Methodology for Assessment of Medical IT-based Systems in an Organisational Context