Here's a question most owners have never seriously answered: if you were unreachable starting tomorrow morning — not gone forever, just genuinely out for two weeks — what would break first?
Not "would things be harder." They obviously would. The question is sharper than that. What specifically stops? Which decision waits? Which client calls, gets voicemail, and starts wondering? Which password does nobody else have?
Most owners have never walked through this, because it sits in the same mental drawer as writing a will. It's morbid, it's not urgent, and there's always something on fire that feels more real. So the exposure just sits there, growing quietly, until the day it isn't hypothetical anymore.
It's Concentration Risk, Pointed Inward
Most owners understand concentration risk on the revenue side. If one client is forty percent of your income, you don't need anyone to explain why that's dangerous. You feel it. You've probably lost sleep over it.
Key person risk is the same math, aimed at the inside of your business. One person holds an outsized share of what makes the company work — the relationships, the knowledge, the authority, the access. If that person is unavailable, output doesn't drop proportionally. It falls off a cliff, because the business was never designed to run without them. It was designed around them.
And here's what makes it harder to see than customer concentration: there's no number on a report to stare at. Nothing on your P&L says 73% of this company lives in one skull. The dependency is invisible precisely because it's working. Every day you show up, the risk pays for itself and stays hidden.
"A business that only works when you're in it isn't a business yet. It's a job with unusually bad benefits."
Run the Two-Week Test
You can find your exposure in about twenty minutes with a blank page. Imagine you're unreachable starting tomorrow — no calls, no email, no quick questions, no "just text me if it's urgent." Then walk the next two weeks forward, day by day, and write down what breaks and when.
Be specific. Not "sales would suffer" — the Henderson renewal is due Thursday and I'm the only one who's ever spoken to them. Not "payments might be late" — nobody else can approve a wire transfer.
Almost every owner who does this honestly finds the first failure inside 48 hours. And it's almost never the work itself. Your team can do the work; that's why you hired them. What stops is everything that routes through you as a checkpoint rather than as a pair of hands: the approval only you can give, the login only you have, the client who only knows your name, the question no one else is authorized to answer.
That distinction matters more than anything else in this article. If the answer were "nobody can do the work," you'd have a staffing problem, and staffing problems are expensive but obvious. What you actually have is a design problem — and design problems are cheap to fix once you can see them.
The Four Places You're a Single Point of Failure
Whatever your two-week list looks like, the items will sort into four buckets. They're worth naming, because they have very different fixes and very different blast radii.
Access
The bank login. The domain registrar. The payment processor. The insurance policy. The cloud account everything runs on, tied to an email address only you can receive. This is the smallest bucket and by far the most dangerous, because it's the one that converts a temporary absence into a permanent catastrophe. A business can survive two weeks of nobody making decisions. It cannot survive being locked out of its own bank account with no path back in.
Relationships
The clients who signed because of you, stayed because of you, and have never had a substantive conversation with anyone else at your company. The vendor who gives you good terms because of a fifteen-year friendship. These relationships are genuine assets — but they're recorded in your memory and your goodwill, not in the business, which means they don't transfer and can't be inherited.
Knowledge
The pricing logic you've never written down. The reason you stopped using that supplier in 2019. Which customers pay on time and which need a nudge on day 25. Where the bodies are buried in the quoting spreadsheet. Individually, each of these is trivia. Collectively, they're the operating manual, and there's exactly one copy of it.
Authority
The quietest one, and the one owners most consistently underestimate. Even when your team knows what to do and has the access to do it, they may not believe they're allowed to do it without you. If every discount, every exception, every unusual call has historically come to you for a yes, then your absence doesn't produce independent action — it produces a queue of people waiting politely for permission that isn't coming.
Key person risk isn't a sign you've failed at delegation or built the wrong company. It's the natural byproduct of being the person who cared enough to do everything at the start. But what made the business survive its first three years is what makes it fragile in year five — and the fix isn't working less. It's making sure that what lives only in your head, your logins, and your relationships also lives somewhere else.
You're Probably Not the Only One
Once you've done the exercise on yourself, do it on everyone else. Key person risk isn't only an owner problem, and the version you don't see coming is usually the more expensive one.
Is there one salesperson who personally holds your biggest accounts? One technician who's the only person who can service your highest-margin product line? One bookkeeper who understands your books well enough that no one could reconstruct them? One person whose two-week absence would hurt more than yours?
That last question is uncomfortable, and it's the useful one. Owners tend to worry about their own indispensability while quietly tolerating a far riskier dependency on someone who could resign on a Friday with two weeks' notice — or no notice at all. You, at least, aren't going to quit.
What to Actually Do About It
The instinct after an exercise like this is to declare a documentation project, buy some software, and then abandon the whole thing by Thursday because a real fire started. Don't do that. Go in this order instead, because it's ranked by damage prevented per hour spent.
1. Fix access this week. It takes one afternoon.
Get every critical credential into a password manager with emergency access configured for someone you trust — a spouse, a business partner, an attorney. Then write one short page listing your accountant, attorney, insurance agent, bank contact, landlord, and top vendors, with account numbers and who to call. That's it. That single afternoon eliminates the failure mode that turns a bad month into the end of the company, and it costs you nothing but the willingness to sit down and do it.
2. Document decisions, not tasks.
Most owners who attempt documentation start writing procedures — how to process an order, how to close out the month — and give up around page four, because task documentation is enormous and dull. Skip it. Your team already knows how to do the tasks. What they can't do is make your judgment calls. So write those down instead: how you decide what to charge, when a client is worth firing, what you'd do if your biggest customer left, which expenses get cut first if revenue drops. Five pages of your actual reasoning is worth more than fifty pages of process, and you can write it in an evening.
3. Put a second name on every key relationship.
For your top handful of clients and vendors, make sure one other person at your company has met them, been introduced deliberately, and joins occasional calls. Not as a handoff — as a second face. This is the slowest fix on the list, because it happens one conversation at a time over months, and it's the one that most decisively converts your personal goodwill into an asset the business actually owns.
4. Then take the test for real.
Eventually, stop simulating and go. Take a week off and be genuinely unreachable — phone off, no email, no backchannel. It will be uncomfortable, and you'll want to check in, and that discomfort is exactly the point. Nothing reveals your remaining dependencies like actually removing yourself. Whatever's broken when you get back is your next quarter's work, and it'll be a far more honest list than anything you'd have written at your desk.
Why This Never Rises to the Top on Its Own
Here's the uncomfortable structural problem: key person risk will never be the most urgent thing on your desk. It has no deadline. Nobody's chasing you for it. There's no angry customer attached to it and no invoice riding on it. And there's a quieter reason, too — being needed feels good. Being the person who holds it all together is part of how a lot of owners understand their own value. Systematically making yourself less necessary can feel, somewhere below the surface, like erasing yourself from your own company.
So it loses. Every week, to something louder. And it keeps losing right up until the week you get the diagnosis, or the family emergency, or the accident — and then it's the only thing that matters, and you're trying to fix it from a hospital chair with your phone at nine percent.
This is exactly the category of work that requires someone outside your own head. Not because the fixes are complicated — you could do most of this in a weekend — but because important-and-never-urgent work only gets done when something external forces it onto the calendar and then asks whether you actually did it. Someone who isn't inside your daily fires can look at the business and ask the question you've been successfully avoiding for three years: what happens if you're not here? And then, two weeks later, ask what you did about it. That second question is the one that changes anything.
The Move
Tonight, take twenty minutes and run the two-week test on paper. Write down what breaks and when. Don't fix anything yet — just look at the list, because the list is the whole point. Most owners are genuinely startled by how early the first failure lands and how small the thing that causes it turns out to be.
Then do the access fix this week. It's one afternoon, and it's the difference between a rough stretch and an unrecoverable one. The rest can take a quarter.
You built a business that can't run without you. That was the right thing to build at the time — it's how the thing survived. But it isn't what you want to own in five years, and it's certainly not what anyone would want to buy. The work of becoming optional is the same work that makes the business worth something. You just have to start before you're forced to.
Frequently Asked Questions
What is key person risk in a small business?
Key person risk is the exposure a business carries when one individual is so essential that the business degrades or stops without them. In a small business that person is usually the owner, but it can also be a salesperson who personally holds every major client relationship, or the one employee who understands how a critical system actually works. The risk isn't about how hard that person works — it's about what is stored only in their head, held only under their login, or owed only to their personal relationships. If a single unplanned absence would cost you revenue, stall decisions, or lock you out of your own systems, that's key person risk, and it exists whether or not you've ever named it.
How do I know if my business depends too much on me?
Run the two-week test on paper. Imagine you're unreachable starting tomorrow morning — no calls, no email, no quick questions — and then walk your business forward day by day and write down what breaks and when. Most owners find the first failure within 48 hours, and it's rarely the work itself. It's an approval nobody else can give, a password nobody else has, a client who only ever talks to you, or a decision that simply waits because no one is authorized to make it. The specific things you write down are your key person risks. If nothing breaks until day ten, you're in good shape. If Tuesday is a disaster, you've found your priorities.
How do I reduce key person risk without hiring someone?
Start with access, not process, because it's the cheapest fix with the highest payoff. Put every critical password, account, contract, and banking credential somewhere a trusted second person can reach in an emergency — a password manager with emergency access and a short document naming your accountant, attorney, insurer, and key vendors. That costs you an afternoon and removes the failure mode that turns a temporary absence into a permanent crisis. After that, document decisions rather than tasks: write down how you decide what to charge, when to say no to a client, and what you'd do if a big customer left. Then introduce a second name into your top client relationships so you aren't the only face they know. None of that requires a new hire.
What breaks first if you're not there?
Boule Board gives you a virtual board of directors that knows your business, asks the questions you've been avoiding, and checks whether you actually did anything about them.
See Plans →