HOW ORGANISATIONS APPROACH FINANCIAL RISK EVALUATION AND DETECTION