Modelling of quality of protection in outsourced business processes