SMS: Understanding and managing risk in security systems for the DOE nuclear weapons complex (abbreviated version)