A Methodology for Adopting Security Management Principles in Health Sector Environments