Blue Goat CyberBlue Goat CyberSMMedical Device Cybersecurity
    K
    Search

    Search the Blue Goat Cyber library.

    Full-text search across guides, blog posts, podcast episodes, and newsroom items.

    Type
    Category

    Try "FDA", "threat modeling", "SBOM", "pen test", or filter by type and category.

    Guides8

    Vendor Selection

    10 Reasons Cybersecurity Vendors Fail MedTech

    Why generic IT-security vendors keep blowing FDA submissions - and what to demand from a true MedTech specialist.

    Read guide
    Pen Testing

    12 Critical Findings from Medical Device Pen Tests

    Real, recurring vulnerabilities we uncover during penetration testing on Class II/III connected medical devices.

    Read guide
    Threat Modeling

    12 Critical Threat-Modeling Gaps in Submissions

    Where threat models fall short of FDA expectations under the 2026 cybersecurity guidance - and how to fix the gaps.

    Read guide
    FDA

    12 Reasons the FDA Rejects Cybersecurity Submissions

    The most common deficiencies we see in 510(k), De Novo, and PMA cybersecurity packages - and how to avoid each one.

    Read guide
    FDA

    FDA Cybersecurity Deficiency Response Checklist

    Step-by-step checklist for responding to FDA cybersecurity deficiency letters without losing your submission timeline.

    Read guide
    Postmarket

    Postmarket Cybersecurity Readiness Plan

    What you need in place after clearance to satisfy FDA postmarket expectations and stay ahead of vulnerabilities.

    Read guide
    Standards

    The MedTech Cybersecurity Standards Decoder

    FDA Section 524B, IEC 81001-5-1, AAMI TIR57, ISO 14971 and more - what they require, how they connect, and what the FDA expects to see.

    Read guide
    SPDF

    The SPDF Playbook

    A practical playbook for implementing the Secure Product Development Framework across your QMS and SDLC.

    Read guide

    Blog24

    Quality

    21 CFR Part 820 and Medical Device Cybersecurity

    Updated October 26, 2024 The development, manufacturing, and management of medical devices require strict regulatory adherence to ensure these products' safety, effectiveness, and reliability. A key regulatory framework governing this process is 21 CFR Part 820, often called the Quality System Regul

    Read blog
    Pen Testing

    25 Use Cases for White-Box Penetration Testing

    This article explores white box penetration testing use cases and their importance in ensuring robust cybersecurity.

    Read blog
    FDA

    510(k) Cybersecurity Requirements Every Maker Must Meet

    Most 510(k) deficiencies don't fail on clinical data. They fail on cybersecurity. FDA reviewers are sending Additional Information (AI) requests, and outright Refuse-to-Accept (RTA) holds, at a rate that has become the primary timeline risk for connected device submissions. The documentation bar has

    Read blog
    Testing

    A Comprehensive Guide to Software Testing for Medical Devices

    Learn the ins and outs of software testing for medical devices in this comprehensive guide.

    Read blog
    FDA

    A Guide to FDA Cybersecurity Documentation

    FDA cybersecurity documentation requirements (2025): 524B cyber device rules, SPDF, SBOM, threat modeling, testing, and a premarket submission checklist.

    Read blog
    Primer

    A Guide to Hacker Hat Colors

    Learn how different hacker types - white, gray, black hats - impact medical device security. Understand threat modeling and FDA-compliant pen testing strategies.

    Read blog
    Standards

    AAMI TIR57 Risk Management for Medical Devices

    A practical guide to AAMI TIR57 (R2023) and how it supports FDA’s Feb 2026 cybersecurity guidance - risk analysis, controls, and evidence.

    Read blog
    Best Practices

    Best Practices for Medical Device Cybersecurity

    Medical device cybersecurity best practices for 2025: threat modeling, SBOM, penetration testing, secure updates, and FDA 524B/SPDF readiness.

    Read blog
    Quality

    CAPA in Medical Device Cybersecurity

    Updated November 16, 2024 Maintaining compliance with regulatory requirements is crucial in the rapidly evolving medical device manufacturing field. The Corrective and Preventive Action (CAPA) process is a cornerstone among these requirements. CAPA is a systematic approach to identifying, addressing

    Read blog
    Audits

    Conducting a Medical Device Security Audit

    This post outlines the key steps to perform a comprehensive cybersecurity risk assessment and testing of medical devices.

    Read blog
    FDA

    FDA Cybersecurity Requirements for Medical Devices (2026)

    This post explores the FDA's cybersecurity requirements for medical devices, their importance, and the challenges manufacturers face in complying with them.

    Read blog
    Lifecycle

    Integrating Cybersecurity Across the Device Lifecycle

    Learn how to effectively integrate cybersecurity assessments into the medical device lifecycle to ensure the safety and security of these critical technologies.

    Read blog
    Standards

    ISO 14971 + AAMI TIR57: The Connection

    This article discusses the relationship between ISO 14971 and AAMI TIR57, and how they help address risks in the production and use of medical devices.

    Read blog
    Risk

    ISO 14971 Risk Management for Medical Device Security

    Learn how ISO 14971 risk management applies to medical device cybersecurity - identify cyber hazards, control residual risk, and align with FDA expectations.

    Read blog
    Primer

    Linux vs Windows: A Security Comparison

    Linux vs Windows security for medical devices: isolation, hardening, secure updates, and long-term patching - so teams can choose and defend an OS decision.

    Read blog
    Strategy

    Managing Connected Medical Devices: A Strategic Approach

    Discover the essential strategies for effectively managing connected medical devices in this comprehensive article.

    Read blog
    Web Security

    Protecting Medical Devices from XSS Attacks

    Learn how to protect medical devices from XSS attacks with expert guidance, FDA cybersecurity compliance, and proactive strategies from Blue Goat Cyber.

    Read blog
    Testing

    Risk-Based Testing for Medical Device Software

    Explore the intricacies of risk-based testing for medical device software in this comprehensive guide.

    Read blog
    SDLC

    Secure Software Development for Medical Devices

    Learn how to ensure the safety and compliance of medical devices through secure software development.

    Read blog
    Networking

    Securing Communication Protocols in Medical Devices

    This guide emphasizes securing communication protocols in medical devices and provides actionable insights for manufacturers to enhance safety and privacy.

    Read blog
    IoT

    Securing IoT-Enabled Medical Devices: 5 Essential Tips

    Discover 5 essential tips for securing IoT-enabled medical devices and safeguarding patient data.

    Read blog
    Standards

    The Role of MDS² in Medical Device Cybersecurity

    Updated November 16, 2024 The cybersecurity of medical devices has emerged as a critical concern for manufacturers, healthcare providers, and regulatory bodies. The Manufacturer Disclosure Statement for Medical Device Security (MDS²) plays a pivotal role in addressing these concerns by providing a s

    Read blog
    Risk

    The Top 50 Cybersecurity Issues with Medical Devices

    This blog lists the 50 cybersecurity issues in medical devices and explains how penetration testing could have prevented them.

    Read blog
    Threat Modeling

    Threat Modeling Connected & Implantable Devices

    If you're asking how to conduct a cybersecurity threat model for a connected or implantable medical device, the first thing to understand is that this is not the same exercise as modeling a web application or enterprise network. The stakes are categorically different. A missed attack vector on a hos

    Read blog

    Podcast81

    Podcast

    Ep 00 · How to Build an SBOM That Passes FDA Review

    SBOMs are one of the most common sources of FDA deficiencies in medical device submissions. Most companies think they're doing it right, but then they get feedback asking for missing components or clarification on what's included.

    Read podcast
    Podcast

    Ep 00 · Master Medical Device Cybersecurity: Avoid FDA Delays | Blue Goat Cyber Webinar

    How can medical device manufacturers meet FDA cybersecurity requirements the first time around? What are the most significant challenges medical device manufacturers face in ensuring FDA cybersecurity compliance?

    Read podcast
    Podcast

    Ep 00 · Trailer - The Med Device Cyber Podcast

    You rely on a medical device to stay healthy, but what if that device could be hacked? What if someone, miles away, could manipulate it, putting your loved one’s life at risk?

    Read podcast
    Podcast

    Ep 00 · Webinar: 5 Key FDA Cybersecurity Standards with Jordan John

    How can you integrate relevant cybersecurity standards early in your medical device development process? Also, how do FDA cybersecurity standards help reduce the time to market for new medical devices?

    Read podcast
    Podcast

    Ep 00 · Webinar: Hacking Med Devices - What Penetration Testing Reveals Before the FDA Does

    Cyber threats targeting medical devices are increasingly sophisticated. A single undiscovered vulnerability could delay your FDA submission and put patient safety at risk.

    Read podcast
    Podcast

    Ep 00 · Webinar: Mastering Threat Modeling for Medical Device Cybersecurity

    Christian Espinosa, CEO of Blue Goat Cyber, and Trevor Slattery, Director of Medical Device Cybersecurity, explore the critical topic of threat modeling in medical device cybersecurity.

    Read podcast
    Podcast

    Ep 00 · Webinar: Medical Device Penetration Testing: What Every Manufacturer Must Know

    What are the unique challenges and regulatory requirements of medical device penetration testing?  In this webinar episode with Christian Espinosa, CEO of Blue Goat Cyber, and Trevor Slattery, CTO of Blue Goat Cyber, you’ll learn:  * How Medical Device Penetration Testi

    Read podcast
    Podcast

    Ep 00 · Webinar: Medical Device Risk Assessments - Cybersecurity, Compliance & Patient Safety

    Medical devices are becoming more connected, but with that connectivity comes risk. In this episode, Christian and Trevor dive into risk assessments for medical devices - a crucial process in ensuring both patient safety and cybersecurity compliance.

    Read podcast
    Podcast

    Ep 00 · Webinar: Navigating FDA Cybersecurity Compliance: A Guide for RA/QA Professionals

    When you’re working with a manufacturer to ensure that a medical device has strong cybersecurity, what do you need to know from a regulatory perspective?

    Read podcast
    Podcast

    Ep 00 · Webinar: Postmarket Cybersecurity Management

    MedTech manufacturers, how prepared are you to monitor vulnerabilities continuously once your medical device reaches the market? Also, would you like a free checklist for your Cybersecurity Management Plan?

    Read podcast
    Podcast

    Ep 00 · Webinar: Risk Management Frameworks For Medical Device Safety & Security

    Join Trevor Slattery, Director of Cybersecurity, and Christian Espinosa, CEO of Blue Goat Cyber, for a comprehensive webinar on medical device cybersecurity.

    Read podcast
    Podcast

    Ep 00 · Webinar: Security Architecture Views: Protecting Medical Devices Through Strategic Design

    How can security architecture views strengthen a medical device manufacturer’s FDA submissions? This episode/webinar dives into the four critical security architecture views required by the FDA: global system, multi-patient harm, updatability and patchability, and secure use case

    Read podcast
    Podcast

    Ep 00 · Webinar: Why FDA Cybersecurity Submissions Fail and How to Get Yours Approved

    MedTech innovators and medical device manufacturers, how can you prevent cybersecurity deficiencies from delaying your FDA submission?

    Read podcast
    Podcast

    Ep 01 · Cybersecurity for Medical Devices: Protecting Human Lives

    How do medical device cybersecurity risks differ from traditional cybersecurity threats? In this episode, Christian Espinosa and Trevor Slattery discuss the critical importance of cybersecurity for medical devices, sharing real-life stories and insights into how device vulnerabil

    Read podcast
    Podcast

    Ep 02 · Hidden Vulnerabilities in Medical Devices: Why Cybersecurity Matters

    How vulnerable are current medical devices to cyberattacks, and what are the consequences of these exploits? In this episode, Christian Espinosa and Trevor Slattery discuss the critical vulnerabilities in medical devices and the cybersecurity threats they face.

    Read podcast
    Podcast

    Ep 03 · Navigating the Regulatory Landscape of Medical Device Cybersecurity

    What are the main categories of medical devices, and how do regulatory bodies govern them? In this episode, Christian Espinosa and Trevor Slattery unpack the complex regulatory environment surrounding medical device cybersecurity.

    Read podcast
    Podcast

    Ep 04 · Building Resilient Medical Devices: A Look at the Essential Technologies and Infrastructure

    How can some of the biggest cybersecurity concerns with medical devices be addressed in the design phase?

    Read podcast
    Podcast

    Ep 05 · Avoid the Dumb Tax: Cybersecurity Lessons for MedTech Startups with Steve Bell

    What are the most common mistakes MedTech startups make in cybersecurity, and how can founders avoid them? In this episode, Christian Espinosa and Trevor Slattery dive into the challenges MedTech startups face with their guest, Steve Bell, a 35-year veteran of the industry.

    Read podcast
    Podcast

    Ep 06 · The Evolution of Medical Device Cyber Threats: Past, Present, and Future

    How do medical device vulnerabilities pose life-threatening risks? In this episode, Christian and Trevor again explore the fascinating and critical world of medical device cybersecurity.

    Read podcast
    Podcast

    Ep 07 · Startups, Regulations, & Risk: Insights from MedTech Guru Etienne Nichols

    What are some of the key challenges MedTech companies face in balancing innovation with compliance? This episode dives into the intersection of quality management and cybersecurity in the MedTech industry.

    Read podcast
    Podcast

    Ep 08 · The Human Factor: Why Cybersecurity Awareness is Key in Medical Device Manufacturing

    How does human behavior impact medical device cybersecurity? Also, why do cybersecurity awareness programs often fail to make a lasting impact? This episode dives into the human factor in medical device cybersecurity.

    Read podcast
    Podcast

    Ep 09 · FDA AI Guidance Explained: What It Means for Medical Device Cybersecurity

    How does the FDA’s latest AI guidance on medical devices impact manufacturers and cybersecurity challenges in healthcare? In this episode, Christian and Trevor discuss the latest FDA AI guidance and how it will impact real-world AI applications in healthcare.

    Read podcast
    Podcast

    Ep 10 · How Trump & RFK Jr Affect AI Med Device Guidelines

    How might the second Donald Trump administration and Robert F. Kennedy Jr. impact the MedTech cybersecurity world? In this episode, Christian and Trevor discuss how the Trump administration and RFK Jr.’s policies could reshape medical device cybersecurity and regulation.

    Read podcast
    Podcast

    Ep 11 · Advanced Threat Modeling in Medical Devices

    What is threat modeling, how does it differ from penetration testing, and why are both necessary? This episode dives into the nuances of advanced threat modeling for medical devices.

    Read podcast
    Podcast

    Ep 12 · Postmarket Surveillance and Anomaly Detection for Medical Devices

    What are some of the biggest cybersecurity risks medical devices face after they hit the market? This episode dives into the challenges of postmarket surveillance for medical devices.

    Read podcast
    Podcast

    Ep 13 · SBOMs Unpacked: Myths, Risks, & Benefits with Cortez Frazier Jr.

    Why are Software Bill of Materials (SBOMs) critical for medical device security? In this episode, Cortez Frazier Jr. joins Christian and Trevor to discuss SBOMs, vulnerability prioritization, and why companies should stop fearing software transparency.

    Read podcast
    Podcast

    Ep 14 · The Growing Importance of Interoperability and Third-Party Component Security

    Why is interoperability increasing cybersecurity risks in healthcare, and what can we do about it? Interoperability is making healthcare more efficient but also more vulnerable to cyber threats.

    Read podcast
    Podcast

    Ep 15 · Commercialize Your MedTech with Craig T Ingram

    What are the 10 essential components of a successful commercialization plan in the MedTech industry, and why are they often overlooked? This episode explores the critical role of commercialization in the MedTech industry.

    Read podcast
    Podcast

    Ep 16 · Collaboration is Key: Bridging the Gap Between Developers and Cybersecurity Experts

    What are some of the biggest barriers to effective collaboration between coders and cyber experts, and how can they be overcome? This episode explores the essential components of successful collaboration and teamwork.

    Read podcast
    Podcast

    Ep 17 · Cybersecurity Challenges & Trends in US Healthcare with Paul-Lukas Hoffschmidt

    If you’re launching a MedTech product, what should you know about market access, cybersecurity, reimbursement challenges, and customer education?

    Read podcast
    Podcast

    Ep 18 · Early Cyber Strategies for MedTech Trailblazers

    What are some strategies founders can use to incorporate cybersecurity into the early stages of developing a MedTech product? In this episode, Christian and Trevor break down the critical role of cybersecurity in early-stage MedTech startups.

    Read podcast
    Podcast

    Ep 19 · Data Protection in Medical Devices: A Deep Dive with Kevin Derr

    How can medical device companies own their data without compromising security? In this episode, Kevin Derr from NeuronSphere joins Christian and Trevor to dive into the intersection of cybersecurity, compliance, and innovation in the MedTech world.

    Read podcast
    Podcast

    Ep 20 · The Human Factor in MedTech Design with Dylan Horvath

    How can human-centered design influence medical device cybersecurity? In this episode, Christian Espinosa chats with Dylan Horvath of Cortex Design about the powerful intersection of human-centered design and medical device cybersecurity.

    Read podcast
    Podcast

    Ep 21 · Essential Software Documentation for Med Device Manufacturers

    What documents should engineers prepare to get ready for submitting a medical device to the FDA? In this episode, Christian and Trevor dig into the underestimated role software documentation plays in cybersecurity, especially in the medical device space.

    Read podcast
    Podcast

    Ep 22 · AI in Medical Devices: Opportunities & Regulation with Matt Lemay

    What does responsible AI implementation look like in medical devices? This episode explores the intersection of AI, cybersecurity, and medical device regulation with guest Matt Lemay, CEO of Lemay.ai.

    Read podcast
    Podcast

    Ep 23 · Unpacking Post-Market Management and Incident Response for Medical Devices

    What should you do when a vulnerability is discovered in a medical device after it's already on the market? This dives into post-market management and incident response for medical devices, exploring what happens when a device is hacked or a vulnerability is reported.

    Read podcast
    Podcast

    Ep 24 · From Concept to Compliance: A Guide to Med Device Approval

    Med device manufacturers, are you setting up your quality system early enough in product development? Also, are you misunderstanding the FDA’s "guidance" documents - and risking rejection?

    Read podcast
    Podcast

    Ep 25 · Cybersecurity Labeling and MedTech Transparency

    Why is cybersecurity labeling more than just a compliance checkbox for medical device companies? In this episode, Christian and Trevor dive into the nuanced world of cybersecurity labeling for medical devices.

    Read podcast
    Podcast

    Ep 26 · Why Cybersecurity and Quality Are One and the Same

    How can medical device startups avoid missteps in cybersecurity, quality, and compliance? In this episode, Trevor Slattery speaks with Ashkon Rasooli about the intersection of quality systems and cybersecurity in medical devices.

    Read podcast
    Podcast

    Ep 27 · Total Product Lifecycle Security: From Design to Disposal

    How well does your security strategy cover the entire product lifespan - from concept to decommissioning? This episode dives into the importance of the Total Product Lifecycle (TPLC) and Secure Product Development Framework (SPDF) in medical device cybersecurity.

    Read podcast
    Podcast

    Ep 28 · Shared Responsibility in Medical Device Cybersecurity with Greg Garcia

    How can shared responsibility models improve healthcare cybersecurity? In this episode, Greg Garcia joins Christian and Trevor to break down the evolving landscape of medical device cybersecurity from a national policy perspective.

    Read podcast
    Podcast

    Ep 29 · What the FDA Wants in Security Architecture Views for Devices

    What are the four security architecture views that the FDA prioritizes, and how do they impact your device's design? This episode explores the FDA-defined security architecture views essential for medical device cybersecurity.

    Read podcast
    Podcast

    Ep 30 · FDA Cybersecurity Gets Real with Monica Montañez of NAMSA

    How have medical device cybersecurity requirements changed since 2023, and what does this mean for your product development? In this episode, Christian and Trevor welcome Monica Montañez from NAMSA to unpack the evolving landscape of FDA cybersecurity requirements.

    Read podcast
    Podcast

    Ep 31 · Understanding Cybersecurity Measures and Metrics for Medical Devices

    How do measures and metrics differ, and why is this distinction crucial for FDA submissions? In this episode, Christian and Trevor demystify the difference between cybersecurity measures and metrics in the context of FDA guidance.

    Read podcast
    Podcast

    Ep 32 · From Surgery to MedTech Startups: Dr. Dylan Attard’s Journey

    What cybersecurity challenges face hospitals and medical devices today that MedTech innovators should know about? Today’s guest is Dr. Dylan Attard, who swapped his scalpel for startups when he founded MedTech World, a global conference series elevating healthcare innovation.

    Read podcast
    Podcast

    Ep 33 · Vulnerability, Penetration & Other Cybersecurity Testing Types Explained

    Which cybersecurity tests are the most crucial, and which ones does the FDA require for medical device approval? In this episode, Christian and Trevor break down the many types of cybersecurity testing required for medical devices.

    Read podcast
    Podcast

    Ep 34 · Integrating Project Management to Strengthen Cybersecurity Outcomes with Steve Curry

    What project management mistakes can med tech innovators avoid? What methods and tools can help med tech companies manage projects?

    Read podcast
    Podcast

    Ep 35 · Balancing Innovation and Regulation in MedTech Development with Karandeep Singh Badwal

    How can MedTech innovators balance speed with compliance in medical devices? In this episode, Christian and Trevor sit down with Karandeep Singh Badwal about the challenges of balancing innovation with quality and regulatory compliance in medical devices, especially with the rise

    Read podcast
    Podcast

    Ep 36 · When Cybersecurity Becomes a Crime

    What happens when cybersecurity flaws in medical devices cross the line into criminal violations? In this episode, Christian and Trevor unpack the groundbreaking case of Illumina, where cybersecurity misrepresentation led to Department of Justice enforcement.

    Read podcast
    Podcast

    Ep 37 · Overcoming AI and Data Security Challenges in MedTech with May Lee

    How can you prepare your device for future quantum computing risks? In this episode of The Med Device Cyber Podcast, Christian and Trevor talk with May Lee of CS Life Sciences about the fast-changing world of medical device cybersecurity.

    Read podcast
    Podcast

    Ep 38 · Top 10 Medical Device Vulnerabilities with Myles Kellerman

    How safe are the medical devices I rely on, and what are the biggest cybersecurity risks I should know about?

    Read podcast
    Podcast

    Ep 39 · Medical Device Startups and Cybersecurity Challenges with Suzy Engwall

    What are some of the greatest challenges medical device startups face when bringing their products to market? This episode features Suzy Engwall, a healthcare innovation consultant with experience mentoring startups and guiding hospitals.

    Read podcast
    Podcast

    Ep 40 · What Happens When AI in Medical Devices Make Mistakes?

    MedTech manufacturers and developers, what happens if your AI-powered medical device makes a terrible, life-threatening mistake? This episode explores what happens when artificial intelligence in medical devices goes wrong.

    Read podcast
    Podcast

    Ep 41 · 5 Most Common Misconceptions of Medical Device Security

    In this episode, Christian and Trevor unpack the five most common misconceptions that put medical device manufacturers at risk.

    Read podcast
    Podcast

    Ep 42 · What Is A Medical Device?

    MedTech developers and manufacturers, could your medical device unknowingly qualify as a “cyber device”? In this episode, Christian and Trevor break down what the FDA considers a “cyber device” and why so many manufacturers misunderstand this definition.

    Read podcast
    Podcast

    Ep 43 · Why AI Literacy Matters for the Future of Healthcare with José Acosta

    How can AI literacy reduce patient risk in healthcare settings? In this episode, Christian Espinosa and Trevor Slattery are joined by Dr. José Acosta.

    Read podcast
    Podcast

    Ep 44 · Cyber Risk Management for MedTech Legacy Devices

    What options do MedTech manufacturers have to bring older devices up to modern cybersecurity standards? Also, how does the FDA’s latest guidance change the process for updating legacy devices?

    Read podcast
    Podcast

    Ep 45 · Designing Secure Medical Device Software with Randy Horton

    In medical device software development, why should cybersecurity be viewed as an element of product quality, not an add-on? In this episode, Christian and Trevor speak with Randy Horton of Orthogonal about the future of medical device software development.

    Read podcast
    Podcast

    Ep 46 · How Market Intelligence Shapes MedTech Growth with Kevin Saem

    In the MedTech space, how can you leverage market intelligence and machine learning for business development and sales enablement? In this episode, Christian and Trevor talk with Kevin Saem about how market intelligence and cybersecurity intersect in the MedTech space.

    Read podcast
    Podcast

    Ep 47 · What Is Required for an FDA Pre-Market Cyber Submission?

    What are the 18 required cybersecurity deliverables for a pre-market submission, and how do they map to eSTAR’s 13 sections?

    Read podcast
    Podcast

    Ep 48 · Cybersecurity Qs MedTech Innovators Ask: Christian’s Hot Seat

    MedTech manufacturers, how can you avoid the cybersecurity pitfalls that most often lead to FDA rejection? In this episode, Trevor puts Christian “in the hot seat” to tackle the most common - and sometimes misunderstood - cybersecurity questions MedTech innovators ask.

    Read podcast
    Podcast

    Ep 49 · How Cybersecurity Shapes Regulatory and Quality Success with Jim Goodmiller

    What risks do you take when cybersecurity is left off your development roadmap? In this episode, Christian, Trevor and guest Jim Goodmiller explore how cybersecurity intersects with regulatory expectations and quality systems, creating new challenges and opportunities for MedTech

    Read podcast
    Podcast

    Ep 50 · The Differences Between Black, Grey, and White Penetration Testing

    MedTech developers, do you know which penetration testing methodology the FDA actually prefers for medical device submissions?

    Read podcast
    Podcast

    Ep 51 · Trevor Slattery Answers Tough Medical Device Cyber Questions

    This episode puts Trevor in the hot seat. If you were put in the hot seat, could you clearly explain cybersecurity, safety, and lifecycle terms like Trevor?

    Read podcast
    Podcast

    Ep 52 · When Medical Device Cyber Failures Become Fatal

    What past ransomware and medical device incidents might reveal gaps that manufacturers are still overlooking today?

    Read podcast
    Podcast

    Ep 53 · Untangling Software Composition Analysis for MedTech Teams

    Why does software composition analysis matter beyond regulatory compliance? This episode explores SCA (Software Composition Analysis) and explains how SBOMs (Software Bill of Materials), SOUP (Software of Unknown Provenance), and related tooling fit into the broader medical devic

    Read podcast
    Podcast

    Ep 54 · What It Takes to Succeed in the MedTech Industry with Omar Khateeb

    Ever thought about what it really takes to launch a successful MedTech startup? Omar M. Khateeb knows the challenges firsthand. As a founder with a track record of building healthtech companies, he’s lived through the hurdles that come with innovating in the MedTech space.

    Read podcast
    Podcast

    Ep 55 · Why Most MedTech Companies Fail at Global Expansion (And How to Fix It) with William Jin

    Thinking about taking your medical device to China? Or maybe you're a Chinese company looking at the American market? William Jin has spent over 30 years helping companies do exactly that, and he'll tell you straight up that most of them aren't ready.

    Read podcast
    Podcast

    Ep 56 · What MedTech Startups Get Wrong About Cybersecurity Documentation with Marc Zemel

    Marc Zemel has been building Retia Medical for 15 years. The company started as two guys with slides and licensed technology.

    Read podcast
    Podcast

    Ep 57 · From Idea to FDA Clearance: What Nobody Tells MedTech Founders with Darcy Bachert

    Building medical device software is hard. Building it the right way is harder. And getting it through FDA approval while managing cybersecurity requirements? That's what Darcy Bachert has been doing for 17 years.

    Read podcast
    Podcast

    Ep 58 · How AI Code Security Became a Medical Device Problem with Jun Xiang Tan

    Ten years ago, Singapore's healthcare system got hacked. Patient records were stolen at a national scale. The government responded by building one of the most comprehensive medical device security frameworks in the world. The Cybersecurity Labeling Scheme has four tiers.

    Read podcast
    Podcast

    Ep 59 · Prevention Is Better Than Cure: Applying Medical Principles to MedTech Cybersecurity

    Medical device risk assessments are failing patients, not because the process is too hard, but because nobody doing the assessment has ever been in the room where the device actually gets used.

    Read podcast
    Podcast

    Ep 60 · How to Move Stakeholders from Awareness to Sustained Adoption Without Friction

    Marketing medical devices requires understanding that stakeholders are different, buying processes are longer, and friction points are more complex than consumer products or software.

    Read podcast
    Podcast

    Ep 61 · Alarm Fatigue, Workflow Integration, and the Intelligent Operating Room (Professor Aamer Ahmed)

    Devices that do not integrate into the clinical workflow sit unused regardless of technical sophistication. Physicians work in high-pressure environments where equipment must be 100 percent reliable, secure, and enhance workflow rather than disrupt it.

    Read podcast
    Podcast

    Ep 62 · Edge Cases, Alarm Fatigue, and Why AI Cannot Replace Clinical Judgment with Brandon Fertig, Senior Manager at Philips Healthcare

    Alarm fatigue happens when monitoring systems raise so many false flags that clinical staff begin ignoring them, even when real critical events occur.

    Read podcast
    Podcast

    Ep 63 · Early Design Decisions that Shape Medical Device Success with Chris Danek, CEO of Bessel

    Early design decisions define the trajectory of a medical device long before commercialization begins. Choices related to software architecture, third-party components, and system connectivity establish both the opportunity and the risk profile of the product.

    Read podcast
    Podcast

    Ep 64 · Traceability Requirements and Documentation Audit Trails with Dr. Basant Bajpai, CEO of Compliance MedQRA

    Quality management system implementation delays create cascading failures across medical device development timelines.

    Read podcast
    Podcast

    Ep 65 · Why Clinical Trials Are the Most Expensive Capital Outlay for Startups with Rob Bedford, CEO of Franklyn Health

    Early planning prevents expensive corrections when startups address clinical strategy, regulatory pathways, and cybersecurity requirements from day one rather than improvising solutions before launch.

    Read podcast
    Podcast

    Ep 66 · Vibe Coding Security Risks and Malicious Code Injection with Jake Rodriguez of Triangle Tech

    Vibe coding enables rapid development through AI-generated code but introduces security risks when developers accept outputs without verification. Malicious actors can inject vulnerabilities through manipulated training data or prompt engineering.

    Read podcast
    Podcast

    Ep 67 · De-Risking Product Decisions in MedTech Startups with Brent Lavin of Ironwood MedTech Partners

    Product decisions made during early development determine commercialization outcomes years later. Wrong choices about regulatory pathways, feature sets, and market segments create compounding problems limiting commercial success.

    Read podcast
    Podcast

    Ep 68 · Why MedTech Needs More Than Approval with Michael Branagan Harris of HealthTech Strategies Limited

    A device can clear regulatory hurdles and still struggle commercially if the evidence is too narrow. MedTech companies need proof that speaks to affordability, care quality, operational impact, and long term value, not just technical performance.

    Read podcast

    News32

    News

    Blue Goat Cyber Brings Global Medical Device Cybersecurity Expertise to SWITCH Singapore 2025

    Blue Goat Cyber Brings Global Medical Device Cybersecurity Expertise to SWITCH Singapore 2025 SINGAPORE, October 27, 2025 -- Blue Goat Cyber, the global authority in medical device cybersecurity and regulatory compliance, will attend the Si

    Read new
    News

    Blue Goat Cyber Celebrates Milestone with the Release of Its 10th Episode on the Med Device Cyber Podcast

    Blue Goat Cyber Celebrates Milestone with the Release of Its 10th Episode on the Med Device Cyber Podcast FDA compliance shouldn’t be a guessing game. The Med Device Cyber Podcast gives MedTech innovators a clear roadmap to secure devices,

    Read new
    News

    Blue Goat Cyber Expands Global Presence with Strategic Success at LSI Europe 2024 and RAPS Convergence 2024

    Blue Goat Cyber Expands Global Presence with Strategic Success at LSI Europe 2024 and RAPS Convergence 2024 Scottsdale, Arizona, United States - October 5, 2024 Blue Goat Cyber, a leader in medical device cybersecurity solutions, is excited

    Read new
    News

    Blue Goat Cyber Expands into Asian Market at Mednovation MedTech Forum

    Blue Goat Cyber Expands into Asian Market at Mednovation MedTech Forum SCOTTSDALE, AZ, UNITED STATES, October 24, 2024 Blue Goat Cyber, a leader in medical device cybersecurity, is excited to announce its participation in the Mednovation In

    Read new
    News

    Blue Goat Cyber Highlights Expertise at DeviceTalks West 2024; Christian Espinosa Shares Key Cybersecurity Insights

    Blue Goat Cyber Highlights Expertise at DeviceTalks West 2024; Christian Espinosa Shares Key Cybersecurity Insights SANTA CLARA, CA, UNITED STATES, October 18, 2024Blue Goat Cyber, a leader in cybersecurity solutions for the medical device

    Read new
    News

    Blue Goat Cyber Highlights FDA Cybersecurity at DeviceTalks West 2025; CTO Trevor Slattery to Present

    Blue Goat Cyber Highlights FDA Cybersecurity at DeviceTalks West 2025; CTO Trevor Slattery to Present SANTA CLARA, CA, UNITED STATES, October 14, 2025 -- Blue Goat Cyber, a trusted leader in medical device cybersecurity and FDA compliance s

    Read new
    News

    Blue Goat Cyber Joins MedTech World Bay Area as Gold Sponsor; Christian Espinosa to Join Regulatory Strategy Panel

    Blue Goat Cyber Joins MedTech World Bay Area as Gold Sponsor; Christian Espinosa to Join Regulatory Strategy Panel SCOTTSDALE, AZ, UNITED STATES, June 4, 2025 -- Blue Goat Cyber, a leading cybersecurity consultancy for FDA-regulated medical

    Read new
    News

    Blue Goat Cyber Launches “The Med Device Cyber Podcast”: Your Go-To Resource for Medical Device Security

    Blue Goat Cyber Launches \"The Med Device Cyber Podcast\": Your Go-To Resource for Medical Device Security SCOTTSDALE, AZ, UNITED STATES, October 16, 2024Blue Goat Cyber, a leader in medical device cybersecurity, is excited to announce the

    Read new
    News

    Blue Goat Cyber Launches Legacy Medical Device Cybersecurity Service with Advanced Monitoring and Testing

    Blue Goat Cyber Launches Legacy Medical Device Cybersecurity Service with Advanced Monitoring and Testing SCOTTSDALE, AZ, UNITED STATES, October 30, 2024Blue Goat Cyber, a medical device cybersecurity solutions leader, has announced a new s

    Read new
    News

    Blue Goat Cyber Launches Milestone 25th Podcast Episode: Cybersecurity Labeling and MedTech Transparency

    Blue Goat Cyber Launches Milestone 25th Podcast Episode: Cybersecurity Labeling and MedTech Transparency SCOTTSDALE, AZ, UNITED STATES, June 24, 2025 -- Blue Goat Cyber, the global authority in medical device cybersecurity, announces the re

    Read new
    News

    Blue Goat Cyber Launches Monthly Medical Device Cybersecurity Webinar Series

    Blue Goat Cyber Launches Monthly Medical Device Cybersecurity Webinar Series SCOTTSDALE, AZ, UNITED STATES, October 31, 2024Blue Goat Cyber, a leader in medical device cybersecurity and FDA regulatory compliance, is excited to announce the

    Read new
    News

    Blue Goat Cyber Launches New Secure MedTech Product Design Consulting Service to Meet Growing Client Demand

    Blue Goat Cyber Launches New Secure MedTech Product Design Consulting Service to Meet Growing Client Demand Cybersecurity should be embedded from the start to avoid costly redesigns, enhance patient safety, and confidently meet regulatory d

    Read new
    News

    Blue Goat Cyber Leads Medical Device Cybersecurity Compliance as FDA Finalizes New Guidance

    Blue Goat Cyber Leads Medical Device Cybersecurity Compliance as FDA Finalizes New Guidance SCOTTSDALE, AZ, UNITED STATES, July 9, 2025 -- On February 3, 2026, the U.S. Food and Drug Administration (FDA) finalized its medical device cybersecur

    Read new
    News

    Blue Goat Cyber Leads the MedTech Cybersecurity Revolution at DeviceTalks Boston 2025

    Blue Goat Cyber Leads the MedTech Cybersecurity Revolution at DeviceTalks Boston 2025 SCOTTSDALE, AZ, UNITED STATES, April 21, 2025 -- Blue Goat Cyber is driving the next wave of MedTech cybersecurity innovation as a platinum sponsor of Dev

    Read new
    News

    Blue Goat Cyber Named Gold Sponsor at MedTech World Malta 2025, Advancing FDA and EU MDR Cybersecurity Alignment

    Blue Goat Cyber Named Gold Sponsor at MedTech World Malta 2025, Advancing FDA and EU MDR Cybersecurity Alignment VALLETTA, MALTA, November 6, 2025 -- Blue Goat Cyber, a U.S.-based leader in medical device cybersecurity and global regulatory

    Read new
    News

    Blue Goat Cyber Named Medical Device Cybersecurity Services Company of the Year by Healthcare Business Review

    Blue Goat Cyber Named Medical Device Cybersecurity Services Company of the Year by Healthcare Business Review SCOTTSDALE, AZ, UNITED STATES, February 21, 2025 -- Blue Goat Cyber, a leading medical device cybersecurity solutions provider, ha

    Read new
    News

    Blue Goat Cyber Reaches Milestone: 21 Episodes of The Med Device Cyber Podcast Now Available

    Blue Goat Cyber Reaches Milestone: 21 Episodes of The Med Device Cyber Podcast Now Available SCOTTSDALE, AZ, UNITED STATES, May 28, 2025 -- Blue Goat Cyber, a global leader in MedTech cybersecurity and FDA cybersecurity compliance consultin

    Read new
    News

    Blue Goat Cyber Releases Essential White Paper to Streamline Medical Device Cybersecurity Compliance

    Blue Goat Cyber Releases Essential White Paper to Streamline Medical Device Cybersecurity Compliance SCOTTSDALE, AZ, UNITED STATES, November 15, 2024Blue Goat Cyber, a leading provider of cybersecurity solutions for medical device manufactu

    Read new
    News

    Blue Goat Cyber Sponsors Cybersecurity for Medical Devices Summit to Strengthen Healthcare Security

    Blue Goat Cyber Sponsors Cybersecurity for Medical Devices Summit to Strengthen Healthcare Security SCOTTSDALE, AZ, UNITED STATES, November 6, 2024Blue Goat Cyber, a leader in medical device cybersecurity, proudly announces its sponsorship

    Read new
    News

    Blue Goat Cyber Sponsors DeviceTalks Minnesota; Jordan John to Share FDA Cybersecurity Strategies

    Blue Goat Cyber Sponsors DeviceTalks Minnesota; Jordan John to Share FDA Cybersecurity Strategies SCOTTSDALE, AZ, UNITED STATES, June 3, 2025 -- Blue Goat Cyber, a leading authority in medical device cybersecurity and FDA compliance strateg

    Read new
    News

    Blue Goat Cyber Sponsors LSI Asia 2025; CTO Trevor Slattery to Lead High-Impact MedTech Cybersecurity Panel

    Blue Goat Cyber Sponsors LSI Asia 2025; CTO Trevor Slattery to Lead High-Impact MedTech Cybersecurity Panel SCOTTSDALE, AZ, UNITED STATES, June 3, 2025 -- Blue Goat Cyber, a trusted authority in medical device cybersecurity and regulatory s

    Read new
    News

    Blue Goat Cyber Sponsors LSI Europe 2025; CEO Christian Espinosa to Lead MedTech Cybersecurity Panel

    Blue Goat Cyber Sponsors LSI Europe 2025; CEO Christian Espinosa to Lead MedTech Cybersecurity Panel SCOTTSDALE, AZ, UNITED STATES, September 2, 2025 -- Blue Goat Cyber, a leading medical device cybersecurity consultancy, today announced it

    Read new
    News

    Blue Goat Cyber Sponsors MedTech World Dubai 2025 to Support Medical Device Security in the GCC Region

    Blue Goat Cyber Sponsors MedTech World Dubai 2025 to Support Medical Device Security in the GCC Region SCOTTSDALE, AZ, UNITED STATES, February 4, 2025 -- Blue Goat Cyber, a leader in medical device cybersecurity, is proud to sponsor MedTech

    Read new
    News

    Blue Goat Cyber to Exhibit at The MedTech Conference 2025 Showcasing FDA Compliance & Cybersecurity Services

    Blue Goat Cyber to Exhibit at The MedTech Conference 2025 Showcasing FDA Compliance & Cybersecurity Services SAN DIEGO, CA, UNITED STATES, September 30, 2025 -- Blue Goat Cyber, a leading provider of medical device cybersecurity services, a

    Read new
    News

    Blue Goat Cyber to Lead Global MedTech Cybersecurity Masterclass at Asia Pacific 2025 Finals

    Blue Goat Cyber to Lead Global MedTech Cybersecurity Masterclass at Asia Pacific 2025 Finals SINGAPORE, October 24, 2025 -- Blue Goat Cyber, a global leader in medical device cybersecurity and regulatory strategy, will lead a high-impact ma

    Read new
    News

    Blue Goat Cyber to Share Critical FDA Cybersecurity Strategies at AMDM 2025 Annual Meeting

    Blue Goat Cyber to Share Critical FDA Cybersecurity Strategies at AMDM 2025 Annual Meeting SCOTTSDALE, AZ, UNITED STATES, April 28, 2025 -- Medical device manufacturers increasingly face regulatory setbacks, with cybersecurity deficiencies

    Read new
    News

    Blue Goat Cyber to Showcase Healthcare and Medical Device Cybersecurity Solutions at HLTH 2025 in Las Vegas

    Blue Goat Cyber to Showcase Healthcare and Medical Device Cybersecurity Solutions at HLTH 2025 in Las Vegas LAS VEGAS, NV, UNITED STATES, October 17, 2025 -- Blue Goat Cyber, a leader in healthcare cybersecurity, medical device protection,

    Read new
    News

    Blue Goat Cyber to Speak at MedTech World Hong Kong on Medical Device Cybersecurity

    Blue Goat Cyber to Speak at MedTech World Hong Kong on Medical Device Cybersecurity SCOTTSDALE, AZ, UNITED STATES, June 25, 2025 -- Blue Goat Cyber, a leader in medical device cybersecurity, is proud to announce its participation in the upc

    Read new
    News

    Blue Goat Cyber to Sponsor and Attend LSI USA ‘25 Emerging MedTech Summit

    Blue Goat Cyber to Sponsor and Attend LSI USA ‘25 Emerging MedTech Summit SCOTTSDALE, AZ, UNITED STATES, February 14, 2025 -- Blue Goat Cyber, a leader in medical device cybersecurity, proudly announces its sponsorship of the LSI USA ‘25 Em

    Read new
    News

    Blue Goat Cyber to Sponsor MedTech World Singapore Roadshow; Christian Espinosa to Speak on Medical Device Cybersecurity

    Blue Goat Cyber to Sponsor MedTech World Singapore Roadshow; Christian Espinosa to Speak on Medical Device Cybersecurity SINGAPORE, September 27, 2025 -- Blue Goat Cyber, a leader in medical device cybersecurity, announced its sponsorship o

    Read new
    News

    Blue Goat Cyber Wins ‘MedTech Service Provider Excellence Award of the Year’ at MedTech Malta 2025

    Blue Goat Cyber Wins ‘MedTech Service Provider Excellence Award of the Year’ at MedTech Malta 2025 VALETTA, MALTA, November 16, 2025 -- Blue Goat Cyber, a leading global provider of medical device cybersecurity services, has been awarded th

    Read new
    News

    News

    Stay up to date on Blue Goat Cyber news, press releases, and thought leadership on medical device cybersecurity, FDA guidance, and healthcare cyber risk.

    Read new
    Ready when you are

    Get FDA cleared without the cybersecurity headaches.

    30-minute strategy session. No cost, no commitment - just answers from people who've shipped 250+ submissions.