Ransomware is terrifying but never underestimate the damage an employee with unmonitored access can do