Mapping regulatory guidelines with organisational processes