Text this: Information security governance simplified