Application of risk management for IT networks incorporating medical devices. Application guidance - Part 2-6: Guidance for responsibility agreements