# The Future of Cybersecurity

- Show: [Global Medical Device Podcast](https://hardwarepodcasts.com/podcast/global-medical-device-podcast)
- Published: 2022-04-30
- Length: 40m
- Episode: 257
- Page: https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity
- Listen: https://podcast.greenlight.guru/episode/the-future-of-cybersecurity

## Summary

Chris Gates, Director of Product Security at Velentium and author of 'Medical Device Cybersecurity for Engineers and Manufacturers', discusses the evolving landscape of software as a medical device (SaMD) security. He critiques the FDA's recent draft guidance for lacking harmonization with global standards like ISO and EU MDR, arguing that it imposes excessive burdens without clear, workable requirements. Gates emphasizes the critical need for machine-readable Software Bill of Materials (SBOMs) and Vulnerability Exposure (VEX) documents to help Health Delivery Organizations (HDOs) manage risks effectively. He advocates for integrating cybersecurity into the core development process, using tools like MedCrip and Heimdal, to streamline regulatory approval and create a competitive advantage for manufacturers.

## Chapters

- [0:00](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity#t=0) Introduction: Chris Gates and Velentium
- [4:42](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity#t=282) Critique of FDA Cybersecurity Draft Guidance
- [12:54](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity#t=774) Identifying Vulnerabilities vs. Threats in Development
- [16:22](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity#t=982) SBOMs, VEX, and Machine Readability
- [22:14](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity#t=1334) HDO Asset Management and Contractual Expectations
- [28:07](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity#t=1687) Managing Legacy Products and Supply Chain Security
- [33:08](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity#t=1988) Writing and Updating the Medical Device Cybersecurity Book

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Certification & compliance](https://hardwarepodcasts.com/topic/certification-and-compliance)
- [Connected products & IoT](https://hardwarepodcasts.com/topic/connected-products-and-iot)
- [Sourcing & supply chain](https://hardwarepodcasts.com/topic/sourcing-and-supply-chain)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)

## Most relevant to

large enterprises

## Mentioned

- Velentium (company)
- Medical Device Cybersecurity for Engineers and Manufacturers (product)
- FDA (other)
- ISO (other)
- EU MDR (other)
- PATCH Act (other)
- SBOM (other)
- VEX (other)
- CycloneDX (other)
- SPDX (other)
- MedCrip (other)
- Heimdal (other)
- CISA (other)
- NIST (other)

## Related episodes from other shows

- [140 - Medical Device & Diagnostics Cybersecurity, 3rd Party Software, SBOM's, Evaluating Skill and Mindset with Christian Espinosa](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating) (Let's Combinate)
- [021 - "Options" with Karandeep Singh Badwal](https://hardwarepodcasts.com/podcast/lets-combinate/2022-02-23-021-options-with-karandeep-singh-badwal) (Let's Combinate)
- [134 - ISO62304, Software Development Process, SaMD, Closed Loop Systems, Complexities with Cloud and Better Software in MedTech with Richard Koch](https://hardwarepodcasts.com/podcast/lets-combinate/2024-05-01-134-iso62304-software-development-process-samd-closed-loop-systems-complexities) (Let's Combinate)
- [How to Speed Up Safety Critical Processes](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2021-07-27-how-to-speed-up-safety-critical-processes) (The Pragmatic Embedded Podcast)
- [67: Software for Things That Can Kill People](https://hardwarepodcasts.com/podcast/embedded-fm/2014-09-11-67-software-for-things-that-can-kill-people) (Embedded.fm)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Global Medical Device Podcast.