What Medical Device Manufacturers Can Learn From Past Vulnerability Disclosures

In December 2016, the FDA released a guidance document entitled Postmarket Management of Cybersecurity in Medical Devices, in which the FDA makes several recommendations to medical device vendors and healthcare delivery organizations on how to manage the cybersecurity risks introduced by connected medical devices. One of the recommendations is for device vendors to participate in cyber risk information sharing, in which information about security vulnerabilities is shared with the medical device community via Information Sharing Analysis Organizations (ISAOs). A medical device cybersecurity advisory issued by ICS-CERT can be the result of either self-reporting by the vendor or from a third party, like a researcher, via an ISAO or directly to ICS-CERT. For the past 3 years, MedCrypt has been analyzing this data and releasing it in an annual white paper. This webinar will dissect the findings and discuss trends and predictions for the future of medical device cybersecurity.