The challenges of risk management of critical infrastructure