Confidence levels in critical infrastructure cyber resilience