Risk Analysis of Information Systems By Agent-Based Modeling of Business Processes