The Washington Post reports in The Cybersecurity 202 on a “joint security plan” issued by a coalition of hospitals and medical device manufacturers that outlines steps manufacturers can take to improve cybersecurity protections. The Healthcare Sector Coordinating Council’s plan, drafted with participation by the Food and Drug Administration, instructs “manufacturers to describe to hospitals precisely how they’ll scan for new cyber vulnerabilities in their devices, how they’ll patch them and when.” The Department of Health and Human Services recently released its own guide on the subject, “outlining hospitals’ cybersecurity responsibilities, including what they should expect from device manufacturers.” Moreover, “many medical devices such as MRI machines are built to last a decade or longer, which means that even if they’re built with cybersecurity in mind, they’ll be facing a whole new generation of hacking threats at the end of their life cycles.”
From the news release of the American Association for Justice.


