A water utility depends on one SCADA technician who alone can restart the control network. Leadership labels the issue 'technology risk only.' What is the more accurate primary classification?
Select an answer to reveal the explanation.
Short Explanation
It's like having one locksmith for the whole city hall—when that person is out, the high-tech locks don't help. Key-person dependency is mainly personnel risk. The SCADA gear is the setting, not the whole story.
Full Explanation
Key-person dependency concentrates knowledge and response capability in a single individual and is primarily classified as personnel risk. Technical systems may amplify impact, but the core exposure is human concentration and succession gaps. Treating it as technology-only understates cross-training, coverage, and retention controls the organization needs.