Naomi Odede reached the loading bay wearing a blazer over an event-crew T-shirt and carrying the irritation of someone watching a major client schedule collapse.
“You disabled every Red Crest badge?”
“Yes,” Juma said.
“They have thirty people building the stage. The conference starts in a few hours.”
“Two of their badges reached a guest floor outside their authorized route.”
Naomi explained that red badges belonged to Red Crest, the conference's staging and AV contractor, not hotel staff.
Halima opened the contractor log. Their approved movement was loading bay, ballroom, equipment store and staff lift. No guest floors.
Gideon Mureithi, the contractor supervisor, arrived with two technicians.
“My badges don't open guest lifts,” he said.
“The system says two of them reached a guest-floor zone,” Juma replied.
“Then your system is wrong.”
Juma did not accuse him of anything. He asked for identities attached to badge RC-114 and RC-121.
RC-114 belonged to Kelvin Oloo, a technician. RC-121 was assigned to a casual worker whose physical pickup signature was blank. Worse, the badge had been activated before the worker recorded his arrival at the hotel.
Naomi's expression changed.
“That should not happen.”
“Casuals change,” Gideon said.
“Badges don't change owners without a record,” Juma replied.
He offered a compromise rather than a total shutdown: contractors with verified IDs could continue work under escort through the loading route, but red credentials would remain disabled until the audit was complete.
Gideon called it an airport checkpoint. Juma let the joke pass. He wanted to know who could open which door.
The next problem came from the staff-lift camera. It had been administratively disabled for a scheduled rigging window.
The request originated in the events queue.
Naomi stared at the entry. “I didn't submit that.”
Achieng in IT confirmed that the camera had not failed. It had been deliberately taken offline because moving rigging equipment would obstruct the view and technicians did not want a live camera in the work zone.
“A legitimate gap,” Halima said.
“And a useful gap if someone knows it exists,” Juma replied.
Gideon warned that the client would blame the hotel for every minute of delay.
Naomi was caught between the contract and the access breach. She asked whether they could restore normal vendor movement.
“No guest routes. Verified identities only.”
They began checking contractors one by one—ID, badge serial, work order and zone. Several longtime technicians complained that hotel staff knew them already.
“I know your face,” Juma told one. “The system needs to know that this badge belongs to you today.”
Halima then opened the administrative history to see who had extended the two suspicious badges.
Her face went still.
“Juma.”
“What?”
“The override didn't come from contractor administration.”
She turned the screen toward him.
**Override user: JMwangangi.**
Timestamp: 00:31.
At 00:31 Juma had been standing in the loading bay in full view of Naomi, Gideon, Peter and more than ten technicians.
For a moment he felt the instinct to defend himself—to change his password, disable everything, announce that someone had framed him.
Instead he said, “Don't rely on a screenshot. Call IT. Preserve the full audit trail.”
Gideon watched him with a thin, almost relieved smile.
Juma did not give him a counteraccusation.
“If my account was used,” he said, “we start by investigating my account.”
The breach had just stopped being a story about outsiders with red badges.
The verification line produced another uncomfortable discovery. A technician who had worked at the hotel for years carried a valid company ID but a badge registered to another employee who was off sick.
“We swap badges inside the crew all the time,” he said.
Gideon cut in. “It is practical. Everyone is on the same contract.”
Juma shook his head. “Then the system records a name that is not the person at the door. That is not practical tonight.”
Naomi understood the business consequence immediately. Red Crest would have to reissue multiple credentials before stage work could normalize. She called the client and took responsibility for the delay without revealing guest details.
The camera-maintenance request was also examined more carefully. The work itself had a sensible explanation—rigging would block the lens and expose technicians close to the equipment—but no temporary camera or guard post had been added to compensate for the blind period.
“That is the real weakness,” Halima said. “The request may be legitimate, but the gap was left naked.”
Juma wrote it down. A legitimate operational exception could still become an attack path if nobody asked what replaced the missing control.
When his own username appeared in the override log, that lesson became personal. The system had not been “fooled” by a mysterious hacker in a dark room. It had trusted a credential that management itself had allowed to remain useful outside its intended device.
Juma's own name was now inside it.
The last system entry showed a master override from Juma's account at the same moment the loading-bay camera placed him nowhere near that terminal.