Justifying Cost of Overhauling Workflow Processes When Improving Security Posture