Analytical approaches to information processing and risk assessment: from cybersecurity disclosures to medical audits