Commentary Archives

Commentary, Cybersecurity, Medical Devices

The CIA Triad – Differing Perspectives in Healthcare

The CIA triad is foundational to cybersecurity however it’s use and focus will vary depending on the perspective taken. We’ll discuss the basics of the CIA triad and then show how different areas within healthcare organizations can have different perspectives based on their primary area of responsibility.

Read More →

Commentary, Cybersecurity, Medical Devices, Vulnerabilities

Using EPSS and CVSS to prioritize Medical Device Vulnerability Management

Utilizing the CVSS and EPSS scoring systems together to prioritize medical device vulnerabilities.

Read More →

Commentary, Cybersecurity, Medical Devices

October 9, 2024

Understanding the EPSS System for Scoring Cybersecurity Vulnerabilities and Its Pitfalls for Medical Devices

What is the EPSS scoring system and how can it be used to help prioritize medical device vulnerabilities in your vulnerability management process.

Read More →

Commentary, Cybersecurity, Medical Devices, Vulnerabilities

October 7, 2024

Understanding the Basics of the CVSS System and Its Challenges in Medical Device Vulnerability Scoring

The CVSS system is a common and widely accepted method to score vulnerability severity but… It has its challenges when it comes to medical devices.

Read More →

Commentary, Cybersecurity, Medical Devices

September 3, 2024

CrowdStrike Outage – Resources for Healthcare

Resources for the recent CrowdStrike outage – tailored to healthcare.

Read More →

Commentary, Medical Devices

July 21, 2024

CrowdStrike Outage in Canadian Healthcare

Impacts of the CrowdStrike outage in Canadian healthcare and how to use it to get your department ready for future responses.

Read More →

Coming Soon, Commentary, Cybersecurity, Medical Devices, Reading Material

July 4, 2024

STATE OF SECURITY REPORT

The challenge facing Biomedical Engineering departments and the complexity of medical device cybersecurity and vulnerability management.

Read More →

Commentary, Cybersecurity, Governance, Medical Devices

November 13, 2024

Canadian Regulatory and Legal Resources

Online resources to help understand the legal and regulatory framework within Canada as it relates to cybersecurity. Some resources specific to healthcare are also included.

Read More →

Commentary, Cybersecurity

March 27, 2024

Ransomware in the Canadian marketplace

A report from Telus cybersecurity that looks at ransomware in the Canadian marketplace with some insights into healthcare as well.

Read More →

Commentary, Cybersecurity, Medical Devices

March 27, 2024

ECRI lists ransomware as a health technology hazard

In their annual listing of top health technology hazards ECRI has listed ransomware as #6. Cybersecurity-related hazards have routinely made onto ECRI’s hazard list for the better part of a decade now.

Read More →

Commentary, Cybersecurity

March 27, 2024

Digital Health Laws and Regulations

I would love to see the Federal government enact some legislation for the Provinces to follow around minimum standards for cybersecurity – above just ensuring data privacy. The jurisdictional issues aside –

Read More →

Commentary, Cybersecurity

March 27, 2024

NIST releases CSF 2.0

NIST’s updated CSF aims to help organizations of all sizes improve their cyber-posture. Providing new documentation and resources and adding some additional focus on governance and supply chains.

Read More →