How to Align Legal, Security & Engineering on the Same Risk Data