Imagine you finish work tonight and, for whatever reason, you cannot work tomorrow.

Not:

“I'm going to keep an eye on emails from bed.”

Not:

“I'll join the important calls.”

Not:

“Ring me if anything serious happens.”

You are completely unavailable.

No email.

No WhatsApp.

No phone.

No decisions.

No access to you for 30 days.

What happens to the business?

That question exposes resilience extremely quickly.

Who opens the bank?

Who approves payroll?

Who can authorise payments?

Who speaks to your largest customer?

Who understands the pricing?

Who knows what has been promised?

Who can access the important systems?

Who holds the passwords?

Who deals with a major complaint?

Who signs the contract?

Who decides whether to hire?

Who deals with your accountant, solicitor, bank or insurer?

Who understands the thing that normally exists only inside your head?

If too many answers are:

“Me.”

you do not only have an owner-dependency problem.

You have key-person risk.

And unlike the gradual inconvenience of being too involved in the company, key-person risk becomes brutally obvious the moment the key person suddenly stops being available.

This is not really about death

Business-continuity conversations can become unnecessarily dramatic.

People hear:

“What happens if you're not here?”

and immediately assume we are discussing wills, death and worst-case catastrophe.

That is part of the picture.

But you can become unavailable for far more ordinary reasons.

An accident.

Unexpected surgery.

Serious illness.

A family emergency.

Mental or physical exhaustion.

A prolonged hospital stay.

A situation involving one of your children or parents.

Even a period where you remain perfectly capable of making decisions but simply cannot give the business your normal attention.

Business continuity is fundamentally about maintaining important functions when something the company relies upon becomes unavailable. UK guidance commonly includes the loss of key staff or skills alongside disruptions such as IT failure, premises loss and supplier failure.

So forget the exact cause for a moment.

Test the consequence.

The owner is unavailable. What happens next?

Start with tomorrow morning

Do not begin by writing a 60-page disaster recovery document.

Walk through tomorrow.

It is 8am.

You have not arrived.

Nobody can contact you.

Does everybody know that they should continue normally?

Or does the company immediately enter a holding pattern?

At 9am, a customer wants a decision.

Can someone make it?

At 10am, Finance needs approval.

At 11am, Operations discovers a project problem.

At midday, a supplier needs confirmation.

At 2pm, somebody is offered a job.

At 4pm, a customer complains.

What happens?

Many companies would survive tomorrow easily.

That is encouraging.

Now try one week.

Then 30 days.

The weaknesses usually appear as time increases.

Day one tests interruption

The first day tests whether normal work requires your constant presence.

If the business cannot make it through a single working day without owner input, the dependency is severe.

That might mean:

Routine decisions need approval.

Employees lack authority.

Customers expect direct access to you.

Information sits with you.

Problems automatically escalate.

You are the gateway to too many systems.

That is primarily an operational design issue.

It is fixable.

One week tests management

A week is more interesting.

Normal daily activity may continue.

But then management decisions appear.

Something unexpected happens.

A large quote needs approving.

A customer requests different terms.

Somebody calls in sick.

An employee issue develops.

Cash requires attention.

A project slips.

Who responds?

This tests whether you have people capable of managing the company rather than merely performing jobs inside it.

If everyone can continue while nothing unusual happens but freezes the moment judgement is required, you have operational capability without sufficient management capability.

That distinction matters.

Thirty days tests whether you actually own a business or personally operate one

A month starts exposing everything else.

Financial approvals.

Supplier relationships.

Customer renewals.

Payroll.

Management reporting.

Recruitment.

Pricing.

Contractual issues.

Strategic decisions.

Cash flow.

Commercial negotiations.

Staff leadership.

Important relationships.

Technical knowledge.

Suddenly the question becomes less:

“Can people cover for me?”

and more:

“Has the organisation actually been designed to operate without continuous access to me?”

That is a far higher standard.

It is also an extremely useful one.

The first risk is authority

Someone may know exactly what needs to happen.

That does not mean they are allowed to do it.

This is one of the most overlooked parts of continuity planning.

Perhaps your finance manager understands the cash position perfectly.

But only you can approve the payment.

Your operations manager can resolve the customer issue.

But the customer contract requires a director's approval beyond a certain threshold.

Your management team knows who should be recruited.

But nobody else has authority to sign the offer.

So the first continuity question is:

What authority disappears when you do?

Review financial approvals, purchasing limits, contractual authority, HR decisions, pricing, customer credits and any other recurring activity that currently requires you.

Some should genuinely remain restricted.

The solution is not to give everyone unlimited authority.

The solution is to make sure important activity does not become impossible simply because one person is unavailable.

Access and authority are not the same thing

This deserves separating.

Someone might be authorised to make the decision but unable to access the system required to execute it.

The banking login is on your phone.

The two-factor authentication code goes to your number.

The domain name sits inside your personal account.

The CRM administrator is you.

The payroll platform requires your credentials.

The website hosting is registered using an old personal email account.

The company's social media exists inside your personal profile.

The cloud storage has one administrator.

Suddenly a perfectly competent management team cannot perform perfectly ordinary tasks.

That is not leadership dependency.

It is access dependency.

Fix it before you need to.

Do not solve access risk by sharing passwords everywhere

The answer is not a spreadsheet called:

PASSWORDS FINAL v7.xlsx

sitting on the shared drive.

The National Cyber Security Centre recommends individual work accounts rather than routinely sharing credentials and advises using delegation or controlled permissions where services support them. Its current small-business guidance also recommends password managers and regular reviews of who has access to important accounts.

You want resilience and security.

That usually means identifying critical accounts, ensuring there is appropriate organisational administrator access, setting sensible recovery arrangements and making sure no important system can only be accessed through one person's private device or memory.

Your IT provider or cyber-security specialist can help where the setup is more complex.

The second risk is knowledge

What do you know that nobody else knows?

Not because you deliberately keep secrets.

Because the business grew around you.

Why a particular customer receives a special price.

Which supplier can solve a certain problem overnight.

How one technical calculation works.

Where the original contract is.

Why a process exists.

Which employee knows a particular client.

What was promised in a meeting six months ago.

Which customer is profitable despite apparently low revenue.

Which one looks fantastic but is actually a nightmare.

Which important renewal is coming next month.

Owner-managed businesses accumulate enormous amounts of institutional knowledge inside people rather than systems.

That works beautifully until the person becomes unavailable.

You do not need to document everything

This is where continuity projects can become absurd.

Someone hears:

“We need to document the business.”

Suddenly everyone is writing 47-page procedures for making tea.

Stop.

You need enough information for competent people to continue important work.

Concentrate first on knowledge that is:

Commercially important.

Difficult to reconstruct.

Time-sensitive.

Held by only one person.

Capable of stopping something significant.

Ask:

What information would people desperately wish I had written down if I disappeared tomorrow?

Start there.

The third risk is relationships

Customers sometimes belong to the owner rather than the business.

Not legally.

Practically.

Your largest customer only calls you.

You know their MD personally.

You negotiate their annual contract.

Your operations team services them, but the commercial relationship lives with you.

Now you disappear.

Would the customer feel confident?

Do they know anybody else senior?

Does anyone else understand the history?

The same applies to:

Suppliers.

Bankers.

Professional advisers.

Landlords.

Joint venture partners.

Important referral relationships.

A relationship concentrated in one individual is another form of key-person risk.

Widen it.

Bring another senior person into important customer meetings.

Let managers build relationships with advisers.

Create more than one point of contact.

The objective is not to make yourself irrelevant.

It is to make the company more relevant than one person.

The fourth risk is decision-making

This often reveals itself when an owner takes a proper holiday.

The first couple of days are fine.

Then messages begin.

“Sorry to bother you, but...”

“Just a quick one...”

“We only need you to decide...”

Eventually the owner is running the company from a sun lounger.

That is useful evidence.

Why did those decisions need you?

Were they genuinely owner-level?

Or does the team lack:

Clear authority?

Commercial thresholds?

Confidence?

Information?

Management experience?

A framework?

Article #67 explored this from the perspective of Fixer Identity and the owner's relationship with being needed.

Continuity gives you another reason to remove the dependency.

Even if you enjoy being involved, the business should not become incapable of operating when involvement is temporarily impossible.

Build decision boundaries before you need them

Managers should know which decisions they can make.

For example:

Routine operating decisions belong to them.

Certain expenditure can be approved within defined thresholds.

Customer complaints can be settled up to agreed limits.

Pricing can move within approved boundaries.

Exceptions escalate.

Major commitments remain board or owner decisions.

Your exact rules will differ.

The important point is that they exist before the crisis.

Do not leave employees trying to interpret what you might have wanted while you are lying in hospital.

The fifth risk is money

Ask an uncomfortable question:

Can the business still move money without me?

Not steal it.

Not remove controls.

Operate.

Payroll.

HMRC.

Suppliers.

Rent.

Finance.

Insurance.

Critical purchases.

Who can authorise what?

What needs two approvals?

What happens if one signatory becomes unavailable?

What facilities exist?

Who understands the cash forecast?

Who knows which payments are genuinely urgent?

Continuity planning does not mean weakening financial control.

Good controls should actually make continuity easier because authority is clear.

The dangerous setup is neither secure nor resilient:

One person controls everything.

That feels safe until the one person disappears.

Cash reserves matter differently when the owner disappears

Article #61 looked at business cash reserves primarily as financial resilience.

This scenario makes their wider value obvious.

Imagine revenue dips because the owner is temporarily absent.

Sales take longer.

Some customers delay decisions.

Extra management support is required.

You recruit interim capability.

Professional advice becomes necessary.

Cash buys time.

A company operating with almost no headroom has fewer options the moment anything unexpected happens.

The reserve does not solve owner dependency.

It gives you space to solve it without simultaneously fighting for survival.

The sixth risk is leadership

This is subtler.

Perhaps every operational process continues.

Who leads?

Who communicates with employees?

Who reassures the team?

Who resolves disagreement between senior managers?

Who establishes priorities?

Who makes the call when two perfectly reasonable options conflict?

This is why having senior employees is not automatically the same as having a management team capable of running the company.

The absence test reveals whether leadership exists below the owner.

If nobody knows who takes charge, decide now.

Name the person

I dislike continuity plans that say:

“The management team will assume responsibility.”

Who?

If you are unavailable tomorrow, one person needs enough authority to coordinate the response.

That does not mean becoming temporary dictator.

It means the company knows where coordination sits.

Depending on your structure, that might be:

Managing Director.

Operations Director.

General Manager.

Finance Director.

Another director.

Senior manager.

Whoever genuinely makes sense.

If there is no credible person, that is not a paperwork problem.

It is a succession and management-development problem.

Your deputy needs exposure before the emergency

Do not choose somebody on paper and keep them away from everything important.

If Sarah would run the business in your absence, does Sarah understand:

The bank relationship?

The key customers?

The financial position?

Important contracts?

Major risks?

Strategic priorities?

Board-level issues?

Where advice comes from?

Who the critical external contacts are?

A successor or emergency deputy needs enough exposure to the owner's world before they are suddenly expected to occupy it.

ICAEW's succession-planning guidance similarly emphasises developing successors over time and exposing them to different parts of the business rather than expecting leadership transfer to happen instantly.

Then there is the legal structure

This is where you need proper advice because the answer depends on how your business is structured.

A sole trader becoming incapacitated is not the same as a limited company director becoming unavailable.

A company with several directors is not the same as one with a sole director.

A company where the sole director is also sole shareholder creates different issues again.

Your company's articles of association govern important aspects of how directors are appointed and how decisions are made. GOV.UK guidance also makes clear that directors have personal statutory duties, including exercising their own independent judgement.

That means you should not assume:

“My wife has my passwords”

or:

“I have a power of attorney”

automatically solves company governance.

It might not.

Lasting Power of Attorney is worth discussing, but understand what it does

In England and Wales, a Lasting Power of Attorney allows somebody you choose to make certain decisions on your behalf. A property and financial affairs LPA can cover personal money and property decisions and can be used according to the terms of the registered LPA. It must be created while you still have mental capacity and registered before it can be used.

That can be hugely important personal planning.

But your personal financial authority and your role as a company director are not automatically the same thing.

Company governance, directorship, share ownership, banking mandates and personal powers of attorney interact differently depending on the structure.

Get a solicitor who understands owner-managed businesses to review this properly.

Do not leave it until somebody is trying to work it out during a crisis.

Scotland and Northern Ireland also have different power-of-attorney arrangements from England and Wales.

Death planning and temporary incapacity are not identical

Companies House guidance illustrates why company structure matters in the event of a director's death.

Where surviving directors remain, they may be able to continue running the company subject to its articles. Where a sole director dies but shareholders remain, shareholders may be able to appoint a replacement. Under the Companies Act 2006 model articles, there are also provisions allowing personal representatives to appoint a director in certain circumstances where the deceased was the sole shareholder and director.

Temporary or long-term incapacity creates different legal questions.

This is precisely why a proper continuity review should cover:

Company articles.

Director structure.

Share ownership.

Powers of attorney.

Bank mandates.

Wills.

Shareholder agreements where applicable.

Succession arrangements.

Appropriate insurance.

Not because every owner needs a complicated legal structure.

Because somebody should know what happens.

Key-person insurance can buy time, but it cannot run the company

Insurance is another part of the conversation.

Business.gov.uk describes key-person insurance as protection against financial losses associated with a key person becoming critically ill or dying, particularly where the business relies heavily on that individual.

HMRC's current Business Income Manual also recognises policies taken out by employers against trading-income loss resulting from death, critical illness, sickness, accident or injury involving a key employee, director or other key person, although the tax treatment depends on the purpose and structure of the policy.

That may be worth discussing with an appropriately qualified insurance broker, accountant or tax adviser.

But remember:

Insurance can provide money.

It cannot provide:

Your passwords.

Your technical knowledge.

Customer relationships.

Management capability.

Authority.

Leadership.

A succession plan.

Do not insure the risk and leave the dependency untouched.

The best contingency plan is a less dependent business

This is the heart of it.

A business-continuity document can be useful.

But the strongest protection is designing the company so that your sudden absence is inconvenient rather than catastrophic.

That means:

More than one person understands important processes.

Managers can make real decisions.

Critical relationships are wider than the owner.

Systems have appropriate access and recovery arrangements.

Financial authority has sensible continuity.

Knowledge is not concentrated unnecessarily.

The company has reserves.

Leadership below the owner exists.

Your professional and legal affairs are organised.

That is not disaster planning.

It is good business design.

Run a key-person audit beyond yourself

Once you have finished looking at the owner, repeat the exercise.

Who else could disappear tomorrow and create serious damage?

Your finance manager?

Estimator?

Sales director?

Engineer?

Operations manager?

IT person?

Payroll administrator?

Technical specialist?

If one employee leaving or becoming ill creates a crisis, you have another concentration risk.

ICAEW's guidance for sole principals explicitly recommends alternate arrangements to maintain continuity in the event of incapacity or death. While that guidance is aimed specifically at regulated accountancy practices, the principle is useful far more broadly: critical work needs a credible alternative when one individual is unavailable.

Beware the employee who “knows everything”

Every company has one.

Sometimes several.

“Ask Dave.”

That sentence should interest you.

Where does Dave know it from?

Could somebody else find it?

Does the information exist anywhere?

If Dave left tomorrow, how long before the business understood what it had lost?

Institutional knowledge becomes a risk when the institution does not actually possess it.

Test the plan

This is where resilience becomes real.

Do not only ask:

“Could everyone cope?”

Try it.

Take a day where routine questions cannot come to you.

Then several days.

Have managers make decisions within agreed boundaries.

See what breaks.

Business-continuity guidance from UK local authorities, drawing on government continuity principles, specifically recommends testing plans and even operating for a period without key personnel to expose gaps.

This is one of the rare business exercises where discovering problems is success.

Better on a planned Wednesday than during an actual emergency.

Keep a continuity pack

Not a giant manual.

A concise, controlled set of information covering the things competent managers or family members would need to know if you suddenly became unavailable.

It might identify:

Who leads.

Professional advisers.

Bank contacts.

Insurers.

Critical suppliers.

Critical customers.

Where contracts are stored.

Where company records are stored.

Who controls major systems.

Important recurring deadlines.

Financial-authority arrangements.

Current strategic priorities.

Known significant risks.

Where legal continuity documents can be found.

Do not put live banking passwords and every security credential into an unsecured continuity document.

Use proper access-control and credential-management arrangements.

The objective is to show people where the doors are and who has the keys.

Not leave every key under the doormat.

Tell the right people the plan exists

A beautifully prepared contingency plan known only to the person whose disappearance triggers it is an impressive piece of irony.

Your relevant directors and senior managers should understand:

Who takes charge.

What authority they have.

Where critical information sits.

Who needs contacting.

What should continue.

What can wait.

Who the external advisers are.

Family members may need to understand parts of the arrangement too, particularly where ownership, personal finances, wills or powers of attorney interact with the business.

Use appropriate professional advice to decide what information belongs where.

Protect the company from unnecessary panic

If you become temporarily unavailable, employees do not need speculation.

Customers do not need your medical history.

Suppliers do not need rumours.

Someone needs authority to communicate clearly.

For example:

The owner is currently unavailable.

The management team continues operating the business.

Sarah is the main contact.

Existing commitments remain unchanged.

We will update relevant parties if anything material changes.

Calm.

Factual.

Enough.

People worry when they believe nobody is in control.

Continuity planning should make leadership visible.

Think about personal guarantees too

Many owners personally guarantee:

Finance.

Leases.

Loans.

Supplier arrangements.

Those obligations deserve separate professional review as part of wider personal and business contingency planning.

What happens if you die?

What happens if you become incapacitated?

What does your family inherit?

What obligations survive?

What insurance exists?

This article cannot answer those questions for your individual structure.

A solicitor, accountant, financial adviser and insurance professional may all have relevant roles depending on your circumstances.

The point is to ask while you are perfectly capable of answering them.

This is also an exit-readiness test

Here is where resilience becomes commercially interesting even if nothing bad ever happens.

British Business Bank guidance on selling a business explicitly identifies reliance on the owner or a single customer as a factor that can make an exit less viable. It recommends preparing the company well in advance to improve sale prospects.

That makes complete sense.

Put yourself in the buyer's position.

You are considering paying several million pounds for a company.

Then you discover:

The owner holds every customer relationship.

The owner approves every price.

The owner is the technical authority.

The owner knows the suppliers.

The owner manages the managers.

The owner holds critical system access.

And the owner wants to leave after six months.

What exactly are you buying?

A business?

Or temporary access to the person the business still depends upon?

A business that can cope without you is more strategically useful

Even if you never sell.

Owner independence gives you choices.

You can take time off.

You can recover from illness.

You can spend time on strategy.

You can launch another business.

You can move.

You can reduce hours.

You can appoint a managing director.

You can sell.

You can retain ownership while stepping back.

You can simply go on holiday without pretending the Mediterranean has excellent conditions for quarterly management meetings.

That is agency.

Not necessarily leaving the business.

Having the option.

The 30-Day Absence Test

If I were working with an established owner on this, I would run one exercise.

Assume you become completely unavailable tomorrow for 30 days.

Then work through these areas.

Leadership

Who runs the business?

Do they know?

Does everybody else know?

Decisions

Which decisions currently need you?

Which of those could be delegated now?

Financial control

Who can keep the company financially operational?

Are authority and safeguards both clear?

Systems

Which critical systems depend on your accounts, phone or credentials?

Knowledge

What important information exists only in your head?

Customers

Which important relationships still belong primarily to you?

Suppliers and advisers

Who else knows the key contacts and history?

People

Who can recruit, manage, resolve issues and maintain standards?

Legal and ownership continuity

Have the relevant professional documents and company arrangements actually been reviewed?

Cash

How long could the business absorb disruption?

Insurance

What financial exposure exists if you or another genuinely key person becomes seriously ill or dies?

Recovery

When you return, does the business hand everything straight back to you?

That last one matters.

If the management team successfully runs the company for a month and you immediately reclaim every decision, the exercise taught you nothing.

Turn every weakness into one of four actions

Once you find a vulnerability, decide whether it needs:

Authority.

Someone capable already exists but needs permission.

Capability.

Someone needs training, experience or development.

System.

Information or process needs documenting, sharing or redesigning.

Professional planning.

Legal, financial, insurance, tax or ownership arrangements require specialist advice.

This prevents business continuity from becoming a vague worry.

Every risk gets somewhere to go.

Do not try to remove yourself from everything

Some owner-level dependency is completely reasonable.

You own the company.

Certain strategic decisions should involve you.

Certain relationships may appropriately remain yours.

Certain technical expertise may take years to replicate.

The objective is not:

“Nobody should ever need me.”

It is:

“My temporary absence should not create preventable chaos.”

That is a very different standard.

Your family should not have to reverse-engineer your business during the worst week of their lives

This is perhaps the strongest argument for sorting the personal side properly.

If something genuinely serious happens to you, the people closest to you may already have enough to deal with.

They should not also need to discover:

Who your accountant is.

Where the shares sit.

Which bank the business uses.

Whether payroll can be authorised.

Who the other directors are.

What insurance exists.

Where the will is.

Which solicitor you use.

Who can run the business.

Good contingency planning is partly consideration for everybody who would otherwise inherit the problem.

The business should know what to do before it needs to know

Nobody likes planning for incapacity.

I understand why it gets postponed.

There is always something more immediate.

A customer.

A quote.

A recruitment problem.

Another meeting.

But continuity planning is exactly the sort of important work that receives no urgency until the day it becomes desperately urgent.

By then your options are worse.

So test the business now.

Not because you expect something awful to happen.

Because established businesses should be resilient to the temporary loss of important resources.

Including you.

If you disappear for 30 days and everything continues perfectly, brilliant.

That does not mean you are unimportant.

It means you built something stronger than your own availability.

And that is precisely what a business owner should be trying to achieve.