Step-by-step risk management for medical IT networks.