When the Principal Goes Offline: The Family Office's 72-Hour Test

A short interruption can expose years of unspoken assumptions. A 72-hour operating doctrine gives a family office enough authority, information and restraint to keep essential work moving.

Imagine a Monday morning. The principal is unreachable, the chief executive is on a flight, payroll needs release, a trustee wants confirmation of an instruction and a technology provider has issued a security alert. Each matter is manageable. Together, they reveal whether the office is an institution or a collection of trusted people waiting for one person to reply.

A compact 72-hour doctrine is more useful in that moment than a shelf of continuity manuals. It should say what must continue, who may decide, which record is authoritative and when temporary powers end. The exercise is operational, but its subject is family governance.

1. Start with the family's unfinished business

Begin with services, not departments. Payroll may be critical; the monthly management pack probably not as much. Protecting access credentials, responding to a suspected data breach, completing a time-sensitive corporate act, conveying an authenticated instruction to a trustee or bank, and supporting an urgent family-care matter may all have different clocks. For each service, the office should name the minimum acceptable outcome after 24 hours and after 72.

This is the most useful idea to borrow from current financial-sector resilience work. In June 2026, the Hong Kong Monetary Authority reported that authorized institutions had completed an initial programme built around critical operations, tolerances for disruption, dependency mapping and scenario testing. However, those rules do not automatically govern family offices. The underlying question travels well: which promises would cause real harm if the office failed to keep them?

The answer should fit on one page. A long list turns every inconvenience into an emergency.

2. Authority needs a spare key

A service can be technically unavailable when nobody is authorised to use it. The principal's absence often exposes this quieter single point of failure. Staff know how to prepare a payment or contact a provider, yet the approval chain still ends with an unanswered telephone.

Temporary authority should therefore be designed in advance. For each critical service, record the activation event, the first and second decision-maker, financial or legal ceilings, actions that always require two people, prohibited actions, the escalation route and the expiry time. The substitute receives only enough power to protect continuity. Decisions that alter ownership, beneficiary rights, long-term strategy or family policy should normally remain outside the emergency lane unless governing documents clearly provide otherwise.

The doctrine must agree with reality. Bank mandates, company constitutions, trust instruments, powers of attorney and employment authorities should support the intended handover. A beautiful matrix cannot create a legal power that the underlying document withholds.

Every temporary decision also needs a compact log: what was decided, by whom, on what information, under which authority and what remains unresolved. That record protects institutional memory without scattering private family detail across inboxes. It also makes the handback orderly when normal authority returns.

3. Rehearse the office you actually have

The test should include the people and providers on whom the real office depends. Map each critical service through five lenses: people, process, technology, information and outside provider. The map often reveals that the backup approver cannot reach the document vault, the emergency contact at a vendor left months ago, or the trustee will accept instructions only through a channel nobody has tested.

Then run a 72-hour test-drive. Make the principal unavailable. Add one plausible complication, such as a cloud outage, a convincing voice message requesting an urgent transfer, or the loss of the office's primary laptop. Do not announce every answer in advance. Observe where staff pause, improvise or disclose more information than necessary. Hong Kong's SFC now asks the licensed firms within its scope to pre-plan containment and test incident procedures through exercises. A family office can use the same discipline without turning the afternoon into a compliance seminar.

At hour 72, ask what had to be guessed. Convert each guess into a named owner, a verified contact, a documented authority or a tested workaround. Repeat the exercise when a key person, mandate, system or provider changes. The finished doctrine is small because its value lies in rehearsal. It becomes a family compact for how authority travels while the usual hierarchy is paused.

Disclaimer: All views expressed and facts given in this article reflect those of the writers, and/ or Crescent Legacy. They are neither endorsed nor verified by Asia First Consulting Services Ltd or Global Media Solutions Ltd