Architectural Alignment of Access Control Requirements Extracted from Business Processes