Using STPA to Support Risk Management for Interoperable Medical