Quantitative Cyber Risk Reduction Estimation Methodology for a Small SCADA Control System