Today, we have discovered a suspicious Bitcoin transaction that doesn't seem to be initiated by any one of the company owners. Some of them are not online at the moment so this is not conclusive.
Isn't this exactly what P2SH was invented to prevent?
Have a separate safety computer located somewhere else to automatically countersign all transactions which can be verified to be legitimate. Normal transactions using bitcoind will not work without access to both wallets.