Device-Makers Need To Open Up More On Cybersecurity In Pre-Market, Draft Guidance Says

A new update to the pre-market cybersecurity guidance issued four years ago reflects how US FDA's thinking on the issue has evolved, as more cases of device vulnerabilities have surfaced. Among the key updates are recommendations for sponsors to submit a cybersecurity "bill of materials" in product labeling to better coordinate with end-users and to use a two-tiered risk management approach.

Maksim Kabakou/Shutterstock.com

US FDA has developed a two-tiered system for assessing the cybersecurity risk level of a medical device in a new draft guidance intended to update a 2014 document. The new draft, addressing pre-market cybersecurity recommendations for device companies, also directs device-makers include a cybersecurity "bill of materials" and makes other labeling recommendations.

The agency released the draft guidance this week after officials have been signaling plans for the updates for the...

Read the full article – start your free trial today!

Join thousands of industry professionals who rely on Medtech Insight for daily insights

  • Start your 7-day free trial
  • Explore trusted news, analysis, and insights
  • Access comprehensive global coverage
  • Enjoy instant access – no credit card required

More from Cybersecurity

With LDT Rule DOA, Could FDA Shift Focus To RUOs?

 

Now that the US FDA has chosen not to appeal a March ruling effectively killing the agency’s efforts to regulate lab-developed tests as medical devices, will the agency adopt a different strategy to flex its regulatory muscle?

Congress, Researchers Highlight Security Risks At DNA Testing Services

 
• By 

Congress has launched an inquiry into 23andMe amid privacy concerns following its bankruptcy, particularly regarding the potential sale of sensitive user data. Additionally, a Cybernews report gave 40 DNA testing firms an average cybersecurity grade of D, citing widespread vulnerabilities and data breaches, along with inadequate public information about their security practices.

Birmingham City University Develops New Defense Mechanism Against Cyberattacks On AI Systems

 

AI systems used in healthcare are vulnerable to adversarial cyberattacks, which are a growing concern, said Atif Azad, a professor of AI at Birmingham City University. Azad’s research group has developed a method that trains AI to become more resilient to cyber threats through the use of random image adjustments.

Enovis Appoints Damien McDonald CEO, Reaffirms Q1 Guidance Amid Strategic Growth Push

 
• By 

Enovis has named veteran medtech leader Damien McDonald as its new CEO effective 12 May as the orthopedic company reaffirms first-quarter 2025 revenue guidance of between $555m and $563m. Medtech Insight spoke with Tim Czartoski, Enovis’ president of US surgical and global product and enabling technologies, about the firm’s growth strategy and innovation plans.

More from Digital Technologies

Aneira Health Launches New Precision Medicine Platform Exclusively For Women

 

Cecilia Lindgren, Aneira Health’s co-founder and chief science officer, said that the company has “redesigned the diagnostic model.” The subscription-based platform offers clinical-grade and AI diagnostics alongside clinical consultation.

AI In Health Delivery: Patients Most Confident When HCPs Are In Charge

 
• By 

Annual survey of patients and professionals shows how attitudes to health system transformation are evolving and what stakeholders are demanding as acceptance of AI tools accelerates.

Ultrahuman Launches Home Health Monitoring

 

Ultrahuman seeks to “create an environment that aligns with our bodies" by linking environmental parameters collected by Ultrahuman Home to health physiology, measured by the Ultrahuman Ring Air.