All MedTech Terms
513 sourced definitions covering the regulatory, quality, software, and cybersecurity vocabulary of modern medical devices.
Showing 1–24 of 61
AAMI SW96
AAMI/ANSI standard establishing requirements for medical-device cybersecurity activities throughout the lifecycle.
AAMI TIR57
AAMI Technical Information Report providing MedTech-specific guidance on cybersecurity risk management.
AAMI TIR97(TIR97)
AAMI Technical Information Report on post-market security risk management for medical device manufacturers, the operational companion to TIR57.
Brainjacking
Unauthorized remote control of an implanted neurostimulator (e.g., DBS) to alter stimulation parameters and harm a patient.
CISA Known Exploited Vulnerabilities Catalog(KEV)
CISA catalog of vulnerabilities exploited in the wild, with risk-prioritization requirements for covered federal systems.
Code Signing
Digital signatures used to verify software or firmware integrity and signer authorization.
Common Vulnerabilities and Exposures(CVE)
A globally unique identifier for a publicly disclosed cybersecurity vulnerability.
Common Vulnerability Scoring System(CVSS)
An industry-standard 0–10 score that quantifies the severity of a software vulnerability.
Common Weakness Enumeration(CWE)
Community-maintained list of software and hardware weakness types, the underlying defects that cause CVEs.
Coordinated Vulnerability Disclosure(CVD)
A documented process for receiving, triaging, and responsibly disclosing security vulnerabilities reported by external researchers.
Cryptographic Agility
The designed-in ability to replace cryptographic primitives over a device's supported lifetime.
CycloneDX
A lightweight, OWASP-maintained SBOM format designed for application security and supply-chain use cases.
De-Identification of Health Data
The HIPAA-defined process of removing identifiers from PHI so the resulting data is no longer subject to the Privacy Rule.
FedRAMP(FedRAMP)
U.S. government-wide program that standardizes security assessment, authorization, and continuous monitoring for cloud services sold to federal agencies.
Hardcoded Credentials
Secrets - passwords, API keys, certificates - embedded in firmware or source code shipped on every device.
Hardware Root of Trust(HRoT)
Hardware-enforced trust anchor for selected security functions, subject to implementation and threat assumptions.
Health Industry Cybersecurity Practices(HICP)
Voluntary HHS healthcare cybersecurity practices that can support recognized-security-practices evidence in HIPAA enforcement.
Health Information Sharing and Analysis Center(H-ISAC)
Member-driven nonprofit that operates the trusted sharing community for cyber and physical threat intelligence across the healthcare sector.
Healthcare and Public Health Cybersecurity Performance Goals(HPH-CPG)
HHS's sector-specific list of essential and enhanced cybersecurity goals for healthcare, derived from HICP and the NIST CSF.
HIPAA(HIPAA)
U.S. federal law governing the privacy and security of protected health information.
HITECH Act(HITECH)
U.S. law that strengthened HIPAA enforcement and introduced breach-notification requirements.
HITRUST CSF(HITRUST)
Healthcare-focused certifiable security framework that consolidates HIPAA, NIST, ISO 27001, and other authorities into a unified control set.
HSCC Joint Security Plan(HSCC JSP)
An industry-developed reference framework from the Healthcare Sector Coordinating Council for end-to-end MedTech cybersecurity.
ICS Medical Advisory(ICSMA)
CISA's official vulnerability advisories for medical devices, the public record of disclosed device cybersecurity issues, indexed as ICSMA-YY-DDD-NN.