perform the work while the expert observes.
4. Set authority: define who can decide what, within which limits, when the key person is unavailable.

Protect relationships

Introduce a second contact to important customers, suppliers and advisers before an emergency. Store context and agreements in a shared system so the relationship belongs to the business, not a private inbox.

Test the transfer

Run a planned absence or tabletop exercise. Can the backup person find the information, make the allowed decisions and complete the outcome? Fix what the test exposes. The broader test is in how to make your business run without you for two weeks.

Keep expertise without keeping dependency

Reducing key-person risk does not mean every person becomes interchangeable. Protect specialist value while removing preventable single points of failure. Pair documentation with judgement, training and clear escalation.

Use five signs of founder dependence and the Australian business continuity checklist. This is a core part of sustainable business growth.

If critical work still returns to you despite hiring and systems, The Pocket CEO can help redesign decision rights, accountability and operating rhythm.

General information only. Every business is different; use your own figures and seek professional advice where appropriate.