Group of coworkers going through brainstorming session

Medical Device Cybersecurity Module 7: When Devices Go Dark

Asynchronous Icon

Duration

4 Hours

Curriculum Icon

Format

Blended Learning 
(Virtual + Self-paced)

Flexibility Icon

Certificate + CEUs

Earn Certificate of completion 
+ 0.4 CEUs

Strong Network Icon

Instructors

Matt Dimino and Toby Gouker
Experts, Practitioners, and Executive Leaders in Medical Device Security

Medical devices are essential to clinical workflows, yet they are increasingly targeted in cyberattacks. Most are not designed with robust security or failover mechanisms, and many operate on outdated systems. When ransomware, network outages, or unplanned events occur, these devices may stop functioning, delay care, or create life-threatening situations.

Unfortunately, many healthcare delivery organizations (HDOs) have incident response (IR) and business continuity (BC) plans that exclude or inadequately address connected medical devices. Teams often lack protocols for isolating compromised devices, verifying integrity post-incident, or deploying alternate equipment and workflows. This creates dangerous gaps in patient safety and operational resilience.

Key topics include:

  • Discuss the business value of passive network monitoring tools.
  • Identify the need and outcomes for integrated systems (CMDB/CMMS with passive network monitoring tools).
  • Identify how data attributes and asset intelligence can be used to create successful business outcomes for risk remediation.
  • How to use MDS2 and SBOM documents for securing medical devices and supporting cyber hygiene in the procurement process.

Participants will be able to:

Results include improved security posture, risk-driven decision making, cross-team alignment, and greater cyber resiliency. 

  • Recognize the role of medical devices in incident response and clinical downtime scenarios.
  • Integrate connected devices into the organization’s formal IR and BC plans
  • Define contingency strategies using alternate devices, paper-based workflows, and clinical decision pathways.
  • Conduct and document tabletop or functional exercises involving medical device disruptions.
  • Recommission medical devices post-incident following validation and safety checks.
  • Collaborate with clinical operations, emergency management, and HTM to ensure continuous care delivery.

Questions?

Interested in learning more about this module or how it fits into your organization’s needs?

Start the Conversation