What is ABA practice key-person risk? ABA practice key-person risk exists when essential knowledge, authority, relationships, access or recurring work depends on one person whose absence would materially disrupt care or operations. Owners manage it by mapping dependencies, naming qualified coverage, preserving current records and access, testing absence scenarios, and building longer-term succession for critical leadership and professional roles.

Look for dependency rather than seniority

A founder may be a key person, and so may an authorization specialist who alone understands a payer route, a clinician holding a required leadership role, a site manager with the only facility access, or an administrator who controls a vendor account.

Inventory dependencies across:

  • reserved decisions and approvals
  • professional, facility and payer qualifications
  • passwords, keys, devices and administrator access
  • contracts, contacts and renewal knowledge
  • clinical leadership and supervision coverage
  • payroll, banking and financial close
  • payer enrollment, roster and authorization workflows
  • incident, privacy, safety and emergency response
  • system configuration, reports and data exports

The CASP Organizational Guidelines public overview describes guidance across business operations, clinical operations and risk management. CASP sells the detailed guidelines. The dependency register here is an editorial continuity method.

Score consequence and replaceability

For each dependency, record the effect of an absence lasting one day, one week, one month and indefinitely. Consider service safety, client continuity, staff pay, claims, cash, licenses, contracts, reporting, facilities and data access.

Then assess replaceability:

  • Is a qualified backup named and currently available?
  • Does the backup have required authority, relationships and access?
  • Can the backup find current instructions and source records?
  • Has the backup performed the work under observation or simulation?
  • How long can temporary coverage operate safely?
  • Which decisions must pause until a permanent qualified role is filled?

Use red for a material dependency with absent or untested coverage. Yellow means coverage exists with a limitation. Green requires a current source, qualified backup, access, usable instructions and a recent test.

Preserve professional and entity boundaries

Ownership cannot substitute for clinical competence, licensure or payer recognition. A temporary operations leader may coordinate schedules and records while clinical decisions remain with an appropriately qualified professional.

The current BACB Ethics Code applies to BCBA and BCaBA certificants and people who completed an application. It addresses competence, continuity, supervision, delegation, documentation and service transitions. BACB has no separate corporate jurisdiction. The practice needs an organizational continuity plan alongside each covered professional's duties.

Document which functions a backup may perform, which require another qualification, and which stop when authority is unavailable. Confirm payer and state rules separately.

Build a coverage packet

Each critical function needs a concise, secured packet containing:

  • role purpose and current owner
  • recurring calendar and deadlines
  • decision rights and reserved matters
  • current procedures and source locations
  • approved systems, access request path and emergency access route
  • key internal and external contacts
  • open risks, commitments and exceptions
  • recent reports and reconciliation evidence
  • first-day, first-week and first-month priorities
  • end date or review point for temporary authority

Sensitive credentials belong in approved credential-management systems. A coverage packet should explain how an authorized person obtains access rather than copying secrets into a document.

Test a realistic absence

Announce a tabletop exercise or controlled coverage day. Remove the primary person from the workflow and ask the backup to find due work, make permitted decisions, complete one recurring process, route an exception and produce evidence.

OSHA's management leadership guidance emphasizes management commitment, resources and accountability within safety programs. It is general guidance. Coverage tests likewise need protected time and authority from leadership.

Record where the test stalled. Common gaps include unavailable source records, expired access, undocumented judgment, missing contacts, one-person vendor accounts and confusion about clinical authority.

Plan succession at three horizons

Temporary coverage keeps the practice functioning during an absence. Succession prepares a durable transfer.

  • Emergency horizon: hours to days, with safe continuation, pause decisions and urgent communications.
  • Interim horizon: weeks to months, with delegated authority, workload changes, external notices and recruitment.
  • Permanent horizon: selection, credentialing, transition, relationship handoff, ownership change when relevant, and post-transition review.

The HHS OIG General Compliance Program Guidance is voluntary and nonbinding. It discusses leadership, compliance accountability, reporting to ownership, risk assessment and small-entity adaptations. It offers useful prompts for continuity of compliance functions. Governing law and contracts control actual appointments and notices.

A fictional dependency review

Evergreen Steps ABA is a fictional two-site practice. Leaders identify 27 critical dependencies. Seventeen have a qualified backup, current instructions, required access and a test within the prior year. Coverage readiness is 17 of 27, or 63%.

The ten gaps include three clinical-leadership duties, two payer portals tied to one administrator, two facility-access dependencies, payroll approval, bank reconciliation and the incident notification tree.

The practice prioritizes consequence. It appoints qualified clinical coverage through the proper process, creates separate authorized portal accounts, verifies building access and runs payroll plus incident-tabletop tests. After 60 days, 24 dependencies meet the complete standard. Readiness is 24 of 27, or 88.9%. Three longer-term succession items remain open by name and due date.

Track leading indicators

Useful measures include:

  • dependencies with complete tested coverage divided by dependencies in scope
  • critical roles with a current coverage packet divided by critical roles
  • backup tests passed divided by tests attempted
  • single-person administrator accounts by system
  • overdue recurring duties caused by absence
  • interim assignments beyond their approved review date
  • succession actions completed by target divided by actions due

Report the remaining red dependencies and their consequences. A high average should never hide one role whose absence could stop safe care or payroll.

A 45-day continuity sprint

During week one, interview leaders and frontline staff to identify single-person dependencies. During week two, score consequence and replaceability. During weeks three and four, create coverage packets and access paths for the highest-risk ten. During weeks five and six, run absence scenarios and correct the gaps.

Finish by assigning permanent succession work separately from temporary coverage. Review the register after a departure, promotion, new site, acquisition, system change, new payer, material incident or change in professional requirements.

Reduce concentration through ordinary work

Coverage improves when backups participate before an emergency. Rotate selected reconciliations, source reviews, meeting facilitation and controlled approval tasks within each person's authority. Schedule shadow periods and require the primary owner to take planned time away from the workflow during a test.

Monitor concentration in relationships as well as tasks. A payer contact, landlord, bank, insurer or referral partner may know only one employee. Record the relationship owner, approved backup, last interaction and shared history in an authorized system.

Review compensation and workload for people carrying critical coverage. Adding backup responsibility without protected time can create a second fragile dependency. Leaders should remove lower-priority work or add capacity when coverage duties become material.

Add succession risk to the annual planning cycle. Budget for recruitment, credentialing overlap, temporary leadership support and relationship transition. Record which costs are funded and which remain exposed. That financial view helps owners act before a departure turns an acknowledged dependency into an urgent service problem.

Related resources

Sources