What Is Key Person Risk?

Key person risk (also called key man risk) is the exposure a business carries when its value or day-to-day operations depend on one person or a small handful of people. If that person leaves, falls ill, retires, or dies, something important stops working: a client relationship, a product, a decision process, or the confidence of the people who fund the company.

It is most acute in founder-led companies, because the founder is often the first and biggest dependency. The founder holds the key customer relationships, makes the final call on most decisions, and carries knowledge that was never written down. Risk grows with every year that arrangement goes unchallenged.

What counts as a "key person"

A key person isn't necessarily the most senior person. It's anyone whose absence would damage the business in a way that can't be fixed in a few weeks. The test is substitutability: how long would it take, and how much would it cost, to replace what this person does?

Typical key people in a founder-led company include:

• The founder or owner-CEO, who often holds the vision, the final approval on spending and hiring, and the top relationships.
• The top salesperson or account owner, whose customers buy from them personally.
• The lead engineer, chief technologist, or master craftsperson, who is the only one who understands a critical system or process.
• The long-serving operations or finance lead, who knows where everything is and how exceptions get handled.

And it isn't always one person. A pair of founders who both leave, or three senior people who all know the same undocumented process, is the same risk in a different shape.

Why it is acute in founder-led firms

Founders build companies by being the answer to every problem. That's useful at ten people. By the time a company has a real team, the same habit leaves a business where every important thread runs through one head.

Several things push in the same direction:

• Decisions flow to the founder by default. Nobody else has clear authority, so everything waits. A delegation of authority matrix is the usual fix.
• Knowledge is oral. The founder knows why a pricing exception exists, why one supplier is used, and which customer needs careful handling. None of that lives in a document.
• Relationships are personal. Customers, lenders, and key partners trust the founder, not the company.
• The founder is also the owner. In a company that's owned and run by the same person, a founder's illness is both an operating problem and an ownership problem at the same time.

This is one of the core problems that professionalizing a business is meant to solve, and it's closely related to the idea of institutionalizing a business, where the company's ability to perform no longer depends on specific people.

Where key person risk shows up

Key person risk isn't only an abstract worry. It appears in concrete places where outsiders, regulators, and tax authorities have already written rules about it.

1. Valuation

When someone values a privately held company, dependence on a single individual can reduce the price. The clearest official statement comes from the US tax authority. In Revenue Ruling 59-60 (1959-1 C.B. 237, a guide for valuing the stock of closely held corporations), section 4.02(b) says the loss of the manager of a so-called "one-man" business may have a depressing effect on the stock's value, particularly where there's a lack of trained personnel able to succeed to management. It tells the valuer to consider the effect of the loss on the business's future and the absence of management-succession potential.

The same passage also describes offsetting factors. The business and its assets may be such that they won't be impaired by the loss of the manager. The loss may be adequately covered by life insurance. Or competent management might be hired on the basis of what was paid for the former manager's services. Those factors are to be weighed against the loss of the manager.

Two points are worth keeping straight. First, this is US tax guidance for valuing stock, and other jurisdictions and valuers use their own approaches. Second, the ruling doesn't prescribe a percentage. In practice, appraisers sometimes apply an adjustment often called a key person discount, but there's no standard figure, and it depends on the facts. For the broader concept, see valuation.

2. Disclosure by public companies

Companies that offer securities to the public in the US must describe their risks. Under Item 105 of Regulation S-K (17 CFR 229.105), a registrant discusses the material factors that make an investment in the company or offering speculative or risky, and explains how each risk affects the company or the securities. Item 105 doesn't name key personnel specifically. But dependence on a founder or a few executives is the kind of company-specific factor a registrant may judge material and so choose to disclose.

Disclosure by itself doesn't reduce the risk. It does mean investors are told about it, and it signals that markets treat the concentration of capability in a few people as something to be assessed, not ignored.

3. Key person life insurance (and its tax rules)

Companies sometimes buy life insurance on a key person, with the company as owner and beneficiary. The purpose is financial: cash arrives to cover recruitment, lost revenue, or the cost of buying out the person's shares. It doesn't replace the person, their relationships, or their knowledge. It's mitigation of the money problem only.

In the US, employer-owned policies come with specific tax conditions. Under 26 USC 101(j), the general rule is that death benefits from an "employer-owned life insurance contract" are taxable above the premiums and other amounts paid, unless an exception applies. The statute defines such a contract as one owned by a person engaged in a trade or business, under which that person is directly or indirectly a beneficiary, and which covers the life of an employee. The exceptions depend on the insured's status (for example, an employee within the 12 months before death, or a director or highly compensated person when the policy was issued) and on notice and consent: before the policy is issued, the employee must get written notice of the intent to insure and the maximum face amount, give written consent, and be told the policyholder will be a beneficiary. Related reporting duties sit in 26 USC 6039I, which requires policyholders to file a return.

This is a US-specific rule. Other countries treat company-owned life cover differently, so a founder outside the US should check local tax and insurance rules with an adviser. And in any country, the notice-and-consent steps are worth treating as a matter of basic fairness to the person being insured, not just a tax formality.

How to identify key person risk

A simple way to find it is to look for concentration. Ask where one person (or a pair) holds something the company can't easily rebuild.

A quick test: imagine the person is unreachable for 90 days with no warning. Write down what would stop, what would slow down, and what would simply need someone else to cover. Whatever lands on the "stops" list is your highest risk.

How to assess it

Once you've listed the concentrations, rate each one on two dimensions: how much damage the loss would cause, and how likely it is to happen or how quickly you could fix it. A rough 1 to 3 scale is enough.

(The rows above are illustrative. Use your own people and areas.) Anything scoring high on both columns with no cover is where to start.

How firms reduce key person risk

You can't remove dependence on people entirely, and you shouldn't try. The goal is to make sure that no single person's absence stops the business. The main levers are:

• Document what the person knows. Turn tacit know-how into process documentation: checklists, runbooks, decision notes, customer histories.
• Cross-train. Have a second person do the work regularly, not once. An untested backup is a guess.
• Name deputies. Give each critical role an identified backup with real authority, so an absence doesn't create a vacuum.
• Delegate decisions deliberately. Spell out what others can approve alone, and what must escalate. See delegation for the skill itself and the delegation of authority matrix for the structure.
• Spread the relationships. Make sure each important customer or partner knows at least two people at the company.
• Plan succession. For the top roles, including the founder's, write down who would step in and what they'd need to be ready. Succession planning covers the approach.
• Use insurance as financial mitigation only. Key person cover can fund the transition, but it doesn't solve the operating problem.

Which of these matters most depends on the type of concentration. Knowledge risk is fixed mainly by documentation and cross-training. Relationship risk by spreading contacts. Approval risk by delegation. Ownership risk by succession planning.

What good looks like

A company with low key person risk isn't one with no important people. It's one where the loss of any one of them would be a serious but survivable event. Work continues, customers are served, decisions get made, and there's time to recruit or promote a successor without panic.

Those companies tend to share a few traits: clear authority limits, written processes for critical work, two-deep coverage of the key roles, and a founder who is deliberately working on making themselves less essential. That last point is uncomfortable for many founders, but it's usually also what makes the business more valuable, and more of a company and less of a job.

Key Facts: Key person risk

• Key person risk is a business's dependence on one or a few individuals for its value or operations.
• Revenue Ruling 59-60, section 4.02(b), says loss of the manager of a "one-man" business may depress stock value, especially without trained successors.
• The same passage lists offsets: assets not impaired by the loss, life insurance cover, or competent management that could be hired.
• 17 CFR 229.105 requires registrants to discuss material risk factors; dependence on key people is one a company may judge material.
• In the US, 26 USC 101(j) sets notice and consent conditions for employer-owned life insurance to keep death benefits tax-free.
• Life insurance mitigates the financial loss only. Documentation, cross-training, delegation, and succession plans address the operating loss.

Related reading

• Professionalizing a Business
• Institutionalizing a Business
• Delegation of Authority Matrix
• Succession Planning
• Valuation