Sen. Grassley Seeks FDA Response on Cybersecurity Report
Sen. Judiciary Committee chairman Chuck Grassley (R-IA) has stepped up pressure on FDA after a recent HHS Inspector General (OIG) report said FDA should take steps to have its policies and procedures better address medical device postmarket cybersecurity risks. OIG found that FDA’s policies and procedures were insufficient for handling such events; the agency had not adequately tested its ability to respond to emergencies resulting from them and in two of 19 district offices, it had not established written standard operating procedures to address recalls of medical devices vulnerable to cyber threats.
In an 11/9 letter to commissioner Scott Gottlieb, Grassley asked for a written summary describing how the agency implemented fixes sufficient to close the OIG recommendations. Gottlieb was also asked if FDA has assessed whether foreign governments or other entities are threats to post market medical device cybersecurity. And Grassley asked for explanations on how the agency uses MDR data and whether it is being used to improve cybersecurity for medical devices.