Risk Management in Software Medical Devices: What Can Go Wrong?