HOW ORGANISATIONS APPROACH FINANCIAL RISK ASSESSMENT AND DETECTION