Assessing the impact of user behavior and insider threats on critical infrastructure