Describir: Assessing Risks in Critical Systems Using Petri Nets