Gabe Siftar and Matt Nowell
Gabe Siftar and Matt Nowell

Managing Software Vulnerabilities: How to Utilize ISA/IEC 62443 and Software Bills of Materials

By Gabe Siftar, Matt Nowell

The recently announced “Refuse to Accept Policy” signed into law under section 524B of the Federal Food, Drug, and Cosmetic Act (FD&C Act) gives the FDA more traction to encourage the medical device manufacturing industry to utilize software bills of materials that help to incorporate supply chain security. The ISA/IEC 62443 series of standards defines a secure product lifecycle process that can be adopted by medical device manufacturers to identify and manage the security risks of all external components used within the product.

Continue reading

FDA Logo
FDA Logo

FDA Releases Final Guidance on Premarket Submissions for Device Software Functions

By MedTech Intelligence Staff

“Content of Premarket Submissions for Device Software Functions” covers recommended documentation sponsors should include in premarket submissions for FDA’s evaluation of safety and effectiveness of device software functions. The agency is hosting a webinar for industry on July 20 to provide an overview and answer questions about the new final guidance.

Continue reading

Steve Thompson
Steve Thompson

Risk-Based CSA Validation: Ensuring the Least Burdensome Approach

By Steve Thompson

When it comes to testing, the most significant difference between CSV and CSA is that CSV focuses on a “test everything” approach, while CSA encourages us to use critical thinking to test more effectively. The following article outlines how companies can identify the appropriate degree of testing rigor for risk-based CSA validation to ensure the least burdensome approach.

Continue reading