SYRMA: a tool for a system approach to risk management in mission critical systems