Medical Device Cybersecurity Module 2: Lifecycle in Focus

Many healthcare delivery organizations (HDOs) only begin thinking about medical device cybersecurity after the device is deployed, or when a vulnerability is discovered. This reactive approach leads to:

• Procurement lacks security screening – devices are acquired without an adequate vendor risk assessment, security specification documentation (MDS2, SBOMs, etc), or contraction protections.
• Onboarding processes are inconsistent – outside of traditional initial acceptance, HTM/CE should register all attributes, have coordinated practices and SOPs with IT, and harden devices at time of deployment.
• Operational Security is minimal – most security activities are reactive, not embedding security practices within daily operations to ensure continuity and standardization.
• Decommissioning is insecure – sensitive data is often left on devices, and network access is may not be revoked upon retirement. 

Register Today

Register Today