Critical Infrastructure Protection and the Evaluation Process