A scenario, not a case study
Start with a situation many boards will recognize. A volunteer has run the box office for a long time. She holds the ticketing admin login, the payment processor recovery email, the donor database export password, and the shared drive where the season contracts live. The board has never asked for a list. Nobody else has ever logged in. When she is out for a week, the theatre holds its breath.
This article is not a documented case. No specific theatre, tenure, or signed agreement is being described. It is a structural problem dressed in a familiar costume, and the fix is not a heroic handoff from one trusted person to another. The fix is a written, board-approved access and knowledge-transfer plan that makes the handoff unnecessary to improvise.
Name the risk correctly
The risk is not that a volunteer stays too long. Long service is valuable. The risk is that a role concentrates credentials and institutional knowledge in one person with no second holder and no documented recovery path. That is a single point of failure, and it is a governance problem, not a personality problem.
A succession planning checklist published by the Nonprofit Coordinating Committee of New York treats this directly. Under risk assessment, it asks organizations to identify operational vulnerabilities, identify single points of failure, and document key institutional knowledge areas. Under technology and systems, it asks whether a password management system exists and whether access credentials are securely stored. Under financial operations, it asks for documented banking information and signatories, a financial procedures manual, and accounting system access that is secured and transferable. These are not exotic requirements. They are the minimum for a volunteer-run theatre that handles money and customer data.
The same checklist lists the essential documents every organization should have: an emergency succession policy, an updated organizational chart, a key contact list, a password/access management system, financial procedures documentation, board and staff roles and responsibilities, an annual operational calendar, a communications protocol, and a leadership transition checklist. Read that list against your own theatre. Most boards will find two or three items in place and several missing.
Three documents, not one
Boards often conflate three different artifacts. They have different owners and different review cycles, and collapsing them is how plans stall.
1. The emergency succession policy. This answers who acts when a key volunteer is unavailable. It names an interim authority, states the limits of that authority, and says how the board is notified. The board owns it. It is reviewed annually, ideally at the same meeting where officers are nominated.
2. The access and credentials register. This answers how systems are reached. For each system — ticketing, payment processing, email, donor database, website, social media, accounting, shared drive — it records who holds access, who is the second holder, where the recovery path lives, and when the second holder last tested a login. The operations lead maintains it. The board reviews it at least once a year and after any role change.
3. The knowledge-transfer calendar. This answers what must be taught, to whom, and by when. It is not a job description. It is a schedule: the season close process in June, the grant report in September, the insurance renewal in January. Each item names a teacher, a learner, and a date when the learner does the task while the teacher watches.
A written agreement with one volunteer is a promise. These three documents are a system. The promise depends on the person keeping it. The system works when she is on vacation, ill, or gone.
Borrow the MoU structure for an internal handoff
The Theatres Trust publishes an advice note on memorandums of understanding for community and volunteer groups working to save or revive theatres. It describes an MoU as a way to formalize a partnership for a specific goal. It is not legally binding, the note says, but it has moral force indicating the intent of all parties to progress with a specified project. It should outline how decisions are made and how each group is represented in decision-making.
That structure maps cleanly onto an internal access-and-handoff agreement, even though the Theatres Trust note is written for inter-organizational partnerships. Name the parties. State the goal — transferable access and trained backup by a fixed date. State the decision authority: who can add a second holder, who can revoke access, who signs off on the register. State the exit provisions: what happens when the incumbent steps down, and what cooperation is owed to the successor. The document is not a contract. It is a written record that the board and the volunteer agreed to the same terms, and it belongs in the board minutes.
The outsourcing lesson: continuity at the end
Paid operators are contractually obliged to plan for their own replacement. Volunteer roles usually are not. The Theatres Trust advice note on outsourcing theatre operations lists data and box office continuity among the key terms to consider in an outsourcing agreement. It notes that the current operator owns the information about existing customers, that local authorities need GDPR-compliant routes to share that data with a new operator, and that customers should have the opportunity to opt into the new operator’s communications. It recommends end-of-contract provisions obliging the outgoing operator to work with an incoming operator to ensure continuity of service.
The volunteer analogue is direct. Customer data, ticket history, and donor records belong to the theatre, not to the volunteer. The board should be able to say where the data lives, who can export it, and how a successor gets lawful access. If your box office chair is the only person who can produce a clean customer export, the theatre does not control its own records. That is the finding to bring to the board, stated plainly and without blame.
Why plans stall, and what to say about it
Two predictable objections come up. The first is that asking a long-serving volunteer to document her access feels like a vote of no confidence. The second is that the volunteer herself may resist. Both are documented patterns, not personal failings.
An Arts Consulting Group article on succession planning in arts and culture organizations notes that boards may be concerned that succession planning indicates organizational weakness or instability, signaling a vote of no confidence for current leadership. It also notes that succession planning is sometimes deferred because a dominant leader is resistant to the possibility of change and transition. The article recommends mapping risk by identifying roles where a sudden vacancy would halt programs or jeopardize funding, including finance leadership, and codifying a board-approved short-term emergency and long-term succession policy.
The practical response is to frame the work as protection of the volunteer, not replacement of her. A second holder means she can take a vacation without the season collapsing. A written register means she is not the only person who can be blamed when a login fails at 7:40 on a Saturday. The Theatres Trust campaign-group note makes a related point: it is common for one trustee or director to end up carrying too much of the project’s work, and that can damage the chances of success. Spreading access is a way of protecting the person who has been carrying it.
A worked exercise for your next board meeting
This is a hypothetical, but it is the exercise to run. Take the box office role and list every system it touches. For each one, answer four questions in writing:
- Who holds the primary credential?
- Who is the named second holder?
- Where does the recovery path live — the recovery email, the phone number, the backup codes?
- When did the second holder last log in successfully?
If any answer is blank, that system is a single point of failure. The board does not need to solve it in the meeting. It needs to assign an owner and a date. Then repeat the exercise for the payment processor, the donor database, the website, and the accounting file. The output is the access and credentials register, and it is the first document in the plan.
Set a test date before the season opens. The second holder logs in, exports a report, and confirms the recovery path works. Record the date in the register. A credential that has never been tested by the second holder is not a backup. It is an assumption.
What the board adopts
Adopt the document list from the NPCNYS checklist as the board’s own standard, adapted to your theatre’s size. At minimum: an emergency succession policy, an updated organizational chart, a key contact list, a password and access management system, financial procedures documentation, written roles and responsibilities, an annual operational calendar, a communications protocol, and a leadership transition checklist.
Assign each document an owner and a review date. Put the review on the annual calendar next to the insurance renewal and the audit. Record the adoption in the minutes, with the date and the vote. That minute is the paper trail. It is what makes the plan traceable to a named conversation rather than to a good intention.
The goal is not to make a long-serving volunteer less important. It is to make her irreplaceable knowledge replaceable, on paper, before anyone needs it. The question for your board is simple: if your box office chair were unreachable tomorrow, could a named second person open the ticketing system, export the customer list, and run the Saturday show without calling her?