FDA Cybersecurity Forum: Trustworthiness, Threat Modeling Central Issues
US FDA hosted a range of device- and IT-industry stakeholders for a two-day event on medical device cybersecurity in pre-market submissions. The first day emphasized securing legacy software, authentication and encryption techniques, and risk assessment models, among other issues
You may also be interested in...
The US Department of Homeland Security National Cybersecurity and Communications Integration Center is warning of potential cybersecurity vulnerabilities in Stryker hospital beds and BD diagnostics equipment.
Device firms well-versed in carrying out coordinated vulnerability disclosures said it is important to secure company executive buy-in and to use the principles laid out in an evolving US FDA guidance on cybersecurity for assistance at a recent FDA cybersecurity meeting.
A new update to the pre-market cybersecurity guidance issued four years ago reflects how US FDA's thinking on the issue has evolved, as more cases of device vulnerabilities have surfaced. Among the key updates are recommendations for sponsors to submit a cybersecurity "bill of materials" in product labeling to better coordinate with end-users and to use a two-tiered risk management approach.