Security risk assessment and management in chemical plants