Text this: Value focused assessment of information system security