
FDA MDDT for Cybersecurity: Using the CVSS Rubric for Devices
FDA MDDT for cybersecurity: what the qualified MITRE CVSS rubric is, how medical device makers use it to score vulnerabilities, and where its limits are.
Read articleEvery article in our archive tagged Vulnerability Management.
Looking for a quick answer instead? The FDA medical device cybersecurity FAQ covers Section 524B scope, SBOMs, threat models, CR515 and GMLP, deficiencies, and postmarket duties.
Showing 5 of 5 articles tagged Vulnerability Management

FDA MDDT for cybersecurity: what the qualified MITRE CVSS rubric is, how medical device makers use it to score vulnerabilities, and where its limits are.
Read article
When to patch a medical device vulnerability: how controlled and uncontrolled risk, vendor CVE patches, and FDA reporting rules shape your remediation timeline.
Read article
Vulnerability management metrics for medical device makers: which KPIs to track, how to set targets by risk, and how they support FDA 524B postmarket plans.
Read article
VEX resources for medical device teams: a document guide, SBOM comparison, and common assessment mistakes, with evidence-based status and regulatory context.
Read article
The CISA KEV catalog explained: who must act on it, how it drives SBOM and VEX triage, and how it fits postmarket obligations under the FDA's guidance.
Read article30-minute strategy session. No cost, no commitment - just answers from people who've supported 275+ FDA submissions, with zero cybersecurity rejections.