Medical device cybersecurity is still surrounded by some persistent misconceptions.
In this solo episode, Christian Espinosa breaks down seven of the most common misunderstandings he continues to hear across MedTech, from what actually makes a device “cyber” to why cybersecurity cannot be treated as a final-stage compliance task.
He also explains why medical device cybersecurity is fundamentally different from traditional IT security, and why getting these basics wrong can create problems long before a product reaches the market.
In this episode:
00:07 What actually makes a medical device “cyber”?
02:12 Why medical device cybersecurity is about patient safety
05:21 Why cybersecurity cannot be a point-in-time exercise
06:27 Exploitability versus probability
08:30 Why pre-market clearance is not the finish line
10:43 Why software developers are not cybersecurity experts
11:47 Why traditional cybersecurity is different from medical device cybersecurity
Bring this work to your device
Need help with penetration testing?
Blue Goat Cyber delivers medical device penetration testing for medical device manufacturers - from threat modeling to FDA-ready reports.
Medical Device Penetration TestingMore on Penetration Testing
Keep listening
- Episode 83
The Commercialization Gaps MedTech Founders Keep Missing with Ryan Roghaar
With Ryan Roghaar
- Episode 78
Productivity, Psychological Safety and AI with Sarah Ohanesian and Jeff Gibbard
With Sarah Ohanesian
- Episode 77
From Science Fiction to Visual Prosthesis with Frederik Ceyssens
With Frederik Ceyssens
- Episode 76
Building Medical Devices Right the First Time with Helen Souris
With Helen Souris