The Bus Factor Audit

The bus factor is the number of people who would need to be hit by a bus — or more realistically, leave the organization — before a critical process or system becomes inoperable. A bus factor of one means one person's departure cripples that function. Every organization has bus factor exposures. Most organizations have never mapped them. The bus factor audit is the process of finding them before the bus arrives.

1. Process Inventory List every critical process in the organization — every process whose failure would directly impact revenue, customer commitments, or regulatory compliance. This is not every process. It is the ones that matter most. The inventory should be constrained to the critical tier: if this process could not be executed for 48 hours, what would break?
2. Knowledge Holder Mapping For each critical process, identify every person who can execute it independently. Not who has the title, not who is trained on it in theory — who can actually do it right now without assistance. This mapping reveals concentrations: processes where one or two people hold all the operational knowledge.
3. Risk Scoring Score each critical process on two dimensions: bus factor (how many people can execute it independently) and knowledge redundancy (how much of what those people know is documented elsewhere). A process with bus factor 1 and no documentation is a critical single point of failure. A process with bus factor 3 and comprehensive documentation is resilient. Score and rank the full inventory.
4. Flight Risk Overlay Overlay the bus factor map with flight risk indicators: time in role, industry compensation gaps, known job search activity, team satisfaction signals. A single knowledge holder with high flight risk is an imminent exposure. Prioritize extraction and documentation for this population first.

# Bus Factor Audit — [Organization / Division]
Date: [Date] | Conducted by: [Name]

## Critical Process Inventory

| Process | Bus Factor | Primary Holder | Secondary Holders | Documentation Level | Flight Risk |
|---------|-----------|----------------|------------------|---------------------|-------------|
| [Process] | 1 | [Name] | None | None | High |
| [Process] | 2 | [Name] | [Name] | Partial | Low |
| [Process] | 3 | [Name] | [Name], [Name] | Full | Low |

## Risk Matrix

**CRITICAL (Bus Factor 1, No Documentation)**
→ Immediate extraction required
→ Target: documented within 30 days

**HIGH (Bus Factor 1-2, Partial Documentation)**
→ Extraction and documentation within 60 days
→ Cross-training second holder required

**MODERATE (Bus Factor 2-3, Partial Documentation)**
→ Documentation completion within 90 days

**LOW (Bus Factor 3+, Full Documentation)**
→ Standard certification schedule

## Immediate Actions
1. [Process at highest risk] — [Owner] — extraction session scheduled [date]
2. [Process at second risk] — [Owner] — extraction session scheduled [date]

## Next Audit: [Date + 90 days]