Workshop Insights: Navigating Cybersecurity Regulations for Device Manufacturers and Healthcare Operators

Both the manufacture and use of medical devices are heavily regulated, but stakeholders have a varying level of maturity, and often struggle to comply with rules and regulations. This paper reports on an empirical elicitation activity that sought to enumerate the challenges faced by (particularly smaller) device manufacturers and device operators (typically hospitals), with a goal to informing the creation of tools that these stakeholders can use to address the challenges. The stakeholders completed a brief survey, and then participated in two focus group sessions delving into perceived challenges. The results confirm a need for increased collaboration between manufactur-ers and operators, and improved guidance material to ease complying with relevant regulations