FDA Warning Letter for Identification of Vulnerabilities in Software

Lex Inc. was issued a warning letter from the FDA for reason “of vulnerabilities in hardware and software, encompassing both networked and non-networked systems (e.g., programmable logic controller (PLC)).” More specifically, “a list of all software configurations (both equipment software and laboratory information management system (LIMS)) and versions, details of all user privileges, and oversight responsibilities for each of your laboratory systems. Regarding user privileges, specify user roles and associated user privileges (including the specific permissions allowed for anyone who has administrative rights) for all staff who have access to the laboratory computer systems, their organizational affiliation, and title. Also describe how you will ensure laboratory staff are not given administrative rights, or other permissions that compromise data retention or reliability. System security provisions including, but not limited to, whether unique usernames and passwords are always used, and their confidentiality safeguarded.”

For more information, see the link below.

Lex Inc. – 656056 – 08/17/2023 | FDA

 

 

About the author

Allison joined SoftwareCPR in 2022, bringing along over ten years of passion for building teamwork and growth in organizations. This is established in part by the greatest University the South has to offer- Mississippi State.

SoftwareCPR Training Courses:

IEC 62304 and other Emerging Standards Impacting Medical Device Software

Being Agile & Yet Compliant

ISO 14971 SaMD Risk Management

Software Risk Management

Medical Device Cybersecurity

Software Verification

IEC 62366 Usability Process and Documentation

Or just email training@softwarecpr.com for more info.

Corporate Office

15148 Springview St.
Tampa, FL 33624
USA
+1-781-721-2921
Partners located in the US (CA, FL, MA, MN, TX) and Canada.