Health IT Security December 28, 2023
The FDA and CISA maintain a 5-year-old agreement about medical device cybersecurity management that must be updated to reflect organizational changes, GAO suggested.
The US Government Accountability Office (GAO) released a report on medical device cybersecurity to address limitations in federal agencies’ authority, explore challenges in accessing federal support, and provide recommendations to the government on improving coordination in this space.
As a result of its research, GAO recommended that the Food and Drug Administration (FDA) and the Cybersecurity and Infrastructure Security Agency (CISA), the two main authorities over medical device security, revamp their 5-year-old agreement in order to reflect organizational changes and improve coordination.
Medical device cybersecurity vulnerabilities have been a concern in the industry for years, even though...