{"id":36841,"date":"2020-01-07T04:30:46","date_gmt":"2020-01-07T12:30:46","guid":{"rendered":"https:\/\/www.jamasoftware.com\/?p=36841"},"modified":"2023-01-12T16:50:50","modified_gmt":"2023-01-13T00:50:50","slug":"2020s-predictions-medical-device-security-and-accountability","status":"publish","type":"post","link":"https:\/\/www.jamasoftware.com\/legacy\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/","title":{"rendered":"2020s Predictions: Medical Device Security and Accountability"},"content":{"rendered":"

\"Medical<\/p>\n

As we enter a new decade of technological advancements, Jama Software asked select thought leaders from various industries for the trends and events they foresee unfolding over the next 10 years.<\/p>\n

In the third installment of our 2020s Predictions series, we\u2019re featuring predictions from\u00a0Chris Gates<\/a>, Principal Systems Security Architect at Velentium<\/a>, a professional engineering firm specializing in the design and manufacturing of therapeutic and diagnostic active medical devices.<\/p>\n

Jama Software: What are the biggest trends you\u2019re seeing in medical devices right now and how are they impacting product development?<\/em><\/strong><\/p>\n

Chris Gates:<\/strong> Regulatory bodies and Health Delivery Organizations (HDOs)<\/a> are now mandating the creation and lifelong support of secure medical devices<\/a>. This \u201cSecure Lifecycle\u201d starts with the first step in the development lifecycle and extended to the last day the medical device is marketed. This fundamental shift results in a tremendous amount of new artifacts to be managed and traced throughout the normal document tree, including security plans, requirements, test reports, post-market surveillance reports, approved supplier lists (ASL), etc., not to mention all the activities needed to create those artifacts in the first place!<\/p>\n

JS: What are some continuing or new trends in medical device development you expect to see over the next decade?<\/em><\/strong><\/p>\n

CG:<\/strong> HDOs contractually mandating Medical Device Manufacturers’ (MDMs) level and nature of ongoing support for the life of the medical device in their organization, including in-field patching of software\/firmware; Software Bill of Materials (SBOM); and assuming liability for all damages caused by the use or misuse of the device (such as being hacked and weaponized to attack other systems in the HDO). These are not activities or processes that have been previously supported or funded by MDMs.<\/p>\n

JS: What sorts of process adjustments do you think development teams will need to make to accommodate these changes? Do you think they\u2019ll need to make technology investments, process adjustments, or both?<\/em><\/strong><\/p>\n

CG:<\/strong> Yes, yes, and yes. This will result in large changes to organizations and how they work, plan, and budget for medical device development. For example, they’ll need “all of the above” to accommodate the ongoing post-market surveillance impacts on the utilization of third-party software packages in future devices. This is all part of the changes to the ASL. No longer can MDMs view medical device development as \u2018a separate event\u2019 with a beginning and an end. Securing medical devices is an ongoing collaborative effort with HDOs.<\/p>\n

JS: Any regulatory changes you anticipate to medical devices over the next decade? How do you see this impacting development teams?<\/em><\/strong><\/p>\n

CG:<\/strong> More enforcement \u201cteeth\u201d being given to the FDA by Congress. Especially in the area of MDMs’ \u201cresponsible vulnerability disclosure,\u201d which is currently optional for MDMs. However, the FDA, Congress, and HDOs are all in agreement that this activity needs to be mandatory and thus enforced. Hopefully we will see some worldwide harmonization of security standards and generated artifacts, as currently these regulatory bodies are very fractured in their approach to secure development and the generated artifacts.<\/p>\n

JS: What do you think will remain the same in medical device development throughout the 2020s?<\/em><\/strong><\/p>\n

CG:<\/strong> Focus on \u201csafety and efficacy\u201d will remain steady, as well as a continued drive to shrink medical devices to the smallest physical package possible to enable more home healthcare scenarios. Similarly, the increased use of \u201ctelemedicine\u201d and related connectivity solutions enabled by these home healthcare devices and smartphones.<\/p>\n

JS: Anything else you\u2019d like to add?<\/em><\/strong><\/p>\n

CG:<\/strong> Even though the transition to secure medical device development and support may be financially uncomfortable, medical device security is the responsibility of all MDMs. Remember, the patient you are protecting might be yourself or a loved one!<\/p>\n

Significant growing and shifting regulations are already underway within the medical device industry. Learn how teams can stay ahead of the competition in our eBook, \u201cConquering Connectivity, Competition & Compliance<\/a>.\u201d<\/em><\/strong><\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

In the third installment of our 2020s Predictions series, we\u2019re featuring medical device security predictions from\u00a0Chris Gates, Principal Systems Security Architect at Velentium, a professional engineering firm specializing in the design and manufacturing of therapeutic and diagnostic active medical devices.<\/p>\n","protected":false},"author":121,"featured_media":46221,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[854],"tags":[471,397,417],"industry":[574],"class_list":["post-36841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-2020s","tag-cybersecurity","tag-medical-device-requirements","industry-medical-devices"],"acf":[],"yoast_head":"\n2020s Predictions: Medical Device Security - Jama Software<\/title>\n<meta name=\"description\" content=\"In the third installment of our 2020s Predictions series, we\u2019re featuring medical device security predictions from Velentium, .\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"2020s Predictions: Medical Device Security and Accountability\" \/>\n<meta property=\"og:description\" content=\"In the third installment of our 2020s Predictions series, we are featuring medical device security predictions from\u00a0Chris Gates, Principal Systems Security Architect at Velentium.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/\" \/>\n<meta property=\"og:site_name\" content=\"Jama Software\" \/>\n<meta property=\"article:published_time\" content=\"2020-01-07T12:30:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-01-13T00:50:50+00:00\" \/>\n<meta name=\"author\" content=\"Chris Gates\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"2020s Predictions: Medical Device Security and Accountability\" \/>\n<meta name=\"twitter:description\" content=\"In the third installment of our 2020s Predictions series, we are featuring medical device security predictions from\u00a0Chris Gates, Principal Systems Security Architect at Velentium.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chris Gates\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/\"},\"author\":{\"name\":\"Chris Gates\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#\\\/schema\\\/person\\\/43464bab093f478b4adf869f1d621316\"},\"headline\":\"2020s Predictions: Medical Device Security and Accountability\",\"datePublished\":\"2020-01-07T12:30:46+00:00\",\"dateModified\":\"2023-01-13T00:50:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/\"},\"wordCount\":650,\"image\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2020\\\/01\\\/2020s_Predictions_Medical_Device_Security.png\",\"keywords\":[\"2020s\",\"cybersecurity\",\"medical device requirements\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/\",\"name\":\"2020s Predictions: Medical Device Security - Jama Software\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2020\\\/01\\\/2020s_Predictions_Medical_Device_Security.png\",\"datePublished\":\"2020-01-07T12:30:46+00:00\",\"dateModified\":\"2023-01-13T00:50:50+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#\\\/schema\\\/person\\\/43464bab093f478b4adf869f1d621316\"},\"description\":\"In the third installment of our 2020s Predictions series, we\u2019re featuring medical device security predictions from Velentium, .\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2020\\\/01\\\/2020s_Predictions_Medical_Device_Security.png\",\"contentUrl\":\"https:\\\/\\\/www.jamasoftware.com\\\/media\\\/2020\\\/01\\\/2020s_Predictions_Medical_Device_Security.png\",\"width\":1024,\"height\":512},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/2020\\\/01\\\/07\\\/2020s-predictions-medical-device-security-and-accountability\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.jamasoftware.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"2020s Predictions: Medical Device Security and Accountability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#website\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/\",\"name\":\"Jama Software\",\"description\":\"Jama Connect\u00ae #1 in Requirements Management\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.jamasoftware.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.jamasoftware.com\\\/#\\\/schema\\\/person\\\/43464bab093f478b4adf869f1d621316\",\"name\":\"Chris Gates\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/019e5c38fc7da0b75cf42f3a84736a1d0b17c9f3003c1526bba9e4821f9396a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/019e5c38fc7da0b75cf42f3a84736a1d0b17c9f3003c1526bba9e4821f9396a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/019e5c38fc7da0b75cf42f3a84736a1d0b17c9f3003c1526bba9e4821f9396a5?s=96&d=mm&r=g\",\"caption\":\"Chris Gates\"},\"description\":\"Chris Gates writes about security and accountability in medical device development.\",\"url\":\"https:\\\/\\\/www.jamasoftware.com\\\/blog\\\/author\\\/chrisgates\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"2020s Predictions: Medical Device Security - Jama Software","description":"In the third installment of our 2020s Predictions series, we\u2019re featuring medical device security predictions from Velentium, .","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/","og_locale":"en_US","og_type":"article","og_title":"2020s Predictions: Medical Device Security and Accountability","og_description":"In the third installment of our 2020s Predictions series, we are featuring medical device security predictions from\u00a0Chris Gates, Principal Systems Security Architect at Velentium.","og_url":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/","og_site_name":"Jama Software","article_published_time":"2020-01-07T12:30:46+00:00","article_modified_time":"2023-01-13T00:50:50+00:00","author":"Chris Gates","twitter_card":"summary_large_image","twitter_title":"2020s Predictions: Medical Device Security and Accountability","twitter_description":"In the third installment of our 2020s Predictions series, we are featuring medical device security predictions from\u00a0Chris Gates, Principal Systems Security Architect at Velentium.","twitter_misc":{"Written by":"Chris Gates","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/#article","isPartOf":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/"},"author":{"name":"Chris Gates","@id":"https:\/\/www.jamasoftware.com\/#\/schema\/person\/43464bab093f478b4adf869f1d621316"},"headline":"2020s Predictions: Medical Device Security and Accountability","datePublished":"2020-01-07T12:30:46+00:00","dateModified":"2023-01-13T00:50:50+00:00","mainEntityOfPage":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/"},"wordCount":650,"image":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/#primaryimage"},"thumbnailUrl":"https:\/\/www.jamasoftware.com\/media\/2020\/01\/2020s_Predictions_Medical_Device_Security.png","keywords":["2020s","cybersecurity","medical device requirements"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/","url":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/","name":"2020s Predictions: Medical Device Security - Jama Software","isPartOf":{"@id":"https:\/\/www.jamasoftware.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/#primaryimage"},"image":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/#primaryimage"},"thumbnailUrl":"https:\/\/www.jamasoftware.com\/media\/2020\/01\/2020s_Predictions_Medical_Device_Security.png","datePublished":"2020-01-07T12:30:46+00:00","dateModified":"2023-01-13T00:50:50+00:00","author":{"@id":"https:\/\/www.jamasoftware.com\/#\/schema\/person\/43464bab093f478b4adf869f1d621316"},"description":"In the third installment of our 2020s Predictions series, we\u2019re featuring medical device security predictions from Velentium, .","breadcrumb":{"@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/#primaryimage","url":"https:\/\/www.jamasoftware.com\/media\/2020\/01\/2020s_Predictions_Medical_Device_Security.png","contentUrl":"https:\/\/www.jamasoftware.com\/media\/2020\/01\/2020s_Predictions_Medical_Device_Security.png","width":1024,"height":512},{"@type":"BreadcrumbList","@id":"https:\/\/www.jamasoftware.com\/blog\/2020\/01\/07\/2020s-predictions-medical-device-security-and-accountability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.jamasoftware.com\/"},{"@type":"ListItem","position":2,"name":"2020s Predictions: Medical Device Security and Accountability"}]},{"@type":"WebSite","@id":"https:\/\/www.jamasoftware.com\/#website","url":"https:\/\/www.jamasoftware.com\/","name":"Jama Software","description":"Jama Connect\u00ae #1 in Requirements Management","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.jamasoftware.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.jamasoftware.com\/#\/schema\/person\/43464bab093f478b4adf869f1d621316","name":"Chris Gates","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/019e5c38fc7da0b75cf42f3a84736a1d0b17c9f3003c1526bba9e4821f9396a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/019e5c38fc7da0b75cf42f3a84736a1d0b17c9f3003c1526bba9e4821f9396a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/019e5c38fc7da0b75cf42f3a84736a1d0b17c9f3003c1526bba9e4821f9396a5?s=96&d=mm&r=g","caption":"Chris Gates"},"description":"Chris Gates writes about security and accountability in medical device development.","url":"https:\/\/www.jamasoftware.com\/blog\/author\/chrisgates\/"}]}},"_links":{"self":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/posts\/36841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/users\/121"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/comments?post=36841"}],"version-history":[{"count":0,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/posts\/36841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/media\/46221"}],"wp:attachment":[{"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/media?parent=36841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/categories?post=36841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/tags?post=36841"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.jamasoftware.com\/legacy\/wp-json\/wp\/v2\/industry?post=36841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}