AHA voices support for bill to protect medical device cybersecurity 

Jun 27, 2022 - 03:35 PM
cybersecurity-hand-lock-graphic_900x400

 AHA Friday voiced support for the Protecting and Transforming Cyber Health Care Act (S. 3983/H.R. 7084), legislation that would require medical device manufacturers to meet certain cybersecurity requirements when seeking approval for devices that are internet connected or include software. For example, the bill would require medical device manufacturers to monitor and identify post-market vulnerabilities in a timely manner, develop a plan for coordinated vulnerability disclosure, and provide lifetime cybersecurity support of the device. It also would provide a “software bill of materials” for all software contained in the device, including third-party software. 
  
“Manufacturers should be accountable for developing products with appropriate security controls, as well as updating devices as cyber threats continue to evolve,” AHA said in  letters of support to the House and Senate sponsors, Sens. Bill Cassidy, R-La., and Tammy Baldwin, D-Wisc., and Reps. Michael Burgess, R-Texas, and Angie Craig, D-Minn. “We also encourage the inclusion of a provision to clarify that FDA approval of devices would not be jeopardized as manufacturers provide these updates.” 
 

Related News Articles

Perspective
Staying Cyber Alert and Cyber Ready
Public
As the world has learned in recent years, today’s conflicts are fought with many weapons, and cyber warfare is an integral part of the arsenal.As of this…
Headline
FBI reminds of potentially malicious activity by Iranian cyber actors
The FBI is reminding critical infrastructure organizations to implement mitigations from a June 2025 fact sheet on potential actions by Iranian-affiliated…
Headline
CISA report updates findings on RESURGE malware attacks
The Cybersecurity and Infrastructure Security Agency Feb. 26 released a report that updates findings from last year on RESURGE malware used to gain covert…
Headline
Agencies issue guidance on exploitation of Cisco systems by cyber actors 
U.S. and international agencies Feb. 25 released guidance on protecting Cisco Software-defined Wide-area Networking systems from exploitation by malicious…
Headline
NSA issues guidelines on zero trust architecture
The National Security Agency has released two phases of its Zero Trust Implementation Guidelines for organizations to improve their zero trust architecture.…
Headline
CISA announces town halls to gather public input on proposed cyber incident reporting requirements
The Cybersecurity and Infrastructure Security Agency announced Feb. 13 that it will host a series of virtual town hall meetings to gather public input on…