Gabe Siftar and Matt Nowell
Gabe Siftar and Matt Nowell

Managing Software Vulnerabilities: How to Utilize ISA/IEC 62443 and Software Bills of Materials

By Gabe Siftar, Matt Nowell

The recently announced “Refuse to Accept Policy” signed into law under section 524B of the Federal Food, Drug, and Cosmetic Act (FD&C Act) gives the FDA more traction to encourage the medical device manufacturing industry to utilize software bills of materials that help to incorporate supply chain security. The ISA/IEC 62443 series of standards defines a secure product lifecycle process that can be adopted by medical device manufacturers to identify and manage the security risks of all external components used within the product.

Continue reading

Dr. Abtin Rad
Dr. Abtin Rad

New Cybersecurity Standards for Medical Applications

By Dr. Abtin Rad

Connectivity in medical devices creates new diagnostic and treatment opportunities, yet at the same time increases the risks of cyberattacks—including their consequences for patient safety and data privacy. Now the new IEC 81001-5-1 standard provides clear technical requirements for manufacturers and developers to ensure the cybersecurity of their products across their life cycle.

Continue reading

Jenna Wagner
Jenna Wagner
Soapbox

Life Sciences Labeling for Patient Safety

By Jenna Wagner

Life sciences companies have a lot of factors to consider when it comes to labeling. Understanding the global labeling regulations for patient safety and how enterprise labeling solutions can help companies achieve compliance while assuring speed to market, and labeling system validation and auditability, can save resources and reduce costly errors.

Continue reading

SOTA
SOTA

State-of-the-Art: Unpacking MDR’s Evolving Requirements

By Elisabeth Liljensten, Lina Burman, Mark Cabonce, M.S., DABT, Monica Grekula

Per EU MDR regulations, any medical device on the market must be considered “state-of-the-art.” However, the term is not explicitly defined. Exploring MDR verbiage around standards harmonization, risk management and clinical data may allow a clearer understanding of regulatory expectations to emerge.

Continue reading