Chapter 6
Five years after the voice-authorization fraud, the case entered a treasury-risk training program.
Names removed.
Good.
The title was:
WHEN CONVENIENCE BECOMES CREDENTIAL.
Luca hated it.
I thought it was accurate.
The case study focused on:
reusable challenge phrases.
voice confidence scoring.
callback overrides.
shared credentials.
executive exception culture.
Not on Vanessa.
Not on me.
Good.
The system could be studied without turning injuries into presentation material.
Then my consultancy grew.
Seven employees.
Enough.
Priya became head of controls.
One day she rejected my proposal.
Client wanted:
same-day vendor onboarding.
payment that afternoon.
I said:
“Urgent.”
Priya said:
“Not verified.”
I felt irritated.
Then remembered.
We verified.
Vendor bank account belonged to a different company with a similar name.
Fraud attempt.
Good.
The delay saved money.
Then Luca stepped back from day-to-day Moretti operations.
Professional CFO.
professional CEO.
independent risk committee.
He hated it.
Called people.
They stopped answering immediately.
He called me.
“They’re avoiding me.”
“Probably.”
“Helpful.”
“Yes.”
Good.
Then one board member told him:
“Emergency authority is not your personality.”
He was offended for a week.
I loved that sentence.
Then home.
One bank offered premium voice banking for private clients.
Luca laughed so loudly the banker looked confused.
“No.”
Good.
Then his personal accounts:
hardware key.
two-device approval.
no voice fallback.
Annoying.
Secure enough.
Then my company adopted:
no payment instructions through voice message alone.
no callback to numbers supplied in the same request.
independent vendor validation.
Clients complained.
Then stopped.
Good.
Then one employee said our rules were too strict for a $500 refund.
She was right.
We created thresholds.
Controls should match risk.
Not every payment needs a committee.
Then Luca asked:
“Are you becoming reasonable?”
“Dangerous question.”
He laughed.
Then Claire Donnelly, after release, applied for professional bookkeeping certification reinstatement years later.
Regulator reviewed.
Restricted practice.
supervision.
no treasury authority initially.
Specific consequence.
Luca heard.
“Should she be allowed?”
“Not our decision.”
He nodded.
Good.
Law and licensing, not personal revenge.
Then Victor Dane.
He left crisis consulting.
No one forced him to disappear.
He worked in communications later.
Financial-industry restrictions remained.
Again:
specific.
Then Martin Quill retired.
Before leaving, he sent Luca one page.
No apology novel.
Just:
I let convenience become doctrine.
Then:
Do not let anyone call a bypass temporary unless it has an expiration.
Good.
Luca kept the page in his office.
Not framed.
Then one of our household staff asked whether a guest could order her to fetch personal items from a car.
She checked authority chart.
No.
House manager handled request.
Good.
No kneeling.
No intimidation.
Then my knees.
Scars faint.
Sometimes marble floors still make me remember.
So I wear better shoes.
That is all.
Then one client wanted staff to kneel during a luxury tea service for aesthetic reasons.
I stared.
“No.”
Owner said:
“It’s traditional.”
“For whom?”
No good answer.
We redesigned service.
Standing.
Good.
My personal history informed that decision.
But it also made sense independently.
Workers are not décor.
Then Luca and I argued about whether that was overreaction.
He said:
“Maybe some staff wouldn’t mind.”
“Then ask them.”
Good.
We surveyed.
Most hated the idea.
Decision held.
Then one anniversary, Luca ordered truffle risotto at home.
I said:
“Cruel.”
He said:
“Exposure therapy.”
I threw a napkin at him.
Good.
Then I ate some.
Not because I had to conquer anything.
Because it smelled good.
Memory and appetite negotiated.
Appetite won that night.
Good.
Then the treasury training program asked Luca to speak.
He declined.
They asked Alex Mercer.
He accepted.
Good.
The person who had warned them got the technical stage.
No billionaire redemption speech.
Mercer said:
“Friction is a feature when money is leaving.”
Luca read the transcript.
Then:
“He’s enjoying this.”
“Yes.”
“Still.”
“Yes.”
Good.
The case belonged less and less to us.
That was healthy.
The treasury training case eventually added a line Rachel liked:
A fallback that is easier than the primary control will become the primary control during stress.
Exactly.
Voice authorization had been called emergency-only.
Then travel happened.
tokens failed.
people were late.
Emergency became convenience.
The wording changed future designs:
fallbacks must be slower, not faster.
Friction by design.
That idea spread beyond Moretti.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
May you like
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
The sixth chapter showed that better systems still need revision; controls can become excessive if nobody asks what risk they actually address.
