If You Vanished Tomorrow: 6 Tests for Key Person Risk in a Private Company

Roughly half of all business owner exits are unplanned. Advisors who work on succession have a shorthand for what triggers them: the five D's. Death, disability, divorce, disagreement, distress. Not one of those events appears on a calendar, and not one of them waits for a company to be ready.

Set that against how few companies have written anything down. Surveys of family firms, including PwC's Global Family Business Survey, consistently find that only a minority have a documented and communicated succession plan, with most estimates landing near a third. The other two thirds are running a business whose continuity depends on one person continuing to wake up.

Key person risk is not a soft governance topic. It is a live financial exposure that your bank, your insurer and any future buyer will price long before you do.

I run a group founded in Azagra in 1890 that today operates eight divisions across more than 75 countries with over 180 people on the payroll. The uncomfortable truth about a diversified group is that diversification protects you from a bad market, not from a bad Tuesday. If eight businesses all route their hardest decisions through the same three people, you do not have eight companies. You have one company with eight P&Ls.

Here are the six tests I use. None of them require a consultant. All of them can be answered this month.

Test 1: The 48-hour test

Ask a simple question and write the answer down: if I am unreachable for 48 hours starting now, what stops?

Not "what would be difficult." What actually stops. Payroll release. A wire transfer above a threshold. A signature on a shipment. Access to the bank portal. The password vault. The insurance broker's phone number. In most private companies the answer is embarrassing within four minutes.

The 48-hour test is not about strategy. It is about plumbing, and plumbing is where continuity plans actually fail.

The fix is dull and cheap. Add a second authorized signatory at every bank. Give the CFO or a trusted director standing power for defined transaction types with defined limits. Put credentials in a company-controlled password manager with a documented emergency access procedure, not in one person's phone. Give a lawyer a sealed instruction on who to call. This is a week of administrative work that removes the sharpest edge of the risk.

Test 2: The relationship concentration test

Take your top 20 customers and your top 10 suppliers. For each one, write the name of the person inside your company who would be phoned first if there were a problem.

Then count how many times the same name appears.

In most owner-led companies, one name covers 60% or more of the revenue. That is not a compliment. It means a portion of your revenue is legally yours and practically theirs, and it will follow the person out of the door, whether they leave for a competitor, a hospital or a retirement.

The remedy is not to remove the owner from customer relationships. It is to make every important one a two-person relationship: a second name on every account, joint visits, and the second person present when terms are negotiated rather than briefed afterward. It costs travel budget and ego, and it converts personal goodwill into a company asset.

Test 3: The undocumented knowledge test

Every company has a set of decisions that are made correctly and consistently by one person, and nobody can explain the rule.

How discounts are approved. Which supplier gets paid first when cash is tight. What a project is really allowed to cost before it stops being worth doing. Which customer complaints get escalated and which get absorbed. These are not policies. They are judgments that have been made so many times they have become instinct, and instinct is not transferable.

If the reasoning behind a recurring decision exists only in one head, that decision will be made worse by everyone who inherits it, and nobody will be able to say why the numbers moved.

The exercise that works is deliberately low tech. Take the six decisions you make most often and write, for each, the three questions you actually ask yourself before deciding. One page each. You are not removing judgment, you are making it teachable.

Test 4: The bottleneck count

For two weeks, keep a tally of every decision that reached you and could not have been made without you. Then sort that list into three columns: decisions only I should make, decisions I have kept out of habit, decisions I have kept because I do not trust the alternative.

The first column is usually shorter than people expect. Capital allocation above a threshold, senior hires and fires, the terms of anything that binds the company for years, and the choice of which businesses we are in. That is roughly it.

The second column is delegation you can do on Monday. The third column is a management problem wearing a continuity costume, and the honest response is either to develop the person or replace them.

A group that runs on one person's approvals does not fail when that person disappears. It fails slowly, months earlier, because everything queues behind a calendar.

Test 5: The liquidity test

Key person insurance is widely misunderstood as a payout to the family. It is not. It is corporate-owned cover that pays the company, and its job is to buy time and cover a hole that appears at the worst moment.

The hole is usually one of four things: lost profit while the relationships in Test 2 are rebuilt, the cost of recruiting and paying a replacement at market rate, debt that becomes repayable because your credit agreement contains a key man clause, and the cash needed to buy out a deceased partner's shares under a buy-sell agreement so the surviving owners do not find themselves in business with an heir who never chose them.

Sizing the cover starts with the debt, not with sentiment: begin with what the bank could call, then add a year of the affected person's contribution margin and the cost of replacing them.

Two details that matter more than the premium. First, read your loan agreements for key man clauses before you assume you know your exposure. Lenders and private investors have been pricing this risk contractually for decades. Second, a buy-sell agreement without funding attached to it is a wish, not a plan.

Test 6: The rehearsal

Everything above is theory until somebody runs it.

The most useful continuity exercise I know costs nothing: the owner takes two consecutive weeks away, announced in advance, with a named person holding the authority and a rule that nobody calls unless the building is on fire. Then you look at what broke.

A succession plan that has never been rehearsed is a document. A two-week absence is a stress test, and it is the only one that reports honest results.

The information this produces is unusually cheap. You discover which approvals stalled, which customers asked for you by name, which decisions were made badly and which were made fine, which quietly revealed that you had been the bottleneck rather than the safeguard. Do it once a year. Extend it as the answers improve.

What this is really buying

Treated as a morbid subject, something you address because something bad might happen, this work gets postponed forever. The better framing is that everything on this list makes the company more valuable while you are still running it. A buyer pays a discount for a company that depends on its owner, and pays a premium for one that does not. A bank lends against documented process more comfortably than against a personality. And a founder who has passed all six tests has bought something worth more than either: the ability to leave without the company holding its breath.

Key Takeaways

• Roughly half of business owner exits are unplanned, triggered by one of five events: death, disability, divorce, disagreement or distress. None of them are scheduled.
• Only a minority of family firms have a documented, communicated succession plan, according to repeated family-business surveys including PwC's.
• Start with plumbing, not strategy: second signatories, delegated authority with limits, and company-controlled credentials remove the sharpest 48-hour risk in about a week.
• If one name appears against most of your revenue, that revenue is practically portable. Make every important relationship a two-person relationship.
• Key person insurance pays the company, not the family. Size it against callable debt, replacement cost and buy-sell funding, and read your loan agreements for key man clauses first.
• A plan that has never been rehearsed is a document. A planned two-week absence is the only honest test of continuity.
• Every fix here raises the valuation of a business that is still trading. Buyers discount owner dependence and pay premiums for transferable systems.

Frequently Asked Questions

What is key man risk in business?

Key man risk, also called key person risk, is the exposure a company carries when its revenue, knowledge, relationships or decision-making depend heavily on one individual or a very small group. It is measured by what would stop or degrade if that person became unavailable. Lenders and investors formalize it through key man clauses in credit agreements and fund documents, which can trigger repayment or suspend investment if a named person departs.

What are the 5 D's of succession planning?

The five D's are death, disability, divorce, disagreement and distress. They are the events that most often force an unplanned ownership or leadership transition, and roughly half of business owner exits are triggered by one of them rather than by a chosen date. The point of naming them is that each requires a different response: divorce and disagreement are handled in shareholder agreements, death and disability in insurance and authority documents, distress in liquidity planning.

What are the 5 components of a business continuity plan?

Most frameworks reduce to five parts: a business impact analysis that identifies what cannot stop, a risk assessment of what could interrupt it, a response plan with named people and delegated authority, a communication plan for staff, customers, banks and suppliers, and a testing and review cycle. The fifth is the one companies skip, and it is the only component that tells you whether the other four work.

What are the four main types of business risk?

Business risk is commonly grouped into strategic, operational, financial and compliance risk. Key person risk is unusual in that it cuts across all four at once: it is strategic when one person holds the direction of the company, operational when they hold undocumented process, financial when their departure triggers a loan covenant, and compliance-relevant when they are the only named authority for regulatory obligations.

How much key person insurance does a company need?

There is no universal multiple. A defensible method is to add three numbers: any debt that becomes repayable if the person leaves, the contribution margin at risk for the period it would take to rebuild their relationships, and the realistic cost of recruiting and paying a replacement. If a buy-sell agreement obliges the company to purchase a deceased owner's shares, that obligation should be funded as a separate line rather than absorbed into the same policy assumption.

One thing to do this week

Do Test 1. Write down, in one page, exactly what stops if you are unreachable for 48 hours starting now, and hand that page to whoever would have to deal with it. You will finish the page in twenty minutes and you will not like what it says, which is the point.

See how the eight divisions of Manzanos Enterprises fit together, and for the governance around this decision, read why succession is a system rather than an event, how to build a leadership team that scales without you and why no single account should ever be able to kill your business.