Hardware Podcasts

Approaching Cybersecurity & Usability as a SaMD Company

Global Medical Device Podcast · 28 May 2022 · 36m · Episode 264

What this episode covers

Abbas Dhilawala, a cybersecurity and SaMD expert at Galen Data, discusses the critical balance between security and usability in software as a medical device. He explains that while standards for human factors exist, there is no harmonized standard for cybersecurity, forcing companies to rely on early user feedback and risk management to design secure yet usable systems. Dhilawala highlights the challenges of identity management, the limitations of biometrics in clinical settings, and the importance of reframing security measures to reduce user stress.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Galen Data, Titronics, Greenlight Guru
Products
True Quality 2022
Tools
NSBOM, CycloneDX
Also
FDA, HIPAA

Related episodes from other shows

Other shows on the same ground, closest first.

  • Let's Combinate · 30m

    140 - Medical Device & Diagnostics Cybersecurity, 3rd Party Software, SBOM's, Evaluating Skill and Mindset with Christian Espinosa

    Christian Espinosa, CEO of Blue Goat Cyber, explains the unique cybersecurity challenges of medical devices, emphasizing that patient safety is the primary driver over data privacy. He details the importance of Software Bill of Materials (SBOM) and identifying third-party open-source components, such as the Shellshock vulnerability, to mitigate supply chain risks. Espinosa also discusses his hiring philosophy for Blue Goat Cyber, prioritizing practical aptitude and clarity of purpose over formal certifications or degrees.

    Security & privacyPCB design & layout
    6 chapters

  • Let's Combinate · 1h 03m

    021 - "Options" with Karandeep Singh Badwal

    Karandeep Singh Badwal, a QA/RA consultant and host of The MedTech Podcast, explains how defining 'intended use' determines whether a product is a regulated medical device or unregulated software, a critical distinction for startups. He details the specific regulatory challenges of Software as a Medical Device (SaMD), including cybersecurity, GDPR compliance, and the impact of the EU MDR on software classification. Badwal also discusses the strategic advantages for UK software companies post-Brexit, where they can still self-certify as Class 1 devices while EU counterparts face stricter notified body audits.

    Validation & product-market fitQuality & yield
    9 chapters

  • Embedded.fm · 1h 14m

    219: Not Obviously Negligent

    Kelly Shortridge, a Product Manager at SecurityScorecard, discusses the intersection of behavioral economics and information security, arguing that human cognitive biases drive many security failures. She explains how defenders often focus on complex, high-value threats while ignoring 'low hanging fruit' like unpatched servers or default passwords, a phenomenon she links to prospect theory and risk aversion. Shortridge advocates for 'resilience' over static hardening, suggesting strategies like Chaos Monkey, deception technology, and raising the cost for attackers through basic hygiene like 2FA and password managers. She emphasizes that security must be designed with usability in mind to overcome user inertia and cognitive load, moving the industry from a state of 'depression' to 'acceptance' by making security habits easier to maintain.

    Security & privacyEmbedded firmware
    14 chapters

  • Embedded.fm · 1h 30m

    108: Nebarious

    Jen Castillo, a firmware engineer at Rebelbot, discusses the critical security and privacy challenges in wearable computing, using her company's 'Item' watch as a case study. She highlights the inadequacy of Bluetooth Low Energy (BLE) security, the risks of cloud data storage, and the ethical implications of monetizing user health data. Castillo also references the Nymi band's biometric authentication and suggests HIPAA guidelines as a useful checklist for non-medical devices.

    Security & privacyWireless & RF
    8 chapters

  • Being an Engineer · 51m

    S6E33 Bryant Foster | Design for Human Factors & User Experience

    Bryant Foster, Vice President of Human Factors and User Experience at Research Collective, discusses his background in cognitive psychology and his work with clients like Google, GE Healthcare, and Medtronic. He explains how his team uses advanced usability testing tools, including eye tracking, pupilometry, and facial emotion analysis, to measure cognitive load and objective user behavior rather than relying on potentially dishonest self-reports. Foster details methodologies for ensuring medical device safety, such as use-related risk analysis and task analysis, and shares insights from his time at Google X on the importance of defining clear research questions. He also covers cost-effective approaches like heuristic evaluations and the importance of providing constructive, solution-oriented feedback to engineering teams.

    Industrial & consumer product designSensors & measurement in products
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Global Medical Device Podcast. The episode itself belongs to its publisher.