Exploring the Impact of NERC CIP Regulatory Compliance on Risk and Security for Bulk Electric System Grid Cyber-Attacks: A Qualitative Phenomenological Study