The Food and Drug Administration today released a framework to help hospitals and other health care providers plan for and respond to cybersecurity incidents involving medical devices. Developed by MITRE Corp., the “playbook” includes steps such as developing a medical device inventory and conducting training exercises. The agency also announced two memoranda of understanding to create information sharing analysis organizations, groups of experts that will gather, analyze and disseminate information about cyber threats. “We believe this transparent sharing of information will help manufacturers address issues earlier and result in more protection for patients,” said FDA Commissioner Scott Gottlieb, M.D. AHA has repeatedly asked FDA to strengthen its activities to improve medical device security. 

Related News Articles

Headline
The Cybersecurity and Infrastructure Security Agency Oct. 15 released an emergency directive advising federal agencies to take stock of their F5 BIG-IP…
Headline
In part one of a new blog, John Riggi, AHA national advisor for cybersecurity and risk, and Scott Gee, AHA deputy national advisor for cybersecurity and risk,…
Headline
The Food and Drug Administration has identified a Class I recall of Abiomed Automated Impella Controllers due to the potential for serious injury or death. The…
Perspective
Public
This week, the FBI issued an urgent warning to all users — including hospitals — of a critical security soft spot within Oracle’s E-Business Suite, stating “…
Headline
The Health Sector Coordinating Council Oct. 7 released its Sector Mapping and Risk Toolkit, created to help health care providers and other organizations…
AHA Cyber Intel
As of Oct. 3, 2025, 364 hacking incidents had been reported to the U.S. Department of Health and Human Services Office for Civil Rights, affecting over 33…