The Inner Circle

 View Only
Back to discussions
Expand all | Collapse all

FDA / MITRE Next Steps Toward Managing Legacy Medical Device Cybersecurity Risks

  • 1.  FDA / MITRE Next Steps Toward Managing Legacy Medical Device Cybersecurity Risks

    Posted Jan 20, 2024 05:18:00 AM
      |   view attached

    Hi All,

    The FDA contracted with MITRE to develop the report, Next Steps Toward Managing Legacy Medical Device Cybersecurity Risks.  Legacy medical devices are those that cannot be reasonably protected against current cybersecurity threats, and these devices can pose significant risks to the healthcare sector. Legacy devices were legally put on the market and may still be broadly used. However, cybersecurity controls that may have been effective at their point of purchase may no longer be adequate. Addressing this issue is complex and must be done in a way that minimizes negative impacts on patient care and safety. This publication outlines practical approaches and recommendations that build on previous work and can further drive sector-wide legacy device cyber risk management efforts.



    ------------------------------
    Michael Roza CPA, CISA, CIA, CC, MBA, Exec MBA, CSA Research Fe
    ------------------------------