Towards system-theoretic risk assessment for future ships: A framework for selecting Risk Control Options.