[KIMES 2023] ‘Medical devices require cyber security to get approval in US, EU’ < Device/ICT < Article

&#13
&#13

“Cyber security readiness is no longer an option but is now mandated by medical device regulatory bodies driven by the U.S., E.U., and the IMDRF (International Medical Device Regulators Forum).”

&#13
&#13

[KIMES 2023] ‘Medical devices require cyber security to get approval in US, EU’ < Device/ICT < Article&#13
TUV Rheinland’s Asia Pacific (APAC) head of Cyber Security services, Shotaro Kaida, spoke  to Korea Biomedical Review about the need for cyber security in medical devices .
&#13

&#13
&#13

So said a cyber security expert in an interview with Korea Biomedical Review on the side-lines of KIMES 2023.

&#13
&#13

As Korea boasts advanced technologies and connected health systems within its tertiary care system, medical devices are susceptible to cyber-attacks.

&#13
&#13

TUV Rheinland’s Asia Pacific (APAC) head of Cyber Security services, Shotaro Kaida, spoke about cyber security in medical devices.

&#13
&#13

TUV Rheinland is headquartered in Germany with offices globally and in Asia like Japan and Korea. They are a third-party testing provider performing testing, inspection, and certification services.

&#13
&#13

Medical device vulnerabilities

&#13
&#13

Stressing the importance of medical devices, he highlighted the impacts of cyber threats in the medical field, such as leaked patient information which can indirectly interfere with life-saving equipment like extracorporeal membrane oxygenation (ECMO), even if for just 10 minutes.

&#13
&#13

“Cybersecurity impact depends on the characteristics, function, and usage of the device. It can have a big impact on some equipment and less on others so you need to pay attention to the device you are developing and consider the impact it can have if cyber security is breached,” explained Kaida.

&#13
&#13

He drew specific attention to the long-life span of medical devices which often cannot be updated to the latest software or operating system which can also create vulnerabilities in systems.

&#13
&#13

Most medical devices now use some sort of software system, database, application programming language, or external communication systems which function as communication windows but can also become intrusion points for malicious attacks, he went on to say.

&#13
&#13

For this reason, he underscored the importance of management should be considered from the moment of developing a medical device.

&#13
&#13

He noted the overlapping requirements between the FDA, Medical Device Regulations (MDR), and the IMDRF. Accordingly, all three cyber security requirements from the aforementioned regulatory bodies generally comprise static and dynamic code analysis, vulnerability scanning, robustness testing, security feature testing, and penetration testing.

&#13
&#13

Domestic and foreign medical device cyber security requirements

&#13
&#13

Specifically, he mentioned that the FDA has led the way as they were the first to publish pre- and post-market submission guidance documents in 2014 and 2016 and recently published an updated draft of pre-market cyber security requirements in 2022.

&#13
&#13

Meanwhile, the MDR and IMDRF followed suit, and both published their pre- and post-market cyber security requirements in 2019 and 2022 respectively.

&#13
&#13

In this regard, Korea’s Ministry of Food Drug and Safety (MFDS) also published updated cyber security approval guidelines for medical devices in January last year about strengthening policies for cyber security in terms of clarifying cyber security application targets and standardizing requirements. As a result, it now reflects the IMDRF medical device cyber security standards.

&#13
&#13

The cyber security guidelines originally pertained to medical devices that send and receive personal medical information such as patient biometric information using wired and wireless communication, control devices, and software but were expanded to medical devices that have a communication path among medical devices including software.

&#13
&#13

Additionally, requirements that previously differed based on the device’s cyber security safety rating are now evaluated based on the degree of harm it can cause, the medical device communication method, and the specific application and environment of use.

&#13
&#13

He also stated that Japan will implement the IMDRF medical device cyber security guidelines starting next month.

&#13
&#13

Boosting cyber security

&#13
&#13

However, he pointed out that cyber security requirements for medical devices should be considered from the R&D stage to develop a secure medical device. Still, many manufacturers often struggle with cyber security readiness as they just build the device to be functional.

&#13
&#13

He recommended assessing the device against the confidentiality, integrity, and availability (CIA) principles to uncover any vulnerabilities in medical devices.

&#13
&#13

For example, confidentiality refers to data that should not be disclosed to unauthorized persons or used for unauthorized persons while integrity is related to the device’s data which should not be converted or destroyed in an unauthorized manner. Meanwhile, availability means the data must be immediately available to authorized users in the form necessary and when necessary.

&#13
&#13

“This should be followed by a risk level score according to the Common Vulnerability Scoring System Version (CVSS) 3.0 and risk management assessment in accordance with the ISO 14971 standard which previously only spoke to the safety of the device but now also includes cyber security,” he explained.

FDA to require diversity plan for clinical trials

FDA to require diversity plan for clinical trials

The US Food stuff and Drug Administration regulates goods this kind of as vaccines and around-the-counter medications.Credit history: Pavlo Gonchar/SOPA Pictures/LightRocket via Getty

The US Food and Drug Administration (Food and drug administration) will quickly have to have scientists and firms in search of approval for late-stage medical trials to submit a system for ensuring range between demo members.

Lots of researchers have applauded the shift, which was laid out in a paying bill signed into regulation by US President Joe Biden in December 2022. They say that broadening participant pools is important to make medications extra helpful across the complete population. But they are not yet certain that the Fda will adequately implement the new prerequisite.

Nevertheless, “this is the greatest transform in the regulatory landscape for clinical-demo range in the very last three decades”, suggests Thomas Hwang, a physician at the Dana-Farber Most cancers Institute in Boston, Massachusetts, who has knowledge in pharmaceutical regulation1.

Stalled attempts

The diversity prerequisite arrives in the wake of a 2022 report from the US National Academies of Sciences, Engineering and Drugs, which located that, even though the representation of white females in medical trials has improved, development has “largely stalled” for minority racial and ethnic groups. Older older people, expecting men and women and men and women with disabilities keep on being severely below-represented — and, in some circumstances, excluded — from US scientific investigate, the report uncovered. For case in point, a modern assessment of new most cancers therapeutics authorised by the Fda between 2012 and 2017 located that 79{bf0515afdcaddba073662ceb89fbb62b6b1bf123143c0e06b788e1946e8c353f} of the scientific trials that were being made use of to assist the FDA’s choices adequately represented girls — but only 27{bf0515afdcaddba073662ceb89fbb62b6b1bf123143c0e06b788e1946e8c353f} adequately represented more mature adults, and only 11{bf0515afdcaddba073662ceb89fbb62b6b1bf123143c0e06b788e1946e8c353f} fulfilled the bar for minority racial and ethnic teams2. (In this scenario, ‘adequately represented’ indicates that the proportion of, say, women of all ages enrolled in a most cancers trial around matches the proportion of females in the United States who have that type of cancer.)

When the make-up of a pool of members does not reflect the population that could reward from a particular drug, it suggests that the scientific-investigate conclusions will not be applicable for anyone, says Marian Knight, a perinatal epidemiologist at the College of Oxford, Uk. It also undermines trust in the health-related institution, she provides.

For the duration of the early stages of the COVID-19 pandemic, for illustration, some expecting men and women were unwilling to get vaccinated simply because quite a few of the trials that analyzed the jabs did not consist of participants who have been expecting, she claims. There ended up getting a disproportionate selection of COVID-19-connected deaths in expecting individuals as opposed with the rest of the population, most likely as end result of vaccine hesitancy, says Knight, who co-authored a 6 February evaluation3 in The BMJ urging scientists to include things like more pregnant people in medical trials.

To comply with the diversity need, scientists and pharmaceutical firms will require to record their demographic targets for the participant pool, their rationale for the plans and an explanation of how they intend to fulfill them. This approach appears promising, says Jennifer Miller, a bioethicist at Yale University of Medicine in New Haven, Connecticut, and a co-writer of the most cancers-therapeutics analysis. “This is the 1st time we’re likely to have organizations proactively approach enrolment targets and submit them to regulators.”

Issues forward

Just before the necessity can take outcome, nonetheless, the Fda will have to initial finalize its draft guidance, and then provide the community an prospect to remark. These methods could get more than two a long time.

Aside from the time right until implementation, researchers are concerned about a provision in the December investing bill that makes it possible for the Fda to waive the have to have for a diversity-action approach in specified situations for example, in the course of community-overall health emergencies, or if a condition or condition is not deemed commonplace in the typical populace. This broad waiver authority requires the teeth out of the legislation, Hwang says.

Scientists say it’s unclear how strictly the Fda will implement the requirement, and what possibilities it has if a researcher fails to abide by by on their motion plan. “Monitoring and enforcing rules has been a problem for the Food and drug administration in the previous,” suggests Miller.

Charles Kohler, a spokesperson for the Fda, claims that the agency is fully commited to making certain that demo participants mirror the populations that are most likely to use the merchandise, and that it is at the moment examining the powers that it was granted by the December laws.

At the time the Fda implements its variety prerequisite, it will be up to firms and researchers to recruit folks to acquire aspect in their trials. To reach their objectives, they will have to concentration on the structural issues that underlie the lack of range in medical-trial populations, Miller says. For instance, they’ll have to have to think about relocating exploration internet sites to areas that are far more available for associates of underneath-represented groups, and should really try out to create have faith in in neighborhood communities designed cautious by earlier occasions of exploitative health care study.

By by itself, the legislation will not be ample to tackle extensive-standing disparities in clinical-trial enrolment, Hwang says. But Knight says: “It’s amazing the Fda is having the technique.” It could even encourage nations around the world such as the United Kingdom to introduce related needs, she adds. “Having these kinds of levers is the way to make scientists feel about range.”

Beyond barbells: Seniors require more to improve overall health

Some seniors run marathons. Others have difficulty getting up from their chairs. Most possess a level of physical fitness that falls somewhere between these two extremes.

“Medicare Advantage plans need to realize that a one-size-fits-all fitness solution no longer works. The needs of a generation that is in their eighties are so different from those aging into Medicare,” said Vince Pozinski, Head of Government Product, Optum Health Solutions. “When the 75- to 85-year-olds were younger, the YMCA is where they were able to work out and use the pool. It was also where they had their social connections. So, they still want to use these facilities, but there is a new generation of Medicare members who want more options.”

Seniors in their 60s have started working out at small boutique studios that offer yoga, cycling, Pilates or other specialized classes. And individuals suffering with certain diseases such as Parkinson’s or multiple sclerosis require programs that address their unique needs.

Some seniors simply don’t want to visit a gym or take an exercise class. Providing other activities such as community-based walking or pickleball clubs could help these members stay active.

In addition, health plans can make it convenient for seniors to exercise by offering home strength, yoga and dance kits that that include equipment and instructional materials.

Going digital
Online options are increasingly becoming the preferred choice for many members. “Mobile apps and live streaming classes speak to many of the members who are just now aging into Medicare Advantage plans,” Pozinski said.

The COVID-19 pandemic also contributed to the increased demand for digital content. During COVID, people grew accustomed to connecting with others virtually. For example, many older adults connected with their grandchildren online – and want to continue to enjoy virtual activities with them.

“It’s important for plans to offer content that enables members to share experiences with others. Creating that meaningful family impact is one of the things that plans can do to differentiate themselves from others,” he said.

Just as with in-person programs, health plans should offer a variety of digital programs to meet seniors’ differing needs. For example, Optum offers more than 35,000 pieces of digital content that not only addresses the needs of different groups of seniors, but of people of all ages.

Food matters
Health maintenance doesn’t start and stop on the exercise mat. Healthy eating is also important. “Nutrition is part of the equation. Health plans need to bring it into the conversation as they look more holistically at what they offer to members,” said Brett Hanson, Head of Market and Product Development, Optum Health Solutions.

To help seniors improve their nutrition, health plans could offer education related to healthy eating. “Members might just be looking to improve their overall wellness, or they might have a certain condition like cancer or diabetes that requires a specific diet. Having knowledge about the right meals and the right nutrition can help,” he explained.

Health plans can even help bring healthy food to the table. Optum’s One Pass, for example, offers free delivery of dietitian-designed meals, which are prepared with high-quality ingredients and tailored to support nutrition for common health conditions and dietary preferences. The program also offers free grocery delivery from various stores.

All about choice
Ultimately, health plans can keep seniors on track by providing an array of choices. “Members don’t necessarily want to go to the same gym, do the same activity or watch the same digital content each and every day,” Hanson concluded. “One day they may want to do a 10-minute digital yoga class, and the next, they might want to do an intense in-person strength or cardio class. In addition, to develop our fitness benefits, we try to look at what the topline holistic needs of the population are – not just at their levels of mobility and physical activity.”

Health plans should offer many different activities and services to better accommodate every member’s unique needs and situations. Considering the varying needs of different generations who may be participating in a Medicare Advantage plan, health plans with the flexibility to offer both online and in-person education, fitness experiences and opportunities for social connection will be better poised to succeed.