Chapter 4 - The Permission Trail

By three in the morning, Reed Meridian headquarters no longer felt empty.
Simone had called a digital forensics firm.
Two specialists arrived carrying sealed equipment cases and began creating forensic images of the payroll server, executive laptops, and access-control system.
Marcus sat alone in his office while they worked.
His name kept appearing in places he had never been.
Marcus Reed — survey export.
Marcus Reed — vendor authorization.
Marcus Reed — access override.
Each record looked authentic enough to survive casual review.
That was the problem.
Marcus had spent years building systems around trust.
Now trust had become camouflage.
Richard entered without knocking.
“I found something.”
Marcus turned.
Richard placed a printed access report on the desk.
“Every suspicious approval happened between midnight and four a.m.”
“That supports stolen credentials.”
“Maybe.”
Richard pointed at dates.
“Look at these.”
Marcus recognized them.
Board retreat.
Dallas investor conference.
His anniversary vacation.
His father’s memorial dinner.
Times when senior executives knew Marcus would not be at headquarters.
“Someone knew my schedule.”
“Anyone with executive calendar access could.”
“That’s hundreds of people.”
“Not exactly.”
Richard pulled up another list.
Marcus’s detailed calendar was private.
Only his executive assistant, Julian, Richard, and corporate travel coordinator had full access.
“Vanessa?”
“No.”
“Calvin?”
“No.”
Marcus leaned back.
“So the person either has one of four accesses, or got it through someone who does.”
Richard hesitated.
“There’s more.”
He opened badge logs.
On March 2 at 2:09 a.m.—four minutes before the first payroll diversion was created—a badge entered the executive floor.
User:
RICHARD HAYES.
Richard looked Marcus directly in the eyes.
“I was home.”
“Can you prove it?”
“My building has garage records. My wife was recovering from surgery. I never left.”
Marcus believed him.
But belief was becoming expensive.
“Get the records.”
“I already requested them.”
Marcus studied his face.
Richard had worked for Reed Meridian eleven years.
He had supervised the headquarters move.
He had been beside Marcus during layoffs, acquisitions, lawsuits, and their father’s funeral.
“Who had your badge?”
“Nobody.”
“Did you lose one?”
“No.”
“Replacement?”
“Three years ago.”
Marcus looked up.
Richard stopped.
“What?”
“Where’s the old one?”
“Deactivated.”
“Where physically?”
Richard frowned.
“I turned it in.”
“To who?”
“Security administration.”
Darnell.
Marcus and Richard looked at each other.
Five minutes later they were downstairs.
Darnell was reviewing camera records with one of the forensic specialists.
Marcus asked, “What happens to surrendered executive badges?”
“They’re logged, disabled, then destroyed.”
“Who destroys them?”
“Security administration sends batches to operations.”
Richard said quietly, “My department.”
Darnell searched the inventory archive.
Richard’s badge had been returned.
Logged.
Marked destroyed.
But the destruction batch contained an irregularity.
Twenty-seven badges listed.
Only twenty-six serial numbers in the disposal receipt.
Richard’s old badge was the missing number.
Simone walked up behind them.
“So someone retained an inactive physical badge.”
Richard said, “Inactive badges shouldn’t open anything.”
Darnell turned toward the elevator scanner.
“Unless somebody reactivated it.”
The forensic specialist checked the access-control server.
At 1:58 a.m. on March 2, Richard’s old badge had been temporarily reactivated.
At 3:14 a.m., it had been disabled again.
The authorization came from SECURITY MASTER ADMIN.
Darnell shook his head.
“That account is supposed to require two-person approval.”
“Who are the two people?” Simone asked.
“Security director and operations.”
“Who was security director then?”
Darnell looked uncomfortable.
“Frank Ellison.”
Marcus remembered Frank.
Retired in April.
Moved to Arizona.
“Operations?”
Richard’s voice became quiet.
“Me.”
Simone asked, “Did you approve it?”
“No.”
“Then either your login was compromised again, or someone found another way.”
Darnell scrolled farther.
“There should be camera footage.”
The headquarters system retained lobby video for twelve months.
Executive-floor footage for eighteen.
Darnell entered the timestamp.
March 2.
1:55 a.m.
The lobby camera loaded.
Empty desk.
Polished floor.
Elevator doors.
At 2:06 a.m., a person entered from the parking garage.
Dark coat.
Baseball cap.
Head lowered.
They used Richard’s old badge.
Marcus leaned closer.
The person’s face remained partially hidden.
But the body language looked familiar.
Not enough to accuse anyone.
Enough to make Marcus uncomfortable.
The figure entered the elevator.
Darnell switched cameras.
Executive floor.
The person stepped out.
Walked directly toward the CFO suite.
Not Marcus’s office.
Not payroll.
Julian’s suite.
Richard whispered, “Freeze it.”
Darnell paused the frame.
The figure’s left hand was visible.
A heavy silver watch reflected the hallway light.
Marcus knew the watch.
Their father had bought two when Marcus and Julian joined the company.
Marcus wore his rarely.
Julian wore his almost every day.
Richard looked at Marcus but said nothing.
Simone broke the silence.
“A watch is not identity.”
Marcus nodded.
She was right.
Darnell advanced the footage.
The figure entered Julian’s office.
Forty minutes later, the person emerged carrying a laptop case.
Before entering the elevator, the figure lifted a phone to his ear.
For less than one second, the camera captured his face.
Marcus stopped breathing.
Not Julian.
Calvin Moss.
May you like
The corporate controller who had ignored every call that night.
And on Calvin’s wrist was Julian Reed’s watch.