Model-Based Analysis of Socio-Technical Risk