Grafting Regulations into Business Protocols: Supporting the Analysis of Risks of Violation