Risk control measures in medical device software