Succession planning for family businesses: key-person risk in practice
Succession planning in a family business is usually discussed as one big event: the day the founder hands over to the next generation. That day matters, but it is not where most of the risk sits.
The real risk is everyday. It is the managing director who holds every important customer relationship, the long-serving finance manager who is the only person who can run payroll, the founder's sibling who knows the roasting profiles or the supplier terms by heart. If any one of them is unavailable for a month, through illness, a family emergency or a resignation, the business feels it immediately.
This is key-person risk. Managing it well is the practical core of succession planning, and it is work you can start this quarter rather than at some future handover date.
Why family businesses carry more key-person risk
Every growing business depends on a few people. Family businesses often depend on them more: trust runs through people rather than systems, knowledge was never written down because everyone could just ask, roles grow around individuals, and conversations about a founder stepping back can feel personal.
None of this is a criticism; it is how most businesses grow. But a bank, an investor or a buyer will see it as risk, and a successor will inherit it.
Step 1: list the roles the business cannot run without
Start with a simple question for each senior person, beginning with the owner: what do only they know or do?
Write the answers down role by role. Be specific. "Runs finance" is too vague; "makes bank payments, files tax returns, runs month-end close" is useful. Typical entries include:
- key customer and supplier relationships,
- pricing and discount decisions,
- the bank relationship and facility negotiations,
- payroll and statutory payments,
- technical know-how: recipes, formulations, production settings, sourcing,
- system passwords and administrator access.
Then score each role's impact if absent from 1 (minor inconvenience) to 5 (the business cannot operate normally).
Step 2: score deputy readiness
For each role, ask four questions. Mula OS's Risk & Insurance Register uses a simple 0 to 100 readiness score built from them, and you can apply the same logic on paper:
| Question | Points |
|---|---|
| Is there a named deputy, and how ready are they? Ready now: 40. Ready in 1 to 2 years: 25. Not ready: 10. No deputy: 0. | up to 40 |
| Is the knowledge written down? Yes: 25. Partly: 12. No: 0. | up to 25 |
| Have key relationships been handed over? Yes: 20. Partly: 10. No: 0. | up to 20 |
| Is there a written emergency cover plan? Yes: 15. No: 0. | up to 15 |
Then classify each role:
- Critical gap: impact of 4 or 5, and readiness under 50.
- Gap: readiness under 70.
- Covered: readiness of 70 or more.
The scoring is deliberately simple: it forces an honest answer to each question and shows which roles to work on first.
Step 3: watch for planned exits
Add one more column: the holder's planned exit date, if there is one. Retirement, a move to a non-executive role, or a known personal plan all count.
If a planned exit is within two years and the deputy is not ready now, that role needs a plan immediately. Developing a deputy to the point where they can genuinely take over usually takes longer than people expect, especially where customer or banking relationships have to transfer.
Step 4: close the critical gaps first
For each critical gap, there are four levers. They map directly onto the readiness score.
Name and develop a deputy. Pick a backup for every critical role, and write a development plan for them. In a family business, the deputy does not have to be a family member, and sometimes it is better if they are not.
Write the knowledge down. Turn what only one person knows into procedures. The person who does the task should write the first draft while doing it. A one-page procedure per process, stored in one place, is enough to start.
Hand over relationships. This is the slowest lever. Bring the deputy to customer meetings, supplier reviews and bank meetings. Introduce them as the person who will handle day-to-day matters. Let them lead some meetings while the current holder is still in the room.
Write an emergency cover plan. For each critical role, a short note: who steps in for the first week, who has the passwords and signing authority, which external adviser can cover specific tasks, and who tells customers and staff. This is the cheapest lever and often the fastest win.
Step 5: cross-train for critical tasks
Beyond the senior roles, look for critical tasks with only one trained person. A useful target is at least two trained people for every critical task.
Cross-training works best when it uses written procedures: the backup performs the task under supervision, following the procedure, then signs it off. Record the result in a skills matrix so you can see where coverage is thin.
Step 6: test it
The most direct test of key-person risk is to let the key person step back, gradually: one week, then two, then four. Log every question that needed them. Each logged question becomes a procedure, a delegated decision with a clear limit, or a relationship to hand over.
The first test is often uncomfortable, and more informative than any plan on paper.
The family dimension
In family businesses, key-person risk overlaps with family governance. A few practical steps reduce friction:
- Agree a family employment policy. Set out how family members join the business, what qualifications or experience are expected, and how they are paid and reviewed.
- Write a family charter. Capture shared values, the role of family in ownership versus management, and how decisions are made.
- Set a dispute escalation path. Agree in advance how disagreements will be raised and resolved, with time limits, before there is one.
- Check the shareholders' agreement. Leaver terms, share transfers and what happens on death or incapacity should be clear. Have a lawyer draft or review it.
These conversations are easier when they start from a shared, neutral picture of the business rather than from personal positions.
Insurance and legal points
Some businesses use key-person insurance to cover the financial impact of losing a critical person. Whether it suits you, and how it is treated for tax, depends on your circumstances and country. Discuss it with your insurance broker and accountant. Similarly, signing authorities, powers of attorney and shareholder arrangements have legal effects; check them with your lawyer or company secretary.
What "good" looks like
A list of key roles, starting with the owner, each with an impact score, a named deputy and a readiness score reviewed yearly; a dated plan for every critical gap; an emergency cover plan for every role with an impact of 4 or 5; and evidence that the business has run for two weeks without the owner with no major issue.
Where Mula OS fits
Key-person dependence shows up in several of the 22 areas in Mula OS's free Corporate Readiness Assessment, including standard operating procedures, leadership and organisation, and risk. One question asks directly how long the business would survive if the owner were away, ranging from the business stopping if the owner is away for a week, to it surviving 8 weeks or more with a documented delegation of authority.
The Mula OS Risk & Insurance Register, part of Mula OS Govern & Grow, includes the Key People tab described above, with readiness scores, gap status, exit watch and review dates.
Take the free Corporate Readiness Assessment to see where key-person risk sits in your business.