D02 - Key Person Redundancy
Definition
Whether your most critical operational functions can survive the unplanned absence of the one person who runs them.
Why It Matters
Most mid-market companies discover this gap the way they discover a vendor's hidden contract terms during a crisis, not a review. The fix is cheap when planned in advance and expensive when forced.
The Diagnostic Question
Name the person whose unplanned two-week absence would most damage your operation this week. Name their backup.
Has that backup ever independently executed the function — not shadowed it, not been briefed on it, but run it alone from start to finish with no assistance?
If the answer is no, you do not have backup coverage. You have a named intention and an unverified plan.
What This Dimension Looks Like When It's Working
- Every critical operational function has a named backup who has independently executed it at least once per quarter in a non-emergency context, with the outcome documented.
- A backup coverage map exists, listing every critical function, its primary executor, its backup, the cross-training status, and the date of the last verified independent execution.
- System access for backup executors is confirmed in advance, not discovered missing when the primary is unavailable.
- Key person risk is rated formally — severity 1 through 5, for every role where a sudden departure would create a customer-visible operational failure within 48 hours.
The Most Common False Positive
Having a backup named on an organization chart or a coverage document is not key person redundancy.
Southwest Airlines had nominal backup coverage for its crew scheduling system in the form of operations center staff. That nominal backup had never been tested at full-disruption scale. When the system failed in December 2022, the nominal backup produced an $800 million loss over ten days.
The entire gap between "We have a backup" and "Our backup has independently run this function" is the gap between documented intention and operational resilience.
The Failure It Prevents
A key person's departure — planned or unplanned, triggers the full replacement cost: agency fees, productivity loss during the vacant period, onboarding time before the replacement reaches independent productivity, and the institutional knowledge that left with the person and has no documentation equivalent.
For a single mid-market operations role, this cost is typically $25K–$45K in quantifiable terms before the institutional knowledge loss is calculated.
What This Dimension Requires And Enables
D02 requires D01 — Backup coverage only functions if the processes being backed up are documented well enough for the backup to execute without the primary. A named backup for an undocumented process is a person, not a plan.
D02 requires D06 — A backup executor without the correct system access is a nominal backup regardless of their training.
D02 extends to vendor relationships through the Operational Dependency and Single Point of Failure concepts — a strategic vendor with no assessed alternative is a vendor key person risk governed by D03 standards.
Terms
Issues
Operational Failure Archive
Apply
Take the HQ Score assessment to see which functions in your operation have no tested backup coverage →