Every article in our archive in SBOM & Supply Chain.
Looking for a quick answer instead? The FDA medical device cybersecurity FAQ covers Section 524B scope, SBOMs, threat models, CR515 and GMLP, deficiencies, and postmarket duties.
Showing 5 of 5 articles in SBOM & Supply Chain
VEX resources for medical device teams: a document guide, SBOM comparison, and common assessment mistakes, with evidence-based status and regulatory context.
Read article
SBOM for SaMD and cloud components: what the FDA expects for cloud services, containers, and third-party APIs, and how to keep the SBOM current after release.
Read article
When a chip vendor's SBOM is enough, when it isn't, and what changes the moment a MedTech team modifies modem, radio, or SoC firmware in the device.
Read article
EOS vs EOL vs Level of Support in your medical device SBOM: what Section 524B requires, how to express it in CycloneDX and SPDX, and how to defend it.
Read article
SBOM vs VEX explained for medical device submissions. What each document does, how they pair, and what the FDA actually expects in your 510(k) package.
Read article30-minute strategy session. No cost, no commitment - just answers from people who've shipped 275+ devices supported.
