FDA· Jul 10, 2026
Medical Device Pen Testing: FDA vs EU MDR 2026
Medical device pen testing under FDA vs EU MDR: the 5 FDA report elements, MDR Annex I §17.2/17.4, and how one report serves both submissions.
Read articleEvery article in our archive tagged FDA.
Looking for a quick answer instead? The FDA medical device cybersecurity FAQ covers Section 524B scope, SBOMs, threat models, CR515 and GMLP, deficiencies, and postmarket duties.
Showing 12 of 67 articles tagged FDA · Page 2 of 6
Medical device pen testing under FDA vs EU MDR: the 5 FDA report elements, MDR Annex I §17.2/17.4, and how one report serves both submissions.
Read article
A five-source workflow (510(k), De Novo, PMA, MAUDE, FOIA) for mining FDA cybersecurity precedent by product code before a Section 524B filing.
Read article
FDA AI device cybersecurity in 2026: the February 2026 premarket guidance, PCCPs, the draft AI guidance's 7 threats, and how to cover them under Section 524B.
Read article
How to run a design FMEA (dFMEA) for a connected medical device, link it to the ISO 14971 risk file, and hand cyber failure modes to the threat model.
Read article
How to wire SAST, SBOM, secrets, container, and signature gates into a medical-device CI/CD pipeline so the SPDF produces the evidence FDA reviewers.
Read article
What happens if you fail an FDA cybersecurity inspection: the 483-to-consent-decree enforcement ladder and the commercial fallout for device makers.
Read article
FDA Section 524B applies to any new premarket submission for a cyber device, including legacy platforms.
Read article
What medical device cybersecurity actually costs in 2026: four cost drivers, fixed-fee vs hourly pricing, and premarket vs postmarket budget lines.
Read article
How SPDF activities map to IEC 62304 software lifecycle processes - the exact crosswalk FDA reviewers expect, where they overlap, and where 62304 falls.
Read article
A subsection-by-subsection walkthrough of FDA Section 524B for cyber medical devices: what §524B(a), (b)(1), (b)(2), (b)(3), (b)(4), and (c) require.
Read article
How to run CAPA for medical device cybersecurity findings: when a vulnerability or FDA deficiency triggers a CAPA, and what evidence closes it out.
Read article
FMEA covers random and systematic failure modes; threat modeling covers adversarial action.
Read article30-minute strategy session. No cost, no commitment - just answers from people who've supported 275+ FDA submissions, with zero cybersecurity rejections.