Why Cybersecurity Should be Earlier in the Design Cycle
An exploration and justification of why cybersecurity needs to be an upfront consideration in design projects. The author examines the benefits of incorporating secure design early and integrating it throughout the entire lifecycle, as well as the drawbacks of postponing it until the end. Key considerations include budget, time to market, and overall security of the final product.
What is the primary practical reason the speaker gives for integrating cybersecurity at the start of the design cycle?
Thanks for the talk! Among others, I found very unique and interesting the connection between early cybersecurity <-> simple design <-> improved battery life! I'm also 100% with you in your central message: cybersecurity should be a priority from the beginning.
Hi Jeridiah, thanks for the talk! I'd like your take on the initial steps that should be taken to start addressing cybersecurity in the product development process, specifically for medical device development? Thanks.
Can you clarify your question a little? Are you asking specifically first steps in any development process, or how do we start shifting the attitude(s) on cybersecurity in the process?
What initial steps should be taken to go from a state of not addressing cybersecurity at all in a medical device design to making it a part of the product development process? Understandably this also requires a culture shift, but I'm more interested in the tangible process and potential compliance related considerations.
Great question. If you have nothing now, I would highly recommend "Medical Device Security for Engineers and Manufacturers by Wirth, Gates and Smith". Excellent book on the topic and will help you to figure out what you know and what you don't. At the end of the day cybersecurity processes are largely risk management processes and if you have a risk management process in place you will see a lot of overlapping activities just with different names.
The FDA has a great guidance document on what they are looking for. https://www.fda.gov/media/119933/download
Reading that over will give you a good starting point of what they are looking for in a submission. They say "guidance" but it's really pretty mandatory now, and be assured they will bump you if you try to gloss over it.
Please reach out jeridiah.welti@bench.com and would love to discuss further how we can possibly help you.
Very helpful! Thank you.
Very timely topic. Thanks for the talk, Jeridiah!
Excellent presentation!