Government Accountability Office urges CISA, FDA to update agreement on coordinating medical device cybersecurity

The Cybersecurity and Infrastructure Security Agency should update its agreement with the Food and Drug Administration on medical device cybersecurity, according to a recent report from the Government Accountability Office.

“The Food and Drug Administration has primary responsibility for medical device cybersecurity. FDA formally collaborates with the Cybersecurity and Infrastructure Security Agency on security guidance for device manufacturers, public alerts about current vulnerabilities, and more,” GAO says in a Dec. 21 report.

GAO says, “However, the agencies' formal agreement...