Text this: Information security risk assessment using situational awareness frameworks and application tools