
VEX Resources for Medical Device Teams: Guides and Mistakes
VEX resources for medical device teams: a document guide, SBOM comparison, and common assessment mistakes, with evidence-based status and regulatory context.
Read articleEvery article in our archive in SBOM & Supply Chain.
Looking for a quick answer instead? The FDA medical device cybersecurity FAQ covers Section 524B scope, SBOMs, threat models, CR515 and GMLP, deficiencies, and postmarket duties.
Showing 4 of 4 articles in SBOM & Supply Chain

VEX resources for medical device teams: a document guide, SBOM comparison, and common assessment mistakes, with evidence-based status and regulatory context.
Read article
SBOM for SaMD and cloud components: what FDA guidance recommends for cloud services, containers, and third-party APIs, and how to keep the SBOM current after release.
Read article
When a chip vendor's SBOM is enough, when it isn't, and what changes the moment a MedTech team modifies modem, radio, or SoC firmware in the device.
Read article
SBOM vs VEX explained for medical device submissions. What each document does, how they pair, and what the FDA actually expects in your 510(k) package.
Read article30-minute strategy session. No cost, no commitment - just answers from people who've supported 275+ FDA submissions, with zero cybersecurity rejections.