SBOMs and medical devices: An essential step — but no security cureall

The U.S. Federal Government has been hard at work releasing a plethora of guidelines — and mandates — concerning software supply chain security. The initiatives have been aimed at government institutions, their contractors, and those responsible for critical infrastructure. Now, securing the health care system’s software supply chain is front and center.

In September 2023, the Food and Drug Administration (FDA) issued their final version of “Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions …

care contractors critical critical infrastructure devices federal federal government government guidelines hard health health care infrastructure initiatives institutions medical medical devices responsible sboms security software software supply chain software supply chain security supply supply chain supply chain security system work