Chapter 8: The Person Behind the Paper Trail

Andre pulled into a quiet parking lot outside a neighborhood grocery store.
Marcus sat in the passenger seat, reading the email again while the engine idled.
His cousin watched him from behind the steering wheel.
“Are you going to tell me what's going on now?””
Marcus rubbed his eyes.
“I think someone used my name to approve a security risk. Victoria's account was used to submit the document, but now they've found another version.””
Andre stared at him.
“Someone forged your signature?””
“I don't know that yet.””
“Marcus.””
“I know what it looks like. But I don't want to accuse someone before the records are checked.””
Andre shook his head.
“You've been working all night, somebody threw water in your face, and now you're investigating your own workplace from the passenger seat. You hear yourself?””
Marcus couldn't help smiling faintly.
“When you say it like that, it sounds bad.””
“It is bad.””
Andre reached across the console and gently pushed Marcus's phone down.
“You're not going to solve this sitting in my car. We're going to your apartment. You're going to eat something and sleep.””
Marcus looked at the screen one last time.
“Can you just give me a minute?””
Andre sighed.
“One minute.””
Marcus forwarded the email to his personal address, careful not to download or copy any restricted company files beyond what the message itself contained. He wanted a record of the notification, not an unauthorized copy of the investigation materials.
Then he put the phone away.
“Okay.””
Andre drove him home.
For the next several hours, Marcus slept.
He slept through the sound of Andre making breakfast. He slept through a delivery van stopping outside the apartment building. He slept until late afternoon, when sunlight had moved from the living-room floor to the opposite wall.
When he finally woke, his phone showed six missed calls.
Three were from Daniel.
Two were from Human Resources.
The last was from an unfamiliar number.
Marcus called Daniel first.
The senior director answered immediately.
“Marcus. How are you feeling?””
“Better. I finally got some sleep.””
“Good. Don't come back to the office today. The review team has enough to work with for now.””
“What did they find?””
Daniel paused.
“The security team located an earlier version of the risk-acceptance form. It was created during the project review on October 9.””
“Whose signature was on it?””
“Evelyn Price's.””
Marcus sat up.
“The COO?””
“Yes. But listen carefully. Her signature alone doesn't establish that she approved the specific risk described in the later document. The earlier form has a different scope, and the review team is examining whether the two documents were improperly connected.””
Marcus ran a hand through his hair.
“So she did sign something?””
“She signed a project-level risk acknowledgment related to the accelerated schedule. The record does not show that you approved the vulnerability found during testing.””
“That distinction matters.””
“It matters enormously.””
Daniel explained that the original document had been created before Marcus discovered the vulnerability. It concerned the project's compressed delivery schedule and the general risks associated with reducing testing time.
The later document, submitted under Victoria's administrative account, contained additional language referring to the specific security issue Marcus had reported.
The wording made it appear that the technical team had reviewed the vulnerability and accepted the risk of proceeding.
But the original form did not contain that language.
“Have they established who added it?”” Marcus asked.
“Not yet. The version history shows that the later document was derived from the earlier file. The reviewer is comparing the edits against the account records.””
Marcus stared at the floor.
Evelyn's signature had been taken from a legitimate document and attached to something different.
His own name had been added as well.
If someone had deliberately altered the record, the deception involved more than a false allegation about his performance.
It could have made an unapproved security decision look legitimate.
“Did Evelyn know about the later version?”” he asked.
“We don't know. She has agreed to cooperate with the review.””
Marcus thought back to the quarterly meeting.
Evelyn had listened while he explained why the accelerated migration schedule was risky. She had asked sensible questions and requested documentation. He had left the meeting believing she cared about the quality of the work.
But the original form showed that she had accepted some level of project risk.
Maybe she had underestimated the consequences. Maybe she had relied on inaccurate information. Or maybe someone had taken advantage of the pressure she was putting on the department.
Marcus couldn't know yet.
Daniel continued.
“The independent reviewer wants to speak with you tomorrow. They'll ask about your work on October 9, the reporting process, and your interactions with Victoria. You don't need to prepare a speech. Just answer the questions honestly and provide any records you've been asked to supply.””
“Understood.””
“And Marcus, don't contact Evelyn or Victoria about this. Let the reviewer handle the interviews.””
“I won't.””
Daniel paused.
“There's something else. Human Resources has confirmed that the termination recommendation was never approved. Your employment status remains unchanged.””
Marcus closed his eyes.
He hadn't realized how much he needed to hear those words until they were spoken plainly.
“Thank you.””
“You don't need to thank me for correcting the record. It's what should have happened in the first place.””
After the call, Marcus sat quietly for a while.
He had spent so much time trying to prove that he was competent that he had barely considered what it would mean to be treated fairly.
He thought about his first day at Sterling Financial, when Daniel had shown him the technology floor and introduced him to the operations team. Daniel had told him that a good engineer should never feel pressured to hide a problem just because the truth was inconvenient.
Marcus had believed him.
He still wanted to believe him.
The following morning, Marcus arrived at the office wearing a clean blue shirt and dark trousers. He had slept properly, eaten breakfast, and left his laptop at home.
He was there to answer questions, not to fix another emergency.
A Human Resources representative met him at reception and escorted him to a small conference room. Two people were already waiting: an independent workplace investigator named Patricia Cole and a security compliance officer named Raymond Ellis.
Patricia introduced herself and explained the purpose of the meeting.
“This is a fact-finding interview,” she said.
“We haven't reached conclusions. We want to understand the sequence of events and compare your account with the available records.””
Marcus nodded.
“That's fine.””
Patricia opened a folder.
“Let's begin with October 9. What happened when you discovered the vulnerability?””
Marcus described the testing environment, the warning generated by the validation process, and the steps he took to stop the deployment.
He explained that he had used his approved access, documented the issue, and submitted the report through the designated portal.
Raymond asked several technical questions.
Marcus answered each one carefully.
“Did anyone instruct you to accept the risk and proceed?””
“No.””
“Did you sign a risk-acceptance form?””
“No.””
“Did you receive a form asking you to approve the specific vulnerability?””
“Not that I recall. I never knowingly approved one.””
Patricia wrote something in her notes.
“What was your interaction with Victoria after you submitted the incident report?””
Marcus described the conversation in her office. He explained that she had been frustrated about the delayed demonstration and had told him to stop escalating issues without her approval.
“Did you understand that instruction to mean you should stop documenting security problems?””
“I understood that she wanted me to stop contacting the security team. But the company's reporting policy required me to report a confirmed vulnerability, so I followed the policy.””
Raymond nodded.
“That is consistent with the incident record.””
Patricia turned to another page.
“Now let's discuss the performance review. Did Victoria explain that your employment was under review?””
“No.””
“Did she ask you to respond to the allegations listed in the termination recommendation?””
“No.””
“Did you receive a copy of the recommendation before yesterday morning?””
“No.””
Patricia closed the folder.
“Thank you. We'll compare your account with the other records and contact you if we need clarification.””
Marcus stood.
He had expected to feel relieved.
Instead, he felt uneasy.
The interview had been professional, and the investigators had asked reasonable questions. But the documents were more complicated than he had imagined, and he still didn't know who had altered the form.
As he walked toward the exit, he saw Daniel standing outside another conference room.
The senior director approached him.
“How did it go?””
“They asked about the security incident and the performance review. I answered everything.””
“Good.””
“Any news?””
Daniel glanced toward the closed conference-room door behind him.
“Evelyn has provided her original project correspondence. The review team is examining it now.””
Marcus hesitated.
“Do you think she knew about the altered form?””
“I don't know,” Daniel said.
“And I won't guess.””
Marcus appreciated the honesty, even though it left him with no satisfying answer.
He was about to leave when the conference-room door opened.
Evelyn Price stepped into the hallway.
She was in her early sixties, with short natural hair, a charcoal dress, and the composed expression of someone accustomed to being listened to.
She looked at Daniel first.
Then her eyes settled on Marcus.
“Mr. Reed,” she said.
“I understand you've been asked to explain the October 9 incident.””
“Yes, ma'am.””
“I've reviewed the original project records. I want you to know that I did not authorize anyone to conceal a security vulnerability.””
Marcus held her gaze.
“I reported it through the official process.””
“I've seen the report.””
“Then you know I never approved the risk described in that form.””
Evelyn's expression tightened.
“I know the original document did not contain the language in the later version.””
She turned toward Daniel.
“Who had access to the project-governance archive?””
Daniel answered carefully.
“The security team is establishing that now.””
Evelyn nodded, then looked back at Marcus.
“I need you to understand something. I authorized a review of the migration schedule because the executive team was concerned about delays. I did not authorize the falsification of a technical approval.””
Marcus felt his pulse quicken at the word falsification.
It was the first time a senior executive had acknowledged the possibility aloud.
Before he could respond, Raymond Ellis appeared at the conference-room doorway.
“Ms. Price, we need you to come back inside. The audit team has finished comparing the document versions.””
Evelyn turned.
“What did they find?””
Raymond held a tablet against his chest.
“The later version was modified after the original approval was recorded. We have identified the account used for the modification, and we need to discuss the access history.””
Daniel's eyes narrowed.
“Was it Victoria's account?””
Raymond shook his head.
“No. The modification was made through a different account.””
He glanced at Evelyn.
“An account with executive-level privileges.””
Evelyn's face went pale.
Marcus watched her carefully.
For the first time since he had met her, she looked genuinely frightened.
Raymond opened the conference-room door wider.
“The account belongs to someone who was not listed as an approver on the original project.””
Evelyn took a slow breath.
Then she said a name.
A name Marcus recognized from the company's leadership meetings.
May you like
A name that could explain why Victoria had been so determined to make the evidence point toward him.
And why someone might have needed his signature on a document he had never signed.