Text this: Auditing a business risk approach