“Cryptography protects commands sent to medical devices, telemetry received from those devices for diagnostic purposes, medication orders, and other sensitive interactions.
This issue goes beyond healthcare to include industrial installations or anywhere OT or IoT devices handle sensitive or business-critical data.
In a Shodan search, Forescout identified more than 5,500 internet-exposed instances of medical information systems, with electronic medical record platforms accounting for 46% of those instances and PACS accounting for 40%.
For medical devices, the regulatory implications depend on the changes made to the device.
“Devices, data, and communication.”