Optimizing Cybersecurity Risk in Medical Cyber-Physical Devices