Best Practices for Ensuring Cybersecure and Cybersafe Medical Device Design

The internet of medical devices (IoMD) within a health care facility comprises a broad array of technologies, ranging from simple physiological instruments such as thermometers and pulse monitors, to sophisticated imagery and therapeutic systems with extensive computing resources and high-bandwidth networking. The bedside systems found in patient rooms, including pumps, sensors, and the nurses’ cart-on-wheels are not only networked, but are often directly connected to patient databases and billing centers. Unlike other computing platforms on the network, networked medical devices are designed primarily for their medical function, with less consideration given to the authentication technologies and cyberdefenses typical of other IT.  This white paper addresses best practices for ensuring cybersecure and cybersafe medical device design to mitigate the risk of compromise or misuse.