Text this: Managing the human factor in information security