When the Audit Folder Hit the Desk, Thirty-Two Years Began to Unravel

“I wanted to feel like somebody still noticed when I walked into a room.”

Clara almost said something cruel.

She had several options.

Olivia certainly noticed your wallet.

Apparently theft makes you interesting.

Instead she said nothing.

Richard lowered his voice further.

“She made me feel useful.”

“And you made her feel protected.”

His eyes moved.

So Olivia had told the truth.

“How much did you know about the company expenses?”

“Not much.”

“Richard.”

“She told me some reimbursements were being questioned.”

“When?”

“A few months ago.”

“What did you say?”

“I said you wouldn’t be involved.”

Clara stared.

“Why?”

“Because you were still in finance transformation then. Audit wasn’t your group.”

Before her promotion.

That part was true.

Clara had been named Senior Vice President of Corporate Audit only six weeks earlier, after the previous executive left for a board role.

Richard could not have anticipated that Olivia’s expenses would end up under Clara’s authority.

Unless he knew more.

“Did you ever use my work credentials?”

Richard’s confusion appeared real.

“What?”

“My credentials.”

“No.”

“My laptop?”

“God, no.”

“My authentication codes?”

“I don’t even know what you mean.”

She watched him carefully.

Richard was a good liar when he had time.

He was mediocre when surprised.

“Did Olivia?”

“How would I know?”

“You spent time in our house with her?”

The color drained from his face.

That was answer enough.

Clara’s stomach turned.

“When?”

“Clara.”

“When?”

“Once.”

“Lie again and I leave.”

He swallowed.

“Three times.”

“Our bedroom?”

“No.”

“Did she enter my office?”

“I don’t know.”

“You don’t know?”

“I went downstairs once. She was looking for a charger.”

Clara shut her eyes briefly.

Her home office contained an older laptop she sometimes used to access corporate systems through secure remote authentication. The device required credentials and multi-factor approval, but Richard knew the PIN to her personal phone for years.

“Did you give her my phone?”

“No.”

“Did you leave it with her?”

“I don’t remember.”

“That is different.”

Richard’s own fear finally seemed to overtake his concern about the marriage.

“What is this about?”

Clara looked at him.

“You should get a lawyer.”

“Clara.”

She walked away.

He did not follow.

By noon, information security confirmed that eleven fraudulent vendor approvals had come from Clara’s home network.

Not her office.

Not a remote hotel connection.

Her home.

The access dates matched periods when she had been traveling.

Six also matched dates Richard’s calendar showed no appointments outside the house.

That did not prove Richard had authorized anything.

It did establish opportunity.

Then IT found something worse.

On three occasions, authentication prompts had been approved from Clara’s personal phone within minutes of the fraudulent logins.

Clara stared at the report in outside counsel’s conference room.

“I approved them.”

The investigator, Maya Chen, did not agree.

She said, “Your phone approved them.”

“I had the phone.”

“Do you remember the prompts?”

“No.”

“That matters.”

“Does it?”

“Yes.”

“How?”

“You travel frequently. How many authentication requests do you approve in a normal week?”

Clara thought.

“Twenty. Thirty.”

“Do you read every location notification?”

Clara said nothing.

Maya nodded.

“That’s what credential attacks depend on.”

“I’m not an idiot.”

“I didn’t say you were.”

“I tell employees not to approve prompts they didn’t initiate.”

“And did you follow that advice every time?”

Clara felt irritation rise.

“I don’t know.”

“Then the answer is probably no.”

Daniel sat at the far end of the table without speaking.

Clara looked at him.

“Say it.”

He frowned.

“What?”

“You’re thinking something.”

“I’m thinking everyone in this room has ignored a security warning.”

Maya raised a hand.

“I haven’t.”

Daniel looked at her.

“Of course you haven’t.”

Maya smiled faintly.

The small humor made Clara angrier for three seconds and then, unexpectedly, calmer.

She looked back at the report.

“I may have approved the requests.”

“Yes,” Maya said.

“Which means I helped whoever did this.”

“It means your device may have been part of the access chain.”

“That is a polite way to say the same thing.”

“No. It’s a precise way.”

Clara recognized herself in the answer and disliked it.

The audit committee placed her on paid administrative leave that afternoon.

Mark called personally.

“This is not disciplinary.”

“It will be perceived that way.”

“We’ll manage communication.”

“You can’t manage gossip.”

“No.”

“I should resign.”

“No.”

“Mark.”

“Clara, if you resign during an active investigation into fraudulent approvals carrying your identifier, what do you think everyone will conclude?”

She knew.

“That I did it.”

“Exactly.”

“I also don’t want the company protecting me because of my title.”

“Staying available for investigation is not protection.”

She leaned against the hotel window.

Traffic moved below.

“What am I supposed to do?”

“For once?”

His tone softened.

“Nothing.”

Clara almost laughed.

She had never been good at nothing.

Her first full day on leave lasted approximately nine years.

She woke at 5:12 without an alarm, made hotel coffee, took one sip, and threw it away. She walked three miles through streets she usually saw from a car. She bought a blueberry muffin, ate half, and carried the other half until it became embarrassing to continue holding it.

At 8:30 she sat in the hotel lobby and read a newspaper she did not absorb.

At 9:15 she opened her personal email.

At 9:17 she closed it.

At 10:02 Richard sent a message.

I told my lawyer everything I know about the condo and transfers.

She did not respond.

At 10:31 Olivia texted from an unknown number.

I need to talk to you without Richard.

Clara stared at the message for a long time.

Then she forwarded it to outside counsel.

Counsel replied almost immediately.

Do not engage directly. We can arrange through attorneys if relevant.