A ransomware negotiator’s betrayal exposes the dangers of uncontrolled trust and why incident response demands strict access controls, oversight and segregation of duties.