Optimizing investments in Cyber Hygiene for Protecting Healthcare Users