https://9dok.net/document/y96j0dxr-extension-business-process-model-notation-security-risk-management.html