Next Steps Toward Managing Legacy Medical Device Cybersecurity Risks
Nov. 21, 2023
The report identifies near-term solutions to address the challenges posed by legacy medical devices, including considerations for adoption by less-resourced healthcare delivery organizations, such as rural providers and safety-net hospitals
The FDA acknowledges that legacy medical devices—those that cannot be reasonably protected against current cybersecurity threats—can pose significant risks to the health care sector. Legacy devices were legally put on the market and may still be broadly in use. To address this important security issue, the FDA contracted with MITRE to develop the report that outlines practical approaches and recommendations that can further drive sector-wide legacy device cyber risk management efforts.