Bus-Factor Report · Guide
A cross-training plan for a small business that actually sticks
Cross-training works when it starts from single points of failure, not the org chart. A four-week rotation, how to prove it worked, and how to keep it current.
Start from the single points, not the org chart
Most cross-training plans start with the org chart and try to teach everyone a little of everything. They stall within a month because the work is endless and the payoff is vague.
Start instead with a list of single points: processes, systems, mailboxes, meetings, and vendor relationships that exactly one person handles. Rank them by what would hurt most in a two-week absence. Payroll, billing, banking, and anything with a legal deadline usually lead the list. Cross-train on the top five. That is the whole plan for the first month.
Your Microsoft 365 tenant can seed the list: a single owner on a group or site, a single sender on a shared mailbox, one organizer for a recurring process meeting, one assigned user on a connected portal. Then ask each person to add what the tenant cannot show.
A four-week rotation
Pair each primary with a named backup and give each pair one process.
- Week 1: the backup watches the primary do the task and writes the steps in a shared document as they go.
- Week 2: the backup does the task with the primary watching and correcting the notes.
- Week 3: the backup does the task alone. The primary is available but does not step in unless asked.
- Week 4: the backup teaches the steps back to the primary, or to a third person, using only the notes.
- Keep it to an hour or two a week per pair. Short and regular beats a training day everyone forgets.
Proving it worked
A process is covered when the backup has done it, recently, without help. Not when they sat through a walkthrough.
The best proof is a real absence. Schedule the primary's vacation, or a planned day away, during a cycle and let the backup run it. Afterward, write down what went wrong and fix the notes. Then check the evidence: the backup has their own login, holds a second owner role or the right permissions where needed, and shows up in the activity, such as sending from the shared mailbox or submitting the run. Re-run your single-point list; that row should now have two names.
Keeping it fresh
Cross-training decays. Steps change, logins expire, and a backup who has not done a task in a year is only half a backup.
- Once a quarter, have each backup run their process for one real cycle.
- When anyone changes roles or gives notice, re-run the single-point list that week.
- Update the notes whenever the process changes, not on a calendar.
- Re-check the tenant regularly. New groups, mailboxes, and portals appear all the time, often with one owner.