1. ARTICLE IN PRESS Information Systems 30 (2005) 609–629www.elsevier.com/locate/infosys When security meets software engineering: a case of modellingsecure information…