Chapter 6
Five years after the pantry camera, Moretti Security faced its first major test under the new architecture.
A warehouse fire.
Not arson.
Electrical.
Night shift.
Fire alarm activated.
Security needed emergency mechanical access.
Old system:
one master key.
New:
two-person access.
hardware token.
logged release.
Did it slow response?
Twenty-eight seconds.
Acceptable.
Doors opened.
No one hurt.
Afterward, one executive complained:
“Too many steps.”
Dana Ortiz answered:
“Then test faster steps. Don’t remove separation.”
Good.
They optimized:
pre-positioned emergency token.
clear roles.
still dual control.
Then Luca told me.
“Twenty-eight seconds felt like forever.”
“Was it safe?”
“Yes.”
“Then improve without collapsing the rule.”
He smiled.
“You sound like Dana.”
“Worse things.”
My consultancy had seven employees by then.
Growing.
We audited temporary event credentials.
Found:
too many all-access badges.
Convenience again.
We changed:
zone-specific.
time-limited.
auto-expire.
One event producer complained:
“What if plans change?”
“Then update the badge.”
Good.
Temporary access should actually be temporary.
Then one employee forgot to revoke a vendor badge after an event.
No misuse.
Still incident.
We self-reported.
Client appreciated it.
One board member asked:
“Why report a harmless mistake?”
Because hidden harmless mistakes become habits.
Good.
Bellini Protective Systems completed external monitoring.
New CEO remained.
Marco no longer involved.
Family ownership reduced.
Company stable.
Then one article called them “rehabilitated.”
I disliked the word.
Companies do not feel shame.
People and controls change.
Then Isabella had completed supervision.
No contact.
Fine.
The hidden-camera hardware itself reached the end of evidence retention.
Police retained forensic images as required.
Physical camera:
destroyed.
Good.
No relic.
Then the pantry footage.
Legal retention ended later.
Luca asked Sofia, now thirteen, whether she wanted a personal copy before lawful deletion.
She looked horrified.
“Why would I?”
Exactly.
Deleted.
Good.
No trauma archive for a child.
Then marriage.
Ordinary.
Work.
travel.
arguments about lights.
One fight:
Luca installed a smart camera at our front door without telling me.
Security normal.
Still.
I said:
“Ask.”
He looked surprised.
“It’s outside.”
“Still our house.”
Then:
“You’re right.”
We kept it.
But discussed:
zones.
retention.
who had access.
Good.
Not anti-camera.
Pro-consent.
Then one client wanted facial recognition for gala guests.
I asked:
“What problem are you solving?”
VIP access.
Badges could solve it.
They chose badges.
Good.
Technology not default.
Then Sofia asked if she could put a camera in her room to watch her dog.
Luca nearly said no automatically.
Then:
“Let’s talk.”
They discussed:
no cloud sharing.
angle.
privacy.
household staff not recorded without notice.
Good.
She decided not to.
Too much work.
Perfect.
Then my company hired a privacy counsel.
Access and surveillance overlap.
Then one employee asked:
“Are hidden cameras ever okay?”
Sometimes.
Lawful investigations.
specific purpose.
narrow scope.
legal review.
Not routine convenience.
Good.
Context.
Then Luca’s security board found one issue:
panic-door code shared among three contractors.
Why?
Emergency convenience.
Again.
They fixed it.
No scandal.
Good.
Systems drift.
One property manager said:
“We already solved this five years ago.”
Dana:
“You never solve access forever.”
Exactly.
People change.
vendors change.
roles change.
Governance is maintenance.
Then I told my team:
“Credentials rot.”
They laughed.
Then wrote it into training.
Fine.
The warehouse fire review found another flaw.
One contractor had written an emergency token code on a clipboard.
Human beings defeat elegant systems creatively.
They removed visible code.
added sealed emergency instructions.
trained staff.
Good.
No control is finished.
Then one client asked:
“Why not make everything biometric?”
Because fingerprints do not solve role design.
Because faces cannot be revoked like badges easily.
Because privacy matters.
Because emergency delegation still needs process.
Good.
Then Luca said:
“You enjoy saying no to expensive technology.”
“Only when cheaper technology solves the problem.”
He smiled.
Then Moretti Security began annual “access minimization” week.
Each department reviewed:
who still has access?
why?
when does it expire?
Boring.
Effective.
Then one former employee still had access to a vendor portal.
Closed.
No breach.
Good.
Then I audited my own firm.
Found my admin account could open every client folder.
Did I need that?
No.
Reduced.
Painful.
Founder privilege.
Good.
Then one employee said:
“Shouldn’t you keep emergency access?”
We created break-glass admin with dual approval.
I did not know the daily credential.
Good.
The lesson constrained me too.
Five years after the pantry, surveillance no longer meant only fear.
It meant asking:
who owns the camera?
what does it see?
why?
who can access?
when is data deleted?
what credential opens what?
Questions.
Not panic.
That was better.
Moretti’s warehouse fire also exposed a human problem. One guard nearly skipped the dual-control rule because smoke was visible. His partner stopped him. Afterward, nobody disciplined the guard for panic. They trained emergency sequencing until both could complete it under pressure. Controls fail if they exist only when people are calm.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
May you like
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
The consultancy later added quarterly access pruning. Every unused privilege needed renewal or disappeared. Clients complained the first year. By the second, most appreciated fewer forgotten accounts.
