The Food and Drug Administration today released a plan to improve medical device safety. The plan calls for increased funding to develop an active surveillance capability for FDA’s National Evaluation System for health Technology (NEST) and conduct post-market studies to evaluate specific safety concerns. The agency also will explore ways to streamline post-market safety mitigations; spur innovation towards safer medical devices; advance device cybersecurity; and integrate its activities to promote safety across the product lifecycle. With respect to cybersecurity, the agency plans to update premarket guidance to better protect against risks such as ransomware campaigns and vulnerabilities that could enable a remote multi-patient attack. It also will consider requiring firms to build into a product’s design the ability to update and patch device security and provide a “software bill of materials” listing software embedded in a device, and developing a CyberMed Safety Analysis Board to serve as a resource to device makers and FDA. The agency is accepting comments on the plan at https://www.regulations.gov.

Related News Articles

Headline
The AHA the week of July 8 released its Quality Collective Report, which explores quality, safety and performance improvement strategies and insights from…
Headline
A joint advisory issued the week of July 8 by the Cybersecurity and Infrastructure Security Agency, National Security Agency, FBI and several international…
Headline
In a new “Safety Speaks” conversation, Harry S. Smith, board chair of Valley Health System and member of the AHA Committee on Governance, discusses how Valley…
Headline
The AHA July 2 submitted comments to the Cybersecurity and Infrastructure Security Agency on its proposed rule establishing reporting requirements for…
Headline
The Department of Health and Human Services Health Sector Cybersecurity Coordination Center June 27 issued an alert about a critical vulnerability in MOVEit, a…
Headline
A joint report released June 26 by the Cybersecurity and Infrastructure Security Agency, FBI, the Australian Cyber Security Centre and Canadian Centre for…