Goal-equivalent secure business process re-engineering