How to answer 'How are critical dependencies on single individuals (key-person risk) mitigated?' on a CAIQ
I. Reviewer Guidance & Pitfalls
Explain cross-training, documented runbooks, and multi-person on-call rotation schedules.
II. Example Answer Passing Enterprise Audit
Compliant Response
Sealed · BCM-15
All operational procedures have documented runbooks in our internal wiki; on-call rotations are distributed across the engineering team (SOC 2, CC1.4).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire drafts answers with citations pulled directly from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
No spam · No credit card · Confidential by default