{"id":31194,"date":"2018-11-20T04:00:28","date_gmt":"2018-11-20T12:00:28","guid":{"rendered":"https:\/\/www.jamasoftware.com\/?p=31194"},"modified":"2023-01-12T16:52:00","modified_gmt":"2023-01-13T00:52:00","slug":"medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government","status":"publish","type":"post","link":"https:\/\/www.jamasoftware.com\/legacy\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/","title":{"rendered":"Security of Medical Devices Remains a Growing Concern"},"content":{"rendered":"

\"\"<\/p>\n

With the rising amount of connected devices in circulation, the number of potential targets for hackers and other cyber criminals to exploit continues to rise. Among the most common targets for attack: medical devices.<\/p>\n

A survey<\/a> released in October of 148 healthcare IT and security executives, conducted by Klas Research<\/a> and the College of Healthcare Information Management Executives<\/a> (CHIME), showed that an astonishing 18% of provider organizations had medical devices impacted by malware or ransomware in the last 18 months.<\/p>\n

Medical devices were defined in the report as \u201cbiomedical devices used by healthcare-delivery organizations in the pursuit of patient care.\u201d<\/p>\n

The report also stated that only 39% of the respondents were \u201cvery confident or confident that their current strategy protects patient safety and prevents disruptions in care.\u201d<\/p>\n

Although organizations are making gains in developing and maturing their overall security programs, the report says, progress has been slow. This is particularly true when it comes to securing medical devices, the study shows. Unsurprisingly, respondents cited patient safety as their top concern with unsecured medical devices.<\/p>\n

\u201cUnsecured and poorly secured medical devices put patients at risk of harm if those devices are hacked,\u201d said Russell Branzell, president and CEO of CHIME, in a press release about the report. \u201cIn recent years, that risk has increased exponentially as devices in hospitals and health organizations have become more and more interconnected.\u201d<\/p>\n

Adam Gale, president of Klas, also weighed in on the findings: \u201cSafeguarding medical devices requires a joint effort by provider organizations and device manufacturers. Many providers have the basic building blocks for a general security program in place and are making progress.\u201d<\/p>\n

A large majority of the survey respondents (96%) identified manufacturer-related factors as a root cause of medical device security issues. The majority of respondents also reported struggles related to out-of-date operating systems or the inability to patch devices, which have been found to be major security risks. The study also discovered that, on average, one third of medical device manufacturers have said their devices cannot be patched.<\/p>\n

\u201cMedical device security is a three-way relationship between\u00a0provider organizations, the manufacturers, and the regulators,\u201d said Dan Czech, director of market analysis-cybersecurity at Klas, in the announcement about the findings.<\/p>\n

Provider organizations can follow industry-accepted best practices such as network segmentation, Czech said. \u201cManufacturers can include security in the design of all products going forward and can consistently patch currently offered medical devices,\u201d he said. \u201cRegulators can provide incentives and disincentives for manufacturers and organizations to secure their devices and can offer the needed guidance to direct the healthcare industry.\u201d<\/p>\n

The threats against medical devices have become such a concern that two U.S. federal agencies recently announced a new initiative to address vulnerabilities. In October 2018, the U.S. Food and Drug Administration and the U.S. Department of Homeland Security (DHS) announced<\/a> a memorandum of agreement\u00a0to implement a new framework for greater coordination and cooperation between the two agencies for addressing cybersecurity in medical devices.<\/p>\n

\u201cAs innovation in medical devices advances and more of them are connected to hospital networks or to other devices, making sure the devices are adequately protected against intrusions is paramount to protecting patients,\u201d said Scott Gottlieb, FDA commissioner, in the memorandum announcement.<\/p>\n

The partnership between the two agencies will enable them to share information about the constantly evolving threats against medical devices and help organizations in the healthcare industry proactively respond when vulnerabilities are identified.<\/p>\n

This isn\u2019t the first time the two agencies have collaborated on medical device security. In recent years they have been focused on the coordination of vulnerability disclosures. The partnership allows device manufacturers to receive technical information from cybersecurity researchers regarding identified vulnerabilities in their products so they can respond to potential threats in a timely way.<\/p>\n

Author Bob Violino<\/em>\u00a0is a freelance writer who covers a variety of technology and business topics.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise. <\/p>\n","protected":false},"author":106,"featured_media":54285,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[854],"tags":[397,366,43,40],"industry":[574],"class_list":["post-31194","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity","tag-data-security","tag-medical-device","tag-medical-device-compliance","industry-medical-devices"],"acf":[],"yoast_head":"\nSecurity of Medical Devices Remains a Growing Concern - Jama Software<\/title>\n<meta name=\"description\" content=\"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security of Medical Devices Remains a Growing Concern\" \/>\n<meta property=\"og:description\" content=\"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/\" \/>\n<meta property=\"og:site_name\" content=\"Jama Software\" \/>\n<meta property=\"article:published_time\" content=\"2018-11-20T12:00:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-01-13T00:52:00+00:00\" \/>\n<meta name=\"author\" content=\"Bob Violino\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Security of Medical Devices Remains a Growing Concern\" \/>\n<meta name=\"twitter:description\" content=\"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bob Violino\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/\"},\"author\":{\"name\":\"Bob Violino\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#\\\/schema\\\/person\\\/a5da9575e3af0d98625863619c1cdd6c\"},\"headline\":\"Security of Medical Devices Remains a Growing Concern\",\"datePublished\":\"2018-11-20T12:00:28+00:00\",\"dateModified\":\"2023-01-13T00:52:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/\"},\"wordCount\":644,\"image\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2018\\\/11\\\/Blog_-Featured-Image-1024x512-3-1.png\",\"keywords\":[\"cybersecurity\",\"data security\",\"medical device\",\"Medical Device Compliance\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/\",\"name\":\"Security of Medical Devices Remains a Growing Concern - Jama Software\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2018\\\/11\\\/Blog_-Featured-Image-1024x512-3-1.png\",\"datePublished\":\"2018-11-20T12:00:28+00:00\",\"dateModified\":\"2023-01-13T00:52:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#\\\/schema\\\/person\\\/a5da9575e3af0d98625863619c1cdd6c\"},\"description\":\"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2018\\\/11\\\/Blog_-Featured-Image-1024x512-3-1.png\",\"contentUrl\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2018\\\/11\\\/Blog_-Featured-Image-1024x512-3-1.png\",\"width\":1024,\"height\":512},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2018\\\/11\\\/20\\\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.jamasoftware.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security of Medical Devices Remains a Growing Concern\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#website\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/\",\"name\":\"Jama Software\",\"description\":\"Jama Connect\u00ae #1 in Requirements Management\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.jamasoftware.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#\\\/schema\\\/person\\\/a5da9575e3af0d98625863619c1cdd6c\",\"name\":\"Bob Violino\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/87924606b4131a8aceeeae8868531fbb9712aaa07a5d3a756b26ce0f5d6ca674?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/87924606b4131a8aceeeae8868531fbb9712aaa07a5d3a756b26ce0f5d6ca674?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/87924606b4131a8aceeeae8868531fbb9712aaa07a5d3a756b26ce0f5d6ca674?s=96&d=mm&r=g\",\"caption\":\"Bob Violino\"},\"description\":\"Bob Violino writes about trends in automotive development, including driverless cars and electric vehicles.\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/author\\\/bviolino\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Security of Medical Devices Remains a Growing Concern - Jama Software","description":"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/","og_locale":"en_US","og_type":"article","og_title":"Security of Medical Devices Remains a Growing Concern","og_description":"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.","og_url":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/","og_site_name":"Jama Software","article_published_time":"2018-11-20T12:00:28+00:00","article_modified_time":"2023-01-13T00:52:00+00:00","author":"Bob Violino","twitter_card":"summary_large_image","twitter_title":"Security of Medical Devices Remains a Growing Concern","twitter_description":"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.","twitter_misc":{"Written by":"Bob Violino","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/#article","isPartOf":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/"},"author":{"name":"Bob Violino","@id":"https:\/\/www.jamasoftware.com\/#\/schema\/person\/a5da9575e3af0d98625863619c1cdd6c"},"headline":"Security of Medical Devices Remains a Growing Concern","datePublished":"2018-11-20T12:00:28+00:00","dateModified":"2023-01-13T00:52:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/"},"wordCount":644,"image":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/#primaryimage"},"thumbnailUrl":"https:\/\/www.jamasoftware.com\/media\/2018\/11\/Blog_-Featured-Image-1024x512-3-1.png","keywords":["cybersecurity","data security","medical device","Medical Device Compliance"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/","url":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/","name":"Security of Medical Devices Remains a Growing Concern - Jama Software","isPartOf":{"@id":"https:\/\/www.jamasoftware.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/#primaryimage"},"image":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/#primaryimage"},"thumbnailUrl":"https:\/\/www.jamasoftware.com\/media\/2018\/11\/Blog_-Featured-Image-1024x512-3-1.png","datePublished":"2018-11-20T12:00:28+00:00","dateModified":"2023-01-13T00:52:00+00:00","author":{"@id":"https:\/\/www.jamasoftware.com\/#\/schema\/person\/a5da9575e3af0d98625863619c1cdd6c"},"description":"With the growing amount of connected medical devices, the number of potential targets for hackers and other cyber criminals to exploit continues to rise.","breadcrumb":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/#primaryimage","url":"https:\/\/www.jamasoftware.com\/media\/2018\/11\/Blog_-Featured-Image-1024x512-3-1.png","contentUrl":"https:\/\/www.jamasoftware.com\/media\/2018\/11\/Blog_-Featured-Image-1024x512-3-1.png","width":1024,"height":512},{"@type":"BreadcrumbList","@id":"https:\/\/www.jamasoftware.com\/blog\/2018\/11\/20\/medical-device-security-a-high-priority-for-manufacturers-healthcare-providers-and-government\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.jamasoftware.com\/"},{"@type":"ListItem","position":2,"name":"Security of Medical Devices Remains a Growing Concern"}]},{"@type":"WebSite","@id":"https:\/\/www.jamasoftware.com\/#website","url":"https:\/\/www.jamasoftware.com\/","name":"Jama Software","description":"Jama Connect\u00ae #1 in Requirements Management","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.jamasoftware.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.jamasoftware.com\/#\/schema\/person\/a5da9575e3af0d98625863619c1cdd6c","name":"Bob Violino","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/87924606b4131a8aceeeae8868531fbb9712aaa07a5d3a756b26ce0f5d6ca674?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/87924606b4131a8aceeeae8868531fbb9712aaa07a5d3a756b26ce0f5d6ca674?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/87924606b4131a8aceeeae8868531fbb9712aaa07a5d3a756b26ce0f5d6ca674?s=96&d=mm&r=g","caption":"Bob Violino"},"description":"Bob Violino writes about trends in automotive development, including driverless cars and electric vehicles.","url":"https:\/\/www.jamasoftware.com\/blog\/author\/bviolino\/"}]}},"_links":{"self":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/posts\/31194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/users\/106"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/comments?post=31194"}],"version-history":[{"count":0,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/posts\/31194\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/media\/54285"}],"wp:attachment":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/media?parent=31194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/categories?post=31194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/tags?post=31194"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/industry?post=31194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}