--- title: "Cybersecurity Terms - MedTech Terms" description: "Threat modeling, SBOMs, and secure-by-design for connected devices. 60 vendor-neutral definitions with primary-source citations." lang: en json-ld: | { "@context": "https://schema.org", "@graph": [ { "@type": "DefinedTermSet", "@id": "https://medtechterms.com/categories/cybersecurity#set", "name": "Cybersecurity - MedTech Terms", "description": "Threat modeling, SBOMs, and secure-by-design for connected devices.", "url": "https://medtechterms.com/categories/cybersecurity", "hasDefinedTerm": [ { "@type": "DefinedTerm", "name": "AAMI SW96", "url": "https://medtechterms.com/terms/aami-sw96", "termCode": "aami-sw96" }, { "@type": "DefinedTerm", "name": "AAMI TIR57", "url": "https://medtechterms.com/terms/aami-tir57", "termCode": "aami-tir57" }, { "@type": "DefinedTerm", "name": "AAMI TIR97", "alternateName": "TIR97", "url": "https://medtechterms.com/terms/aami-tir97", "termCode": "aami-tir97" }, { "@type": "DefinedTerm", "name": "Brainjacking", "url": "https://medtechterms.com/terms/brainjacking", "termCode": "brainjacking" }, { "@type": "DefinedTerm", "name": "CISA Known Exploited Vulnerabilities Catalog", "alternateName": "KEV", "url": "https://medtechterms.com/terms/kev", "termCode": "kev" }, { "@type": "DefinedTerm", "name": "Code Signing", "url": "https://medtechterms.com/terms/code-signing", "termCode": "code-signing" }, { "@type": "DefinedTerm", "name": "Common Vulnerabilities and Exposures", "alternateName": "CVE", "url": "https://medtechterms.com/terms/cve", "termCode": "cve" }, { "@type": "DefinedTerm", "name": "Common Vulnerability Scoring System", "alternateName": "CVSS", "url": "https://medtechterms.com/terms/cvss", "termCode": "cvss" }, { "@type": "DefinedTerm", "name": "Common Weakness Enumeration", "alternateName": "CWE", "url": "https://medtechterms.com/terms/cwe", "termCode": "cwe" }, { "@type": "DefinedTerm", "name": "Coordinated Vulnerability Disclosure", "alternateName": "CVD", "url": "https://medtechterms.com/terms/cvd", "termCode": "cvd" }, { "@type": "DefinedTerm", "name": "Cryptographic Agility", "url": "https://medtechterms.com/terms/crypto-agility", "termCode": "crypto-agility" }, { "@type": "DefinedTerm", "name": "CycloneDX", "url": "https://medtechterms.com/terms/cyclonedx", "termCode": "cyclonedx" }, { "@type": "DefinedTerm", "name": "De-Identification of Health Data", "url": "https://medtechterms.com/terms/de-identification", "termCode": "de-identification" }, { "@type": "DefinedTerm", "name": "FedRAMP", "alternateName": "FedRAMP", "url": "https://medtechterms.com/terms/fedramp", "termCode": "fedramp" }, { "@type": "DefinedTerm", "name": "Hardcoded Credentials", "url": "https://medtechterms.com/terms/hardcoded-credentials", "termCode": "hardcoded-credentials" }, { "@type": "DefinedTerm", "name": "Hardware Root of Trust", "alternateName": "HRoT", "url": "https://medtechterms.com/terms/hardware-root-of-trust", "termCode": "hardware-root-of-trust" }, { "@type": "DefinedTerm", "name": "Health Industry Cybersecurity Practices", "alternateName": "HICP", "url": "https://medtechterms.com/terms/hicp", "termCode": "hicp" }, { "@type": "DefinedTerm", "name": "Health Information Sharing and Analysis Center", "alternateName": "H-ISAC", "url": "https://medtechterms.com/terms/h-isac", "termCode": "h-isac" }, { "@type": "DefinedTerm", "name": "Healthcare and Public Health Cybersecurity Performance Goals", "alternateName": "HPH-CPG", "url": "https://medtechterms.com/terms/hph-cpg", "termCode": "hph-cpg" }, { "@type": "DefinedTerm", "name": "HIPAA", "alternateName": "HIPAA", "url": "https://medtechterms.com/terms/hipaa", "termCode": "hipaa" }, { "@type": "DefinedTerm", "name": "HITECH Act", "alternateName": "HITECH", "url": "https://medtechterms.com/terms/hitech-act", "termCode": "hitech-act" }, { "@type": "DefinedTerm", "name": "HITRUST CSF", "alternateName": "HITRUST", "url": "https://medtechterms.com/terms/hitrust", "termCode": "hitrust" }, { "@type": "DefinedTerm", "name": "HSCC Joint Security Plan", "alternateName": "HSCC JSP", "url": "https://medtechterms.com/terms/hscc-jsp", "termCode": "hscc-jsp" }, { "@type": "DefinedTerm", "name": "ICS Medical Advisory", "alternateName": "ICSMA", "url": "https://medtechterms.com/terms/ics-medical-advisory", "termCode": "ics-medical-advisory" }, { "@type": "DefinedTerm", "name": "IEC 80001-1", "url": "https://medtechterms.com/terms/iec-80001", "termCode": "iec-80001" }, { "@type": "DefinedTerm", "name": "IEC 81001-5-1", "url": "https://medtechterms.com/terms/iec-81001-5-1", "termCode": "iec-81001-5-1" }, { "@type": "DefinedTerm", "name": "IMDRF Principles and Practices for Medical Device Cybersecurity", "url": "https://medtechterms.com/terms/imdrf-cyber-principles", "termCode": "imdrf-cyber-principles" }, { "@type": "DefinedTerm", "name": "ISO/IEC 27001", "alternateName": "ISO 27001", "url": "https://medtechterms.com/terms/iso-27001", "termCode": "iso-27001" }, { "@type": "DefinedTerm", "name": "Legacy Device Cybersecurity", "url": "https://medtechterms.com/terms/legacy-device-cyber", "termCode": "legacy-device-cyber" }, { "@type": "DefinedTerm", "name": "LINDDUN", "url": "https://medtechterms.com/terms/linddun", "termCode": "linddun" }, { "@type": "DefinedTerm", "name": "Manufacturer Disclosure Statement for Medical Device Security", "alternateName": "MDS2", "url": "https://medtechterms.com/terms/mds2", "termCode": "mds2" }, { "@type": "DefinedTerm", "name": "Medhacking", "url": "https://medtechterms.com/terms/medhacking", "termCode": "medhacking" }, { "@type": "DefinedTerm", "name": "Medjacking", "url": "https://medtechterms.com/terms/medjacking", "termCode": "medjacking" }, { "@type": "DefinedTerm", "name": "MITRE ATT&CK", "alternateName": "ATT&CK", "url": "https://medtechterms.com/terms/mitre-attack", "termCode": "mitre-attack" }, { "@type": "DefinedTerm", "name": "MITRE D3FEND", "alternateName": "D3FEND", "url": "https://medtechterms.com/terms/mitre-d3fend", "termCode": "mitre-d3fend" }, { "@type": "DefinedTerm", "name": "NIST Cybersecurity Framework", "alternateName": "NIST CSF", "url": "https://medtechterms.com/terms/nist-csf", "termCode": "nist-csf" }, { "@type": "DefinedTerm", "name": "NIST IR 8473, Cybersecurity Framework Profile for HPH", "alternateName": "NIST IR 8473", "url": "https://medtechterms.com/terms/nist-cswp-35", "termCode": "nist-cswp-35" }, { "@type": "DefinedTerm", "name": "NIST SP 800-53 / 800-171", "alternateName": "NIST 800-53/171", "url": "https://medtechterms.com/terms/nist-800-53", "termCode": "nist-800-53" }, { "@type": "DefinedTerm", "name": "Over-the-Air Updates", "alternateName": "OTA", "url": "https://medtechterms.com/terms/ota-updates", "termCode": "ota-updates" }, { "@type": "DefinedTerm", "name": "OWASP IoT and Embedded Application Security", "url": "https://medtechterms.com/terms/owasp-iot", "termCode": "owasp-iot" }, { "@type": "DefinedTerm", "name": "Patchability", "url": "https://medtechterms.com/terms/patchability", "termCode": "patchability" }, { "@type": "DefinedTerm", "name": "Penetration Testing", "url": "https://medtechterms.com/terms/pen-test", "termCode": "pen-test" }, { "@type": "DefinedTerm", "name": "PHI and ePHI", "url": "https://medtechterms.com/terms/phi-ephi", "termCode": "phi-ephi" }, { "@type": "DefinedTerm", "name": "Premarket Cybersecurity Submission", "url": "https://medtechterms.com/terms/premarket-cybersecurity", "termCode": "premarket-cybersecurity" }, { "@type": "DefinedTerm", "name": "Refuse to Accept (Cybersecurity)", "alternateName": "RTA (cyber)", "url": "https://medtechterms.com/terms/rta-cyber", "termCode": "rta-cyber" }, { "@type": "DefinedTerm", "name": "SAST and DAST", "url": "https://medtechterms.com/terms/sast-dast", "termCode": "sast-dast" }, { "@type": "DefinedTerm", "name": "Section 524B of the FD&C Act", "alternateName": "524B", "url": "https://medtechterms.com/terms/section-524b", "termCode": "section-524b" }, { "@type": "DefinedTerm", "name": "Secure Boot", "url": "https://medtechterms.com/terms/secure-boot", "termCode": "secure-boot" }, { "@type": "DefinedTerm", "name": "Secure Product Development Framework", "alternateName": "SPDF", "url": "https://medtechterms.com/terms/spdf", "termCode": "spdf" }, { "@type": "DefinedTerm", "name": "Secure Software Development Framework", "alternateName": "SSDF", "url": "https://medtechterms.com/terms/ssdf", "termCode": "ssdf" }, { "@type": "DefinedTerm", "name": "Side-Channel Attack", "url": "https://medtechterms.com/terms/side-channel", "termCode": "side-channel" }, { "@type": "DefinedTerm", "name": "SOC 2", "url": "https://medtechterms.com/terms/soc-2", "termCode": "soc-2" }, { "@type": "DefinedTerm", "name": "Software Bill of Materials", "alternateName": "SBOM", "url": "https://medtechterms.com/terms/sbom", "termCode": "sbom" }, { "@type": "DefinedTerm", "name": "Software Safety Case", "url": "https://medtechterms.com/terms/software-safety-case", "termCode": "software-safety-case" }, { "@type": "DefinedTerm", "name": "SPDX", "alternateName": "SPDX", "url": "https://medtechterms.com/terms/spdx", "termCode": "spdx" }, { "@type": "DefinedTerm", "name": "STRIDE Threat Model", "alternateName": "STRIDE", "url": "https://medtechterms.com/terms/stride", "termCode": "stride" }, { "@type": "DefinedTerm", "name": "Supply-chain Levels for Software Artifacts", "alternateName": "SLSA", "url": "https://medtechterms.com/terms/slsa", "termCode": "slsa" }, { "@type": "DefinedTerm", "name": "Threat Modeling", "url": "https://medtechterms.com/terms/threat-modeling", "termCode": "threat-modeling" }, { "@type": "DefinedTerm", "name": "Vulnerability Exploitability eXchange", "alternateName": "VEX", "url": "https://medtechterms.com/terms/vex", "termCode": "vex" }, { "@type": "DefinedTerm", "name": "Zero Trust Architecture", "alternateName": "ZTA", "url": "https://medtechterms.com/terms/zero-trust", "termCode": "zero-trust" } ] }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://medtechterms.com/" }, { "@type": "ListItem", "position": 2, "name": "Categories", "item": "https://medtechterms.com/categories" }, { "@type": "ListItem", "position": 3, "name": "Cybersecurity", "item": "https://medtechterms.com/categories/cybersecurity" } ] } ] } --- [ MedTech Terms The authoritative reference ](/) Browse Learn [Latest](/latest) About [All categories](/categories)Category # Cybersecurity Threat modeling, SBOMs, and secure-by-design for connected devices. 60 terms [Filter in glossary](/terms?cat=Cybersecurity) ## Popular cybersecurity terms [ HIPAA(HIPAA) U.S. federal law governing the privacy and security of protected health information. ](/terms/hipaa)[ Section 524B of the FD&C Act(524B) The federal statute that gives FDA explicit premarket authority over cybersecurity for cyber devices. ](/terms/section-524b)[ Software Bill of Materials(SBOM) A machine-readable inventory of all software components, including open-source and third-party libraries, used to build a medical device. ](/terms/sbom) ## All Cybersecurity terms - [AAMI SW96 ](/terms/aami-sw96) - [AAMI TIR57 ](/terms/aami-tir57) - [AAMI TIR97(TIR97) ](/terms/aami-tir97) - [Brainjacking ](/terms/brainjacking) - [CISA Known Exploited Vulnerabilities Catalog(KEV) ](/terms/kev) - [Code Signing ](/terms/code-signing) - [Common Vulnerabilities and Exposures(CVE) ](/terms/cve) - [Common Vulnerability Scoring System(CVSS) ](/terms/cvss) - [Common Weakness Enumeration(CWE) ](/terms/cwe) - [Coordinated Vulnerability Disclosure(CVD) ](/terms/cvd) - [Cryptographic Agility ](/terms/crypto-agility) - [CycloneDX ](/terms/cyclonedx) - [De-Identification of Health Data ](/terms/de-identification) - [FedRAMP(FedRAMP) ](/terms/fedramp) - [Hardcoded Credentials ](/terms/hardcoded-credentials) - [Hardware Root of Trust(HRoT) ](/terms/hardware-root-of-trust) - [Health Industry Cybersecurity Practices(HICP) ](/terms/hicp) - [Health Information Sharing and Analysis Center(H-ISAC) ](/terms/h-isac) - [Healthcare and Public Health Cybersecurity Performance Goals(HPH-CPG) ](/terms/hph-cpg) - [HIPAA(HIPAA) ](/terms/hipaa) - [HITECH Act(HITECH) ](/terms/hitech-act) - [HITRUST CSF(HITRUST) ](/terms/hitrust) - [HSCC Joint Security Plan(HSCC JSP) ](/terms/hscc-jsp) - [ICS Medical Advisory(ICSMA) ](/terms/ics-medical-advisory) - [IEC 80001-1 ](/terms/iec-80001) - [IEC 81001-5-1 ](/terms/iec-81001-5-1) - [IMDRF Principles and Practices for Medical Device Cybersecurity ](/terms/imdrf-cyber-principles) - [ISO/IEC 27001(ISO 27001) ](/terms/iso-27001) - [Legacy Device Cybersecurity ](/terms/legacy-device-cyber) - [LINDDUN ](/terms/linddun) - [Manufacturer Disclosure Statement for Medical Device Security(MDS2) ](/terms/mds2) - [Medhacking ](/terms/medhacking) - [Medjacking ](/terms/medjacking) - [MITRE ATT&CK(ATT&CK) ](/terms/mitre-attack) - [MITRE D3FEND(D3FEND) ](/terms/mitre-d3fend) - [NIST Cybersecurity Framework(NIST CSF) ](/terms/nist-csf) - [NIST IR 8473, Cybersecurity Framework Profile for HPH(NIST IR 8473) ](/terms/nist-cswp-35) - [NIST SP 800-53 / 800-171(NIST 800-53/171) ](/terms/nist-800-53) - [Over-the-Air Updates(OTA) ](/terms/ota-updates) - [OWASP IoT and Embedded Application Security ](/terms/owasp-iot) - [Patchability ](/terms/patchability) - [Penetration Testing ](/terms/pen-test) - [PHI and ePHI ](/terms/phi-ephi) - [Premarket Cybersecurity Submission ](/terms/premarket-cybersecurity) - [Refuse to Accept (Cybersecurity)(RTA (cyber)) ](/terms/rta-cyber) - [SAST and DAST ](/terms/sast-dast) - [Section 524B of the FD&C Act(524B) ](/terms/section-524b) - [Secure Boot ](/terms/secure-boot) - [Secure Product Development Framework(SPDF) ](/terms/spdf) - [Secure Software Development Framework(SSDF) ](/terms/ssdf) - [Side-Channel Attack ](/terms/side-channel) - [SOC 2 ](/terms/soc-2) - [Software Bill of Materials(SBOM) ](/terms/sbom) - [Software Safety Case ](/terms/software-safety-case) - [SPDX(SPDX) ](/terms/spdx) - [STRIDE Threat Model(STRIDE) ](/terms/stride) - [Supply-chain Levels for Software Artifacts(SLSA) ](/terms/slsa) - [Threat Modeling ](/terms/threat-modeling) - [Vulnerability Exploitability eXchange(VEX) ](/terms/vex) - [Zero Trust Architecture(ZTA) ](/terms/zero-trust) ## Explore related categories [Regulatory](/categories/regulatory)[Quality & Risk](/categories/quality-and-risk)[Clinical & Trials](/categories/clinical-and-trials)[Standards](/categories/standards)[Software & AI](/categories/software-and-ai)[Manufacturing](/categories/manufacturing)[Post-Market](/categories/post-market)[Investment & Finance](/categories/investment-and-finance)[Market Segments](/categories/market-segments)[Reimbursement](/categories/reimbursement)[Commercialization](/categories/commercialization)[Industry Bodies](/categories/industry-bodies) MedTech Terms An authoritative, plain-language reference for the regulatory, quality, cybersecurity, and software terms that shape modern medical devices. Browse - [All terms](/terms) - [A–Z index](/a-z) - [Categories](/categories) - [Ecosystems](/ecosystems) - [Learning paths](/paths) - [Compare terms](/compare) - [Quiz](/quiz) Resources - [FDA Medical Devices](https://www.fda.gov/medical-devices) - [EU MDR](https://eur-lex.europa.eu/eli/reg/2017/745/oj) - [IMDRF](https://www.imdrf.org/) - [Methodology](/methodology) - [Changelog](/changelog) - [Editor: Christian Espinosa](/authors/christian-espinosa) - [About this site](/about) © 2026 MedTech Terms. Reference content for educational purposes - not regulatory advice. A community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com)