Hardware Podcasts

Navigating the MedTech Cybersecurity Ecosystem

Global Medical Device Podcast · 13 Jul 2021 · 31m · Episode 219

What this episode covers

Jon Speer, founder of Greenlight Guru, interviews Mike Drues from Vascular Sciences about the scope and strategy of medical device cybersecurity. They clarify that the FDA’s concern is limited to device safety and efficacy, excluding identity theft and HIPAA privacy issues. Drues advises developers to question the necessity of constant internet connectivity and to use regulatory logic to apply existing standards to new threats.

Most relevant to

established companies

Topics

Mentioned

Companies
Greenlight Guru, Vascular Sciences, FDA, NIST, ISO, Boston Scientific
Products
Homeland
Also
HIPAA

Related episodes from other shows

Other shows on the same ground, closest first.

  • Let's Combinate · 30m

    140 - Medical Device & Diagnostics Cybersecurity, 3rd Party Software, SBOM's, Evaluating Skill and Mindset with Christian Espinosa

    Christian Espinosa, CEO of Blue Goat Cyber, explains the unique cybersecurity challenges of medical devices, emphasizing that patient safety is the primary driver over data privacy. He details the importance of Software Bill of Materials (SBOM) and identifying third-party open-source components, such as the Shellshock vulnerability, to mitigate supply chain risks. Espinosa also discusses his hiring philosophy for Blue Goat Cyber, prioritizing practical aptitude and clarity of purpose over formal certifications or degrees.

    Security & privacyPCB design & layout
    6 chapters

  • Let's Combinate · 1h 03m

    021 - "Options" with Karandeep Singh Badwal

    Karandeep Singh Badwal, a QA/RA consultant and host of The MedTech Podcast, explains how defining 'intended use' determines whether a product is a regulated medical device or unregulated software, a critical distinction for startups. He details the specific regulatory challenges of Software as a Medical Device (SaMD), including cybersecurity, GDPR compliance, and the impact of the EU MDR on software classification. Badwal also discusses the strategic advantages for UK software companies post-Brexit, where they can still self-certify as Class 1 devices while EU counterparts face stricter notified body audits.

    Validation & product-market fitQuality & yield
    9 chapters

  • Being an Engineer · 51m

    S5E29 Steve Gompertz | Medical Device Quality Control & Regulatory Requirements

    Steve Gompertz, a partner at QRx Partners with prior leadership roles at Medtronic, Boston Scientific, St. Jude Medical, and Pelican Biothermal, explains how to build scalable quality management systems for medical device companies. He details the evolution of regulatory frameworks, noting the shift toward stricter EU standards and the integration of AI and cybersecurity into device compliance. Gompertz emphasizes tailoring quality systems to company size, using a case study of a client who reduced FDA findings from dozens to zero by implementing a holistic, process-connected system rather than a checklist approach. He also advocates for concurrent engineering and cross-functional teams to accelerate development while maintaining rigorous safety standards.

    Medical & health devicesQuality & yield
    10 chapters

  • IoT For All Podcast · 21m

    Securing the Internet of Medical Things | Asimily's Shankar Somasundaram | Internet of Things Podcast

    Shankar Somasundaram, CEO and founder of Asimily, discusses the unique security challenges of the Internet of Medical Things (IoMT) in healthcare environments. He explains that healthcare is a 'system of systems' where legacy medical devices, industrial controls, and lab equipment interact, making traditional scanning dangerous and isolation ineffective. Somasundaram highlights the financial incentives for attackers targeting healthcare data and outlines best practices including inventory management, risk mitigation, and incident response.

    Security & privacyConnected products & IoT
    7 chapters

  • Let's Combinate · 35m

    079 - How FDA Reviews Combination Products, Policy, EPR's, and Harmonization with Rumi Young

    Rumi Young, Director of Regulatory Policy at Becton Dickinson (BD), explains how the FDA reviews combination products, drawing on her previous tenure as Acting Assistant Director in CDRH’s Division of Drug Delivery. She details the inter-center consult process for products like auto-injectors and smart connected devices, highlighting the manual nature of current submissions and the critical need for clear device identification in NDAs and BLAs. Young discusses the role of industry in shaping policy, advocating for updated Essential Performance Requirements (EPRs) and international harmonization through IMDRF to address the gap between evolving technologies and outdated guidances.

    Connected products & IoTCertification & compliance
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Global Medical Device Podcast. The episode itself belongs to its publisher.