From Early Requirements Analysis towards Secure Workflows