Protecting vulnerable healthcare IT infrastructure in the face of growing cyber-risk