On Nov. 15, the FDA announced a new MITRE report, Next Steps Toward Managing Legacy Medical Device Cybersecurity Risks.
The FDA acknowledges that legacy medical devices—those that cannot be reasonably protected against current cybersecurity threats—can pose significant risks to the health care sector. Legacy devices were legally put on the market and may still be broadly in use. To address this important security issue, the FDA contracted with MITRE to develop the report that outlines practical approaches and recommendations that can further drive sector-wide legacy device cyber risk management efforts.
