Text this: Auditing a risk analysis approach