GAO recommends FDA, CISA update medical device security documentation based on AHA input

The Government Accountability Office Dec. 21 recommended the Food and Drug Administration and Cybersecurity and Infrastructure and Security Agency update a 5-year-old agreement regarding medical device security. AHA was among the entities that identified challenges presented by the current agreement to GAO. FDA, which has primary responsibility for medical device cybersecurity, collaborates with CISA on security guidance for device manufacturers, public alerts about vulnerabilities and more.