Experts: New Cybersecurity Standard Goes Beyond What US And Other Regulators Require

A recently published international cybersecurity standard goes beyond what regulators currently require of medtech manufacturers, say attorneys at King and Spalding. If adopted by the US FDA and others, it could add significant burden on medical software developers.

Businessman hand points to the word ISO with check tick icon
• Source: Alamy

International standards organizations have adopted a new cybersecurity standard for medical devices that goes beyond just looking at a product’s risk level as required by the US Food and Drug Administration, say attorneys at King and Spalding.

In a 8 February blog post, King and Spalding attorneys Eric Henry, Lisa Dwyer and Jessica Ringel wrote that...

Medtech Insight Podcast

Keep up with the top medtech business and regulatory news.

Medtech Insight brings you interviews and analysis, on the go.

More from Cybersecurity

MI-DigitalTechnologies (Premium-1): Optimal Imaging Frequency After Spine SBRT: Balancing Surveillance and Patient Care

 
• By 

A Deep Dive into Evidence-Based Guidelines, Clinical Considerations, and Evolving Practices for Post-SBRT Imaging in Spinal Tumor Patients

News We're Watching: Change Healthcare Details Breach Scope, CHAI Releases AI Assurance Draft, FDA Partners With Gates Foundation

 

This week, Change Healthcare admittedi ts February breach revealed sensitive information like medical diagnoses and Social Security Numbers; the Coalition for Health Artificial Intelligence released its Assurance Standards Guide and Reporting Checklist for developers; and the FDA announced public meetings in July on IVD classification, the Home as a Health Care Hub initiative, and device sterilization.

MDIC Benchmark Survey Finds Cybersecurity Maturity Still Lacking Among Device Manufacturers

 
• By 

Device manufacturers still have a low level of cybersecurity maturity, but larger companies seem to be doing better than smaller ones.

Medtech Connect Episode 15: Digital Trust

 
• By 

In this episode, Medtech Insight senior reporter Hannah Daniel speaks to Mark Brown, Global Managing Director of Digital Trust Consulting at the British Standards Institute about digital trust. In a world of cybersecurity breaches and ransomware attacks on hospitals, digital trust between companies and consumers is key, but current siloed operations can hinder that. We talk about the EU’s AI act, the speed of digital transformation, cybersecurity incentives, and how principle-based regulations are better than prescriptive ones.

More from Digital Technologies

Pilot To Program: FDA Issues Accreditation Scheme For Conformity Assessment Draft Guidances

 

The US FDA has published a trio of draft guidance documents for its Assessment Scheme for Conformity Program, which began as a pilot in September 2020 to capitalize on the role of standards in the regulation of medical devices.

News We’re Watching: Neuralink’s Blindsight Gets FDA Breakthrough Device Tag; FDA Pump Recalls, Guidances; Discure, DeepLook Bolster Coffers

This week, Neuralink announced it received US FDA breakthrough device designation for a device to restore sight; medtechs Discure and DeepLook secured new funding; FDA pump recalls from B. Braun Medical and Fresenius Kabi; Axonics prevails in patent infringement lawsuit with Medtronic; Merit Medical buys Cook Medical for $210m.

EU Launches Call For Regulatory Sandbox Initiative To Accelerate Medtech Innovation

 

The EU IHI’s eighth call for action also encourages innovative medtech approaches to tackling cardiovascular disease and osteoarthritis and patient-centered endpoints that can benefit from advancements in digital health.