Describir: Issues on Risk Analysis for Critical Infrastructure Protection