Risk Assessments of Operational Technology Systems