FDA Updates Cybersecurity Playbook

FDA and MITRE have updated the Medical Device Cybersecurity Regional Incident Preparedness and Response Playbook, which the two organizations first published in 2018. An agency announcement says the playbook focuses on preparedness and response for medical device cybersecurity issues that affect a medical device’s functionality.

MITRE says (includes links to the Playbook and Quick Start Guide) the healthcare sector knows how to prepare for and respond to natural disasters, but is less prepared to handle cybersecurity incidents. It says that with the recent growth in ransomware attacks, increasing connectivity of medical devices, and emerging healthcare technologies, FDA asked it to update the playbook.

As part of the update, MITRE developed a Quick Start Companion Guide to orient new playbook users and help all users quickly identify the key parts of the playbook to turn to during a cyber incident.