Cloud 101CircleEventsBlog

Download Publication

CSA Medical Device Incident Response Playbook
CSA Medical Device Incident Response Playbook

CSA Medical Device Incident Response Playbook

Release Date: 11/08/2021

Working Group: Internet of Things

This document presents a best-practices medical device incident response playbook that incorporates clinical aspects of medical device IR. As such, this guidance should be reviewed and adapted by clinical leadership to ensure it is acceptable from a patient care standpoint. This document should be viewed as a starting point for medical device incident response and not a prescriptive end goal.


Key Takeaways:

  • Example use cases to aid understanding of the role clinical considerations will play in the context of incident response
  • Process for responding to incidents with medical devices including how to prepare, detect/analyze the threat, eradicate the threat, conduct a post-incident analysis, and revise the process

Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
IoT Controls Matrix v3
IoT Controls Matrix v3
Guide to the IoT Controls Matrix v3
Guide to the IoT Controls Matrix v3
Cybersecurity Best Practices for the Manufacturing Industry
Cybersecurity Best Practices for the Manufactur...
Defining 12 CSA Research Topics
Defining 12 CSA Research Topics
Published: 02/09/2024
2024 Security Predictions
2024 Security Predictions
Published: 01/12/2024
A Seven Step Approach to IoT Security
A Seven Step Approach to IoT Security
Published: 12/05/2023
IoT Security and the Infinite Game
IoT Security and the Infinite Game
Published: 09/19/2023

Acknowledgements

Michael Roza
Michael Roza
Head of Risk, Audit, Control and Compliance

Michael Roza

Head of Risk, Audit, Control and Compliance

Since 2012 Michael has contributed to over 100 CSA projects completed by CSA's Internet of Things, Zero Trust/Software-Defined Perimeter, Top Threats, Cloud Control Matrix, Containers/Microservices, DevSecOps, and other working groups. He has also served as co-chair of CSA's Enterprise Architecture, Top Threats, and Security-as-a-Service working groups while also serving as the Standards Liaison Officer for IoT, ICS, EA, SECaaS, and Cloud K...

Read more

Hillary Baron
Hillary Baron
Senior Technical Director - Research, CSA

Hillary Baron

Senior Technical Director - Research, CSA

This person does not have a biography listed with CSA.

Ashish Vashishtha
Ashish Vashishtha
Security Compliance Leader

Ashish Vashishtha

Security Compliance Leader

Analytical, results-oriented IS/IT Audit, Governance, Risk, and Compliance (GRC) leader over 19 years of experience managing enterprise-wide IT/IS security risk approach for large healthcare and IT services organizations. Passionate design thinker with an ability to harness innovation by facilitating collaboration to develop enterprise-wide security risk assessments (onsite as well as remote) for high-risk Third-Parties leveraging NIST 800-...

Read more

Brian Russell
Brian Russell

Brian Russell

Brian Russell is co-author of the book “Practical Internet of Things Security” and is a Chief Engineer focused on Cyber Security Solutions for Leidos (www.leidos.com). He oversees the design and development of security solutions and the implementation of privacy and trust controls for customers. Brian leads efforts that include security engineering for Unmanned Aerial Systems (UAS) and Connected Cars, and the development of hig...

Read more

​Aaron Guzman
​Aaron Guzman

​Aaron Guzman

Aaron is a passionate information security professional specializing in IoT, embedded, and automotive security. He is co-author of the “IoT Penetration Testing Cookbook” and a technical editor for the "Practical Internet of Things Security” Packt Publishing books. Aaron is co-chair of CSA’s IoT working group as well as a leader for OWASP’s IoT and Embedded Application Security projects; providing practical guidance to address the most commo...

Read more

Christopher Frenz
Christopher Frenz

Christopher Frenz

Christopher Frenz is the AVP of IT Security for Mount Sinai South Nassau. Christopher is widely regarded as being one of the first healthcare security leaders to embrace a zero-trust model for network security and for taking an evidence-based approach to solving security challenges. Christopher has also played a role in pushing for the adoption of improved security standards within healthcare, led the development of the OWASP ...

Read more

Dr. Saif Abed Headshot Missing
Dr. Saif Abed

Dr. Saif Abed

This person does not have a biography listed with CSA.

Andrew Donarumo Headshot Missing
Andrew Donarumo

Andrew Donarumo

This person does not have a biography listed with CSA.

Perry Lee Headshot Missing
Perry Lee

Perry Lee

This person does not have a biography listed with CSA.

Anuj Malkapuram
Anuj Malkapuram

Anuj Malkapuram

This person does not have a biography listed with CSA.

Marie Moe Headshot Missing
Marie Moe

Marie Moe

This person does not have a biography listed with CSA.

Omar Minawi Headshot Missing
Omar Minawi

Omar Minawi

This person does not have a biography listed with CSA.

Florin Petrutiu Headshot Missing
Florin Petrutiu

Florin Petrutiu

This person does not have a biography listed with CSA.

Eric Salveggio Headshot Missing
Eric Salveggio

Eric Salveggio

This person does not have a biography listed with CSA.

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training