Medical device manufacturers must implement cyber security in the design of their products and submit a plan to the FDA for every new product application. This requirement, set by the Food and Drug Omnibus Reform Act of 2022, includes developing a risk-based vulnerability management system and following steps to avoid cyber attacks and data breaches. The grace period for compliance ends on October 1, 2023. Failure to adhere can lead to legal action under the Federal Food, Drug, and Cosmetic Act.

News – Masimo reports cyber incident affecting production sites – teiss
Masimo has reported a cyber incident that has impacted its production sites. The company is currently assessing the situation to understand the extent of the