Technology-supported Risk Estimation by Predictive Assessment of Socio-technical Security