# 140 - Medical Device & Diagnostics Cybersecurity, 3rd Party Software, SBOM's, Evaluating Skill and Mindset with Christian Espinosa

- Show: [Let's Combinate](https://hardwarepodcasts.com/podcast/lets-combinate)
- Published: 2024-06-12
- Length: 30m
- Page: https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating
- Listen: https://podcasters.spotify.com/pod/show/letscombinate/episodes/140---Medical-Device--Diagnostics-Cybersecurity--3rd-Party-Software--SBOMs--Evaluating-Skill-and-Mindset-with-Christian-Espinosa-e2kmp3g

## Summary

Christian Espinosa, CEO of Blue Goat Cyber, explains the unique cybersecurity challenges of medical devices, emphasizing that patient safety is the primary driver over data privacy. He details the importance of Software Bill of Materials (SBOM) and identifying third-party open-source components, such as the Shellshock vulnerability, to mitigate supply chain risks. Espinosa also discusses his hiring philosophy for Blue Goat Cyber, prioritizing practical aptitude and clarity of purpose over formal certifications or degrees.

## Chapters

- [0:00](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating#t=0) Introduction: Christian Espinosa and Blue Goat Cyber
- [2:41](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating#t=161) Espinosa's Journey: Air Force to Medical Device Cybersecurity
- [7:05](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating#t=425) Medical Device Attack Surfaces and Patient Safety Risks
- [14:01](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating#t=841) Security Assessments, Trust Boundaries, and Design Controls
- [16:29](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating#t=989) Software Bill of Materials (SBOM) and Third-Party Software
- [27:09](https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating#t=1629) Hiring for Cybersecurity: Skills and Mindset Over Certifications

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [PCB design & layout](https://hardwarepodcasts.com/topic/pcb-design)
- [Hiring & workforce](https://hardwarepodcasts.com/topic/hiring-and-workforce)
- [Medical & health devices](https://hardwarepodcasts.com/topic/medical-devices)

## Most relevant to

early-stage companies

## Mentioned

- Blue Goat Cyber (company)
- Alpine Security (company)
- Shellshock (other)
- FDA (other)

## Related episodes from other shows

- [#407: Cybersecurity in MedTech: FDA Compliance, Patient Safety & the Hidden Risks You’re Missing](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2025-05-19-407-cybersecurity-in-medtech-fda-compliance-patient-safety-the-hidden-risks-your) (Global Medical Device Podcast)
- [Software Bill of Materials (SBOMs) & Cybersecurity in the Medical Device Industry](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-06-01-software-bill-of-materials-sboms-cybersecurity-in-the-medical-device-industry) (Global Medical Device Podcast)
- [The Future of Cybersecurity](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2022-04-30-the-future-of-cybersecurity) (Global Medical Device Podcast)
- [Navigating the MedTech Cybersecurity Ecosystem](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2021-07-13-navigating-the-medtech-cybersecurity-ecosystem) (Global Medical Device Podcast)
- [Cybersecurity and the Future of MedTech](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2023-06-02-cybersecurity-and-the-future-of-medtech) (Global Medical Device Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/lets-combinate/2024-06-12-140-medical-device-diagnostics-cybersecurity-3rd-party-software-sboms-evaluating. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Let's Combinate.