• Summary
• Background
• Meeting Materials

Summary

On June 14, 2022, the U.S. Food and Drug Administration (FDA) hosted a webinar for stakeholders to share information and answer questions about the draft guidance: Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions.

During this webinar the FDA:

• Described the differences between 2018 and 2022 drafts
• Described the General Principles of the guidance
• Described the design and documentation recommendations
• Described the transparency and labeling recommendations

Background

As medical devices have become more interconnected, cybersecurity threats have become more numerous, more frequent, more severe, and more clinically impactful. As a result, adequate medical device cybersecurity is essential to ensuring medical device safety and effectiveness. In 2018, the FDA proposed updates to the final guidance, “Content of Premarket Submissions for Management of Cybersecurity in Medical Devices,” and issued a draft guidance of the same name. This 2022 draft guidance replaces the 2018 draft guidance. This draft guidance is intended to further emphasize the importance of ensuring that devices are designed securely, are designed to be capable of mitigating emerging cybersecurity risks throughout the Total Product Life Cycle, and to more clearly outline the FDA's recommendations for premarket submission content to address cybersecurity concerns.

Meeting Materials

The presentation, printable slides, and transcript are available at CDRH Learn under "Specialty Technical Topics", sub-section "Digital Health."