# #472: Cost Containment: Right-Sizing Medical Device Cybersecurity with Chris Gates

- Show: [Global Medical Device Podcast](https://hardwarepodcasts.com/podcast/global-medical-device-podcast)
- Published: 2026-09-21
- Length: 40m
- Episode: 472
- Page: https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2026-09-21-472-cost-containment-right-sizing-medical-device-cybersecurity-with-chris-gates

## Summary

Chris Gates, founder and CEO of arsMedSecurity, explains why medical device manufacturers must right-size cybersecurity efforts early in the development lifecycle to avoid catastrophic financial and regulatory consequences. He argues that deferring security until the end of development leads to severe FDA delays, with a typical 180-day hold potentially destroying a startup's burn rate. Gates highlights the accelerating threat landscape driven by Large Language Models (LLMs), which reduce vulnerability exploitation windows from years to minutes, making reactive patching ineffective. He provides concrete steps for compliance, including performing system-level threat modeling before hardware freeze and aligning software development SOPs with ISO/IEC 81001-5-1 and ISO 62304 standards.

## Outline

1. Introduction: Chris Gates and arsMedSecurity
2. The Financial Cost of Cybersecurity Delays
3. Debunking Cybersecurity Myths for Medical Devices
4. FDA eStar Requirements and Regulatory Enforcement
5. The Impact of LLMs on Vulnerability Exploitation
6. Case Study: Acutis and the Cost of Ignoring Security
7. Right-Sizing Security for Startups and Choosing Partners

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Certification & compliance](https://hardwarepodcasts.com/topic/certification-and-compliance)
- [Pricing, margins & unit economics](https://hardwarepodcasts.com/topic/pricing-and-unit-economics)
- [Validation & product-market fit](https://hardwarepodcasts.com/topic/validation-and-product-market-fit)

## Most relevant to

companies scaling up

## Mentioned

- arsMedSecurity (company)
- Greenlight Guru (company)
- Illumina (company)
- Valentium (company)
- eStar (tool)
- ISO/IEC 81001-5-1 (other)
- ISO 62304 (other)
- STRIDE (other)
- Acutis (company)
- Abbott (company)
- St. Jude (company)
- Hugging Face (company)
- ChatGPT (product)

## Related episodes from other shows

- [188: Adopting a Cybersecurity Strategy That Fits Your Manufacturing Business with Mollie Breen, CEO & Founder of Perygee](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2024-06-04-188-adopting-a-cybersecurity-strategy-that-fits-your-manufacturing-business-with) (Manufacturing Happy Hour)
- [140 - Medical Device & Diagnostics Cybersecurity, 3rd Party Software, SBOM's, Evaluating Skill and Mindset with Christian Espinosa](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating) (Let's Combinate)
- [134 - ISO62304, Software Development Process, SaMD, Closed Loop Systems, Complexities with Cloud and Better Software in MedTech with Richard Koch](https://hardwarepodcasts.com/podcast/lets-combinate/2024-05-01-134-iso62304-software-development-process-samd-closed-loop-systems-complexities) (Let's Combinate)
- [S5E29 Steve Gompertz | Medical Device Quality Control & Regulatory Requirements](https://hardwarepodcasts.com/podcast/being-an-engineer/2024-07-19-s5e29-steve-gompertz-medical-device-quality-control-regulatory-requirements) (Being an Engineer)
- [How to Speed Up Safety Critical Processes](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2021-07-27-how-to-speed-up-safety-critical-processes) (The Pragmatic Embedded Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2026-09-21-472-cost-containment-right-sizing-medical-device-cybersecurity-with-chris-gates. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Global Medical Device Podcast.