A CYBERSECURITY RISK ASSESSMNET METHODOLOGY FOR SAFETY-CRITICAL SYSTEMS