Why organisations need to rethink how they protect trust