A Critical Infrastructure Risk and Vulnerability Assessment