Most security budgets point outward. Firewalls, cameras, badge readers, alarm systems, all built to stop someone getting in. The bigger risk is usually already inside, holding a key you handed over yourself.
The threat that already has a badge
An insider doesn't need to break anything. They already have the login, the access card, the trust of the people around them. No alarm goes off, because nothing looks wrong. The damage comes from someone using permission they were given, not permission they stole.
Why it's harder to catch
External attacks leave marks: a forced door, a login from an unfamiliar location, an alert from a firewall. An insider's actions usually look identical to their normal job. Investigators end up asking not what happened, but why someone did something they were fully authorised to do.
By the time a pattern is clear enough to act on, the person behind it has often had months of undisturbed access.
The Ghost Key
This is the problem sitting at the centre of The Ghost Key. The threat James O'Neill and Sarah Sterling are chasing is not a stranger who broke through a perimeter. It is someone already inside the circle of trust, doing exactly what they were cleared to do, until the moment it stops looking innocent.
Twenty years in security consulting taught me the hardest cases were never the ones with a broken window. They were the ones where every door had been opened properly, by someone who was allowed to open it.
The hardest door to guard is the one you already handed someone the key to.
The Lost Key, The Grey Wind, and The Ghost Key are all out now on Kindle, all major eBook platforms, and paperback.
Join the Briefing List for new releases, exclusive short fiction, and more tradecraft writing.
If you've read the Key Series and enjoyed it, a short review on Amazon or Goodreads helps new readers find the books. It takes less than a minute.