This course provides a focused, practical framework for managing vulnerabilities in connected medical devices. Unlike traditional IT assets, medical devices often can’t be patched easily requiring a shift in how vulnerabilities are discovered, prioritized, and mitigated. This session will teach healthcare professionals how to implement a risk-based vulnerability management program for clinical assets that aligns with compliance mandates, patient safety, and operational realities.

Traditional vulnerability management processes do not translate well to the unique constraints of medical devices. Key issues include:

162 security vulnerabilities across IoMT devices like DICOM workstations, PACS, and infusion pumps; notably, 32% of PACS devices, 26% of pumps, and 18% of medical information systems had critical unpatched vulnerabilities (Forescout Vedere Labs: Unveiling the Persistent Risks of Connected Medical Devices - Oct 29, 2024)

What You’ll Learn

This course will help you define and build a framework for medical device vulnerability management. We will cover a systematic process of identifying, evaluating, prioritizing, and mitigating vulnerabilities.

Key topics include:

Device discovery and inventory
Vulnerability identification
Risk-based prioritization
Mitigation and compensating controls
Governance, documentation, and compliance

Medical Device Cybersecurity Module 3: Beyond the Patch

Duration

Format

Certificate + CEUs

Instructors

Register Today

Participants will be able to:

Register Today

Questions?

Start the Conversation