Key-person risk is often recorded as a name beside a role. That is too narrow. The material exposure lies in the knowledge, relationships, judgement and coordination that the organisation cannot reproduce if that person becomes unavailable.
A target can have documented procedures and still depend on personal memory for the rationale behind decisions, the interpretation of exceptions and the informal connections that make work move.
Executive answer
Assess key-person knowledge risk by identifying which outcomes rely on scarce individuals, what they uniquely know, who can retrieve or challenge that knowledge, and how long recovery would take. Investors should:
- map critical knowledge to value-creation and downside scenarios;
- test retrieval, not merely the presence of documents;
- identify substitutes, apprentices and relationship coverage;
- run bounded absence and handover tests; and
- cost retention, transfer and system improvements.
Organisational memory is more than stored information. It includes knowing who knows what, how to access it and how to coordinate expertise. Research on knowledge transfer and transactive memory supports examining these social and practical mechanisms, not only repositories.
TL;DR
Before acquisition, move beyond a list of important people. Map the decisions, relationships, technical rationale and exception knowledge that depend on them. Test whether another capable person can find the current answer, understand why it exists and act safely. Distinguish healthy specialisation from fragile concentration. Evidence should include records, recent incidents, handovers, access rights and real substitutes. The output is a remediation plan with owners, time and cost, not a label applied to an individual.
Five forms of key-person knowledge
Decision rationale
The current policy or design may be visible while the rejected options, constraints and trade-offs are not. Losing rationale forces successors to repeat analysis or make unsafe assumptions.
Exception judgement
Routine work may be documented, but unusual customer, regulatory, technical or operational situations depend on pattern recognition developed through experience.
Relationship history
Trust with customers, regulators, suppliers or lenders often includes unwritten expectations and memories of prior commitments. Contact details do not transfer credibility.
Coordination knowledge
Some people know who must be involved, which sequence works and how to bridge functions. This is a feature of transactive memory: the group’s shared understanding of where expertise resides.
Access and control
Critical systems, approvals, credentials or supplier routes may depend on one person. Treat privileged access as both continuity and control risk.
A diligence method that produces usable evidence
Interview the key person, their manager, peers and people who depend on their work. Compare accounts with decisions, incident records, customer interactions and system permissions. A confident handover claim is a hypothesis until somebody demonstrates it.
Healthy expertise or dangerous concentration?
Specialisation is necessary in technical and professional organisations. Risk does not arise merely because one person is the best expert. It rises when important work cannot access, evaluate, combine or replace that expertise within the time allowed by the business.
Do not respond by documenting everything. Excess documentation can become an unused archive. Prioritise high-consequence knowledge and embed transfer in real work through joint decisions, shadowing, paired customer coverage and after-action review.
The contrary case
Retention action can itself create dependency if it rewards knowledge hoarding or postpones succession. Equally, an aggressive transfer programme can alienate a critical person during a sensitive transaction. Sequence the work with discretion, clear purpose and fair recognition.
A practical test: four weeks without the expert
Choose one critical person and simulate a four-week absence across three scenarios: routine delivery, a material exception and an external challenge. Ask who decides, what information they need, where it is found and when the organisation would become stuck. Test one element in practice and record the recovery time.
What investors ask next
Does a retention bonus solve the risk?
It may buy time. It does not transfer knowledge, build substitutes or make relationships durable.
Is documentation enough?
No. The test is whether another person can retrieve, interpret and apply the knowledge under realistic conditions.
How early can this be examined?
Use proportionate questions before close, then deepen the map when access improves. Focus first on knowledge tied to material thesis assumptions.
What belongs in the first 100 days?
Protect essential people and relationships, remove single-access points, begin joint coverage, capture decision rationale and assign accountable owners.
Continue the investor diligence cluster
Use the Organisational Genius Diagnostic to open the knowledge-risk conversation, then verify the pattern through retrieval, handover and absence evidence. Explore the investor path for a narrower review.
© Course Correction Consulting LTD. Evidence-informed practitioner guidance, not an audit, valuation or investment recommendation.

