Cybersecurity Risk Assessment for Safety-Critical Systems