Incorporating occupational safety and health in the assessment of cybersecurity risks