Using Cyber-Vulnerability Assessment (CVA) to Optimize Control System Upgrade Activities During Turnaround