Critical InfrastructureGuideline

SMDDS

OWASP Secure Medical Devices Deployment Standard

The OWASP Secure Medical Devices Deployment Standard provides guidance for the secure deployment of medical devices within healthcare environments, addressing the rising threats such as botnets and malware targeting IoT devices. It emphasizes security measures across device purchasing, network security, interface controls, and incident handling.

Overview

This standard highlights the critical importance of incorporating security measures in the deployment of medical devices, which have traditionally focused solely on patient safety while often neglecting cybersecurity risks. Given the growing risk posed by botnets, malware, and other threats to IoT devices, the standard prescribes actionable controls across areas like procurement processes, perimeter and network security, device-specific measures, and interface and central station configurations. It also advises regular security testing and robust incident response mechanisms to maintain operational integrity in healthcare facilities.

Related in Critical Infrastructure

Critical InfrastructureRegulation

EASA Part-IS β€” European Union Aviation Safety Agency (EASA) - Part IS - Easy Access Rules for Information Security

The EASA Part-IS Regulation mandates information security measures within the aviation sector to address digital threats that impact safety. It provides a framework for managing risks, responding to incidents, and safeguarding aviation systems.

European Union β€’ EU β€’ vDecember 2025

View details
Critical InfrastructureRegulation

DORA β€” Regulation (EU) 2022/2554 - Digital Operational Resilience Act

Regulation (EU) 2022/2554, known as DORA, establishes a unified framework for digital operational resilience in the European Union's financial sector. It aims to ensure financial entities can withstand, recover, and adapt to ICT-related disruptions while safeguarding the stability and integrity of the financial system.

European Parliament and Council of the European Union β€’ European Union

View details
Critical InfrastructureLaw

SOCIA 2018 β€” Security of Critical Infrastructure Act 2018

The Security of Critical Infrastructure Act 2018 (SOCIA) establishes a regulatory framework for managing national security risks to Australia’s critical infrastructure sectors. It introduces statutory obligations, reporting requirements, and oversight mechanisms for critical assets.

Australian Department of Home Affairs β€’ Australia β€’ vNo. 29, 2018

View details
Critical InfrastructureLaw

Clean Energy Act 2011

The Clean Energy Act 2011 establishes the framework for implementing a carbon pricing mechanism in Australia. It includes provisions for covered entities, emission obligations, and limits on emissions units.

Parliament of Australia β€’ Australia

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks β€” automatically.

Book your strategy call