Secure Medical Device Procurement

This Medical Device Security webinar will focus on industry leading practices to assist healthcare delivery organizations (HDOs) with the integration of security into medical device procurement to inform procurement decisions, contractual requirements, and compensating controls. Also attendees will learn the required steps involved in the procurement process, some of which include vendor-level and product-level assessments, contractual requirements, and publicly available resources to assist with standardization.

Why Should You Attend:

Medical device security risk has become an executive management issue, requiring commitment and funding to develop proactive procurement processes and controls to decrease the risks of potential harm to patients and threats to hospital networks. Incorporating a new and consistent approach for procuring connected medical devices and gaining visibility into their risk is critical in identifying and addressing risks to safety, security, and privacy.

For many healthcare delivery organizations, security is an afterthought when procuring medical devices and is the responsibility of healthcare technology management and information technology to secure the devices when put into the healthcare delivery organization environment. Many of those who do include security within procurement have proprietary questionnaires that are unique to each individual healthcare delivery organization.

Considerations offered and discussed will be related to how to integrate security into device procurement and take a risk-based approach to acquiring and fielding devices based on specifications, published guidance, and insights from industry leading practices.

Areas Covered in the Webinar:

• Medical device security landscape
• Medical device manufacturer leading practices
• Overview of security integration with device procurement
• Vendor-level assessment approach and available resources
• Device-level assessment approach and available resources
• Security questionnaire
• Security risk assessment
• Technical security testing
• Inclusion of security into contractual terms and available resources

Who Will Benefit:

• CIO
• CISO
• Healthcare Technology Management (HTM)
• Clinical Engineering
• Information Technology
• Procurement
• Medical Device Manufacturer Product Security