Medical Device Cybersecurity: Regional Incident Preparedness and Response Playbook
Abstract
Cybersecurity attacks on Healthcare and Public Health (HPH) critical infrastructure, such as healthcare delivery organizations (HDOs), are occurring with greater frequency. Disruptions in clinical care operations can put patients at risk. The global ransomware event known as WannaCry demonstrated how the performance of vulnerable medical devices may be compromised by an exploit, whether it intentionally targets the healthcare system or is purely opportunistic. Similarly, other attacks such as Petya/NotPetya have highlighted key challenges in preparedness and response across the HPH critical infrastructure sector. Securing critical infrastucture is a shared responsibility across many stakeholders, and with respect to medical devices the primary stakeholders are FDA, Medical Device Manufacturers (MDMs), and HDOs.
Document Details
- Document Type
- Technical Report
- Publication Date
- Oct 01, 2018
- Accession Number
- AD1108081
Entities
Organizations
- MITRE Corporation