SMS dit: Assessing information security