Text this: Managing information system security compliance by setting controls over documents /