What Is Key Person Dependency?

Key Person Dependency is a risk where critical system knowledge exists only in the mind of one or two individuals, with little or nothing formally documented for anyone else to rely on.

When that person resigns, retires, or is simply unavailable during a critical incident, the organization can be left running a business-critical system it can no longer fully explain or safely change. This risk tends to be invisible until the moment it becomes a crisis, since the system keeps running fine right up until the person holding the knowledge is gone.

We identify key person dependencies during technical assessments, flagging systems where documentation is thin and institutional knowledge is concentrated in very few people, and prioritize documenting that knowledge before it's lost rather than after. This often involves structured interviews with the people who hold that knowledge, combined with AI assisted code analysis to fill in gaps the documentation doesn't cover, so the risk is captured and reduced while the relevant person is still available to validate it.