When has a spreadsheet become a business risk?

A spreadsheet becomes a business risk the moment losing it, or losing the one person who understands it, would genuinely hurt. Until then it is a brilliant, cheap, flexible tool and you should keep using it. The skill is noticing when it has quietly crossed that line.

Spreadsheets do not fail loudly. They fail on the day someone is on leave, or a formula silently breaks, or two people edit two copies and nobody knows which is real. Here are the signs the sheet has outgrown its job.

Five signs to watch for

• Only one person truly understands it. If operations depend on a single colleague's spreadsheet, you do not have a system. You have a dependency.
• There are several copies and nobody is certain which is current. The moment a file is called final version three latest, the sheet is managing you.
• People are retyping its numbers into other tools. Manual re entry costs time and produces quiet errors.
• It has become a database rather than a calculation. Hundreds of rows of live records, whether customers, orders or stock, is a job a spreadsheet was never built to hold safely.
• A wrong cell would be expensive. If one bad edit could misprice an order or lose a record, the risk now outweighs the convenience.

None of these mean panic and buy enterprise software. They mean the sheet has taken on a load it was not designed to carry, and it is worth planning the next step deliberately rather than after something breaks.

What the sheet was always good at

It is worth being fair to the spreadsheet. It is unbeatable for thinking, modelling, one off analysis, and prototyping a process before you know its final shape. Many good internal tools begin life as a spreadsheet, because that is how you learn what the process actually is. The problem is never that you used a spreadsheet. It is that the process quietly graduated and the tool did not.

What to do about it

You do not have to replace everything. Usually the right move is to lift out the one part that has become risky, whether that is the shared list of live records, the critical calculation, or the step three people retype, and give it a proper home. A small internal tool with real access control, a single source of truth, and a history of who changed what. The rest of the spreadsheet can happily stay a spreadsheet.

The test for whether it is worth building something is simple. Would a mistake in this sheet, or the loss of the person who runs it, cost you more than fixing it would? When the answer becomes yes, it is time, and not a moment before.