Risk Assessment as Critical Milestone in SCADA ICS Cyber Security Assurance