MDIC Cybersecurity Maturity Benchmark Report

Share

The Medical Device Innovation Consortium (MDIC) has published its first industry benchmark report assessing the cybersecurity maturity of the medical technology industry. The report was prepared by Booz Allen under a 4/2021 contract with MDIC. It ranks survey responses from medical device manufacturers on the Healthcare Sector Coordinating Councils’ Joint Security Plan.

Some 17 medical device manufacturers self-reported their cybersecurity practices in response to 44 questions in four categories (organizational structure, risk management, design control, and complaint handling). Responses were scored on a scale ranging from 0 (not initiated) to 5 (optimized).

The report says the average composite score was 1.51 (between initiated and managed), with 35% of manufacturers falling in the range of 1.5 to 1.99 and 24% scoring above that range.

“Overall,” MDIC and Booz Allen say, “medical device manufacturers reported the highest level of maturity in terms of organizational structure and the lowest level of maturity in terms of design control. We look forward to seeing trends improve in all categories in future benchmarks.”

Read more