How to Define Industrial Security Systems Testing Criteria