Critical infrastructure workers more likely to detect, report phishing