Events & Speaking Engagements
About MedSec
005: Cybersecurity Architecture Views for Medical Devices
Description: Of the many expectations in the new FDA Premarket Cybersecurity guidance, Cybersecurity Architecture Views have been one of the more challenging deliverables for medical device manufacturers to meet. The need for multiple diagrams and the level of detail needed in each view has caught many manufacturers by surprise. This course will help manufacturers better understand how to approach the Architecture Views and develop strategies for how to make these more successful in their submissions and useful throughout the device lifecycle.
Lead Presenter - Matt Hazelett - Chief Operating Officer & Chief Quality Officer
Date: April 24, 2025 (4 hours)
Time: 1:00 PM to 5:00 PM (Eastern Time)
Location: Online
Audience: This course is for staff at medical device manufacturers who are responsible for generating or reviewing Threat Modeling and Architecture Views documentation for medical devices.
Planned Agenda:
Describe the structure of Architecture Views and their benefits to medical device manufacturers
Discuss the similarities and differences between Threat Modeling and Architecture Views
Identifying when different Views are applicable to a medical device
Understand how Architecture Views can be used throughout the Total Product Lifecycle
003: International Cybersecurity Regulations - Non-US
Description: The US FDA has been a strong driver of medical device security expectations, but they are not the only regulators outlining medical device cybersecurity expectations. This course will review the specific medical device cybersecurity requirements for countries outside of the US, including common threads amongst the countries.
Lead Presenter - Michelle Jump - Chief Executive Officer
Date: May 6, 2025 (4 hours)
Time: 1:00 PM to 5:00 PM (Eastern Time)
Location: Online
Audience: This course is for staff at medical device manufacturers who are responsible for navigating cybersecurity expectations outside the US, either to maintain marketed products or to enter into a market for the first time.
Planned Agenda:
1. Common threads across the globe
2. IMDRF: Driving harmonization in thought and policy
3. Big hitters: European Union, Japan, Australia, Canada, China
4. Other markets to consider
004: Cybersecurity Standards Review
Description: Standards are the backbone of any regulated industry. In some cases, they are mandatory, such as IEC 81001-5-1 in Japan. In other cases, they can be leveraged to develop processes that align with regulators’ thinking, such as AAMI TIR 57 in the US. Whatever the driver, standards help you build process and products faster and with a higher chance of success with regulators and customers. This course will review not only the content of key cybersecurity standards but also how to strategically use them.
Lead Presenter - Michelle Jump - Chief Executive Officer
Date: June 3, 2025 (4 hours)
Time: 9:00 AM to 1:00 PM (Eastern Time)
Location: Online
Audience: This course is for staff at medical device manufacturers who are seeking a better understanding of how to use cybersecurity standards in the medical device industry.
Planned Agenda:
How are cybersecurity standards used in the medical device industry
Medical device specific cybersecurity standards: domestic and international
General cybersecurity standards and their use
Non-standards for cybersecurity such as NIST
Useful standards from other industries such as industrial control standards
301: FDA Insider
Description: This 3-day course will give you a detailed look behind the Zoom meetings, conference rooms, deficiency letters, and additional information request emails of the FDA. This course will cover cybersecurity submission strategies, everything you need to know about deficiencies, and how to have success with FDA reviewers that you won’t find anywhere else.
Lead Presenter - Matt Hazelett - Chief Operating Officer & Chief Quality Officer
Date: June 10-12, 2025 (4 hours x 3 Days)
Time: 9:00 AM to 1:00 PM (Eastern Time) Each Day
Location: Online
Audience: This course is for medical device cybersecurity team members and regulatory affairs personnel at medical device manufacturers who are looking for insider information on the FDA cybersecurity review process.
Planned Agenda:
Submission Strategies
Effectively Managing Deficiencies
Success with Reviewers