Text this: It Auditing using controls to protect information assets