{"id":43351,"date":"2020-09-30T01:57:00","date_gmt":"2020-09-30T05:57:00","guid":{"rendered":"http:\/\/blog.cybercon1.com\/?p=43351"},"modified":"2020-09-30T01:57:00","modified_gmt":"2020-09-30T05:57:00","slug":"a-recipe-for-reducing-medical-device-internet-of-things-risk","status":"publish","type":"post","link":"https:\/\/www.cyberconservices.com\/index.php\/2020\/09\/30\/a-recipe-for-reducing-medical-device-internet-of-things-risk\/","title":{"rendered":"A Recipe for Reducing Medical Device Internet of Things Risk"},"content":{"rendered":"\n

\u00a0By\u00a0Abby Ross<\/a>\u00a0co-authored by\u00a0Ralph Ramsey<\/a> – The healthcare system today uses various security technologies for connected devices, many of which assign a risk score to vulnerabilities. The score is meant to help hospital security teams understand and prioritize vulnerabilities that elevate risk. Those technologies, however, use different formulas to calculate the risk score. Furthermore, they are often focused on technical risk rather than the clinical impact on the hospital in terms of patient safety or disruption of a physician\u2019s workflow.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

For example, while some scanning tools provide a score based on the Common Vulnerability Scoring System<\/a> (CVSS), medical device security platforms (MDSPs) monitor what devices are doing, collect data, apply machine learning, build behavioral models and calculate a risk score. Both technologies view risk through a technical lens.<\/p>\n\n\n\n

The U.S. Food and Drug Administration (FDA) also has its own health care device\u00a0classification<\/a>\u00a0formula. It focuses on a vulnerability\u2019s associated exploit, what an attacker can do with the exploit and the potential harm that can be done. Again, these elements are viewed through a technical lens, not including the clinical impact on the hospital. Read On:<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\u00a0By\u00a0Abby Ross\u00a0co-authored by\u00a0Ralph Ramsey – The healthcare system today uses various security technologies for connected devices, many of which assign a risk score to vulnerabilities. The score is meant to help hospital security teams understand and prioritize vulnerabilities that elevate risk. Those technologies, however, use different formulas to calculate the risk score. Furthermore, they are […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[649,626],"tags":[650,627],"class_list":["post-43351","post","type-post","status-publish","format-standard","hentry","category-internet-of-things","category-iot","tag-internet-of-things","tag-iot"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t