Many financial services businesses focus heavily on cybersecurity, compliance obligations and regulatory change. Far less attention is often given to one of the most significant governance risks facing smaller and medium-sized licensees: key-person dependency.
Responsible Managers play a critical role within an AFSL. They provide organisational competence, support governance arrangements, and often hold substantial operational knowledge. In many businesses, one or two individuals become the central source of licensing expertise, regulatory knowledge and compliance oversight.
While this may appear efficient, it can create significant vulnerabilities.
During compliance reviews, it is common to find situations where one Responsible Manager effectively carries most of the licence knowledge. They understand the advice process, oversee compliance, liaise with regulators and manage key governance functions. If that person takes extended leave, retires, becomes unavailable or leaves unexpectedly, the business may struggle to maintain the same level of oversight and competence.
The risk is often hidden because the business operates successfully while the individual remains available.
A practical way to assess key-person risk is to ask:
- Who understands the licence obligations?
- Who maintains regulatory relationships?
- Who understands historical governance decisions?
- Who can explain why existing controls operate as they do?
If the answer keeps pointing to the same individual, a dependency may exist.
Strong governance frameworks spread knowledge across the organisation. This includes succession planning, documented decision-making, cross-training, delegated authority structures and ensuring key compliance responsibilities are not concentrated with a single person.
As businesses grow, these controls become increasingly important. Governance should be able to survive personnel changes rather than depend on specific individuals.
The objective is not to remove Responsible Managers from the centre of the business. It is to ensure the business can continue operating effectively if circumstances change.
A licence should never depend entirely on information held in one person’s head.
Call to Action
Many AFSL holders have never assessed their exposure to key-person risk or reviewed whether their organisational competence framework remains fit for purpose.
AICS provides Responsible Manager Reviews, Organisational Competence Assessments, Governance Reviews and Licensee Reviews to help businesses identify succession risks and strengthen governance resilience.
If you are unsure whether your licence could operate effectively during the unexpected loss of a key individual, contact Cheyenne and the team at [email protected] or call 07 3251 2481.