Text this: Information security risk analysis