If the company is to be sovereign and holding their own coins, the individual should be able to construct a multi-sig wallet, send, receive and recover on the spot with whatever device they have. From there you can pose "what if" scenarios on a myriad of situations and test their skill and knowledge...