> ## Content Index
> Fetch the complete content index at: https://www.fdaweb.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Industry Task Force Wants FDA Action on Secure Lifecycle
- URL: https://www.fdaweb.com/industry-task-force-wants-fda-action-on-secure-lifecycle/
- Published: 2017-05-09T12:00:00.000Z
- Updated: 2026-09-14T22:22:40.000Z
- Author: David McFarland
- Tags: Devices, #legacy-id-D5138641

A 16-member Healthcare Industry Cybersecurity Task Force says that FDA and other government agencies should consider how they can use existing authorities to “catalyze and reinforce activities and action items” associated with a task force recommendation to “increase adoption and rigor of the secure development lifecycle in the development of medical devices and electronic health records.” The [report](https://insidecybersecurity.com/sites/insidecybersecurity.com/files/documents/may2017/cs2017%5F0156.pdf?ref=fdaweb.com) on improving cybersecurity in the healthcare industry notes the differing roles that FDA and the HHS Office of Civil Rights (OCR) play with respect to health information cybersecurity. FDA, it says, is charged with ensuring that approved and cleared medical devices are safe and efficacious, whereas OCR is charged with overseeing the privacy and security regulations under HIPAA, which apply to covered entities and business associates.

The report includes six “imperatives” with associated recommendations and action steps.