Chapter 9
Twenty years after the memory card slid across Luca’s table, security technology looked different.
Biometric access.
phone credentials.
temporary QR passes.
cloud monitoring.
The old six-digit family code felt ancient.
Good.
Then a new Moretti property proposed facial recognition for staff entrances.
Dana Ortiz had retired.
The new chief risk officer requested outside review.
Privacy concerns.
bias.
data retention.
Decision:
do not deploy.
Use badges plus optional mobile credentials.
Good.
Not every new tool improves control.
Then Luca said:
“Twenty years ago I wanted fewer codes.”
“And now?”
“I want fewer databases.”
Growth.
Then one of my former clients suffered a covert-camera scandal.
A manager hid a camera in a supply room to catch theft.
The camera also recorded private staff conversations unrelated to the theft.
The theft evidence became legally complicated.
Lesson:
good outcome does not cure unlawful method.
Again.
Sofia called.
“Everything is the pantry camera to you people.”
Maybe.
Then:
“No.”
Good.
We moved on.
My company, now mostly Malik’s, discovered a credential bug.
Temporary event passes lasted twenty-four hours longer than intended.
No misuse found.
They notified clients.
Good.
One client asked to keep quiet.
No.
Then:
“Why disclose a harmless bug?”
Because clients need risk truth.
Good.
Then Luca’s former shared-code email surfaced in an archive request.
TOO MANY CODES. KEEP SIMPLE.
He laughed bitterly.
“That sentence aged badly.”
“Yes.”
Then:
“Do you want it removed?”
“No.”
Good.
Records.
Then one niece asked:
“Did you really cause the whole thing by choosing one code?”
Luca answered:
“No.”
Then:
“I created a weakness. Isabella and Marco chose to exploit it.”
Specific.
Good.
Responsibility without collapse.
Then Marco sent Sofia a written apology through counsel.
She was an adult.
Choice.
She declined to receive it.
Good.
No forced closure.
Isabella’s letter remained private.
No archive.
Then my scar.
Almost invisible.
My hand fully strong.
One day I carried a heavy platter at family dinner.
Luca stared.
“What?”
“Nothing.”
Good.
The body had moved on.
Then one security conference asked me to tell the personal story.
I declined.
They asked me to speak on:
ROLE-BASED ACCESS FOR FAMILY-OWNED VENUES.
Yes.
Good.
Then I said:
“Family is a relationship. Access is a role.”
People wrote it down.
Fine.
Then Q&A:
“What about children?”
Give age-appropriate individual permissions.
Do not make their convenience code an administrative master.
Obvious now.
Written.
Sofia attended.
After:
“You’re finally making money off my cereal habit.”
I laughed.
“Not enough.”
Good.
Then Luca and I reviewed our own digital estate.
Passwords.
medical records.
financial accounts.
No shared master password.
Emergency access through documented process.
Good.
Then he complained:
“Romance is dead.”
“Security killed it.”
Good.
Then one evening our home internet failed.
Front-door camera offline.
Lights still worked.
Locks still worked.
Mechanical key.
Redundancy.
Good.
The mansion was sold years earlier.
New owners remodeled.
No idea where the cereal shelf went.
Good.
No pilgrimage.
Then twentieth anniversary of the incident passed unnoticed.
We realized weeks later.
Perfect.
The story was no longer a calendar event.
The role-based access conference eventually stopped using family-business examples in later editions.
The framework applied everywhere:
hospitals.
schools.
venues.
offices.
That pleased me.
The lesson had escaped the mansion.
Then one evening Malik called.
A client’s spouse had demanded admin access “because I own half the company.”
The legal documents actually showed she did own half.
Did that automatically make her system admin?
No.
Board could appoint her.
Until then:
no.
Good.
Ownership, relationship, and operational role remained separate.
Then Luca said:
“You have ruined every shortcut.”
“Good.”
Maybe.
Then we laughed.
Twenty years later, the most useful result of the pantry was not that we distrusted cameras.
It was that we stopped treating invisible social power as if it were a credential.
The digital-estate review produced one argument. Luca wanted Emma to hold an emergency envelope with recovery codes. Emma agreed, but only if the envelope listed exactly what each code opened. No mystery master. No blanket key. The lawyer laughed. “You two are exhausting.” Maybe. The envelope was clear.
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
May you like
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
At the conference, Emma was asked for one universal rule. She refused. Context matters. Then she offered a better question: what is the narrowest access that still lets the person do the job?
