“Software Flaws Risk Patient Safety”

… declares the table of contents for an article, subtitled Software problems are responsible for 20 recalls a month in IEEE’s Spectrum magazine December 2025 issue (the article is available without an IEEE account: https://spectrum.ieee.org/medical-device-recalls)

The article includes several summary charts about U.S. Food and Drug Administration (FDA) medical device recall data back to 2005, including a breakdown of software causes across 6 subcategories.

The largest software problem category by far – 82% – is “software design.”

There are at least two takeaways:

  1. It is not a good thing for medical device software issues to make the largest engineering professional association’s general publication.
  2. Just “slinging code” is not enough … good analysis and design is the foundation for reducing risk.

There are also at least two inferences we can make from the second observation above:

  • AI may help with originating, proofing, and testing code at a low level, but it cannot substitute (yet) for good human macro architecture and design. Cutting corners in processes other than coding has significant medical device risk implications, especially for causing future medical device software problems.
  • Cybersecurity is as much a software analysis and design effort as it is a software coding effort. The more cybersecurity risk that a device has, the more attention will be needed to integrate and initiate cybersecurity work across the entire software process, including operation in the market. This is also a regulatory expectation and another source for future medical device software problems.

Additional information about FDA recalls and causes can be found at:

If you need tailored assistance for your specific situation, contact us at https://www.softwarecpr.com/leave-a-message/

About the author

Mike Russell helps organizations succeed without compromising speed, quality, or regulatory compliance. His 40+ years of leadership and advisory experience ranges from startups to Fortune 20 companies and national governments. He expertise includes product and software development, cybersecurity, AI, and leadership. Mike served on the AAMI group that created TIR45, Guidance on the use of Agile practices in the development of medical device software. He is also an AAMI expert faculty member for software validation (product and non-product) and agile. For SoftwareCPR, he co-created and delivers training on compliant agile and medical device cybersecurity. As an executive, Mike led organizations of up to 1,100 people with over $100 million budgets.

Upcoming Public Courses

No public courses are planned at this time.

If you would like to discuss a private, onsite course, please fill out the form below.

Or just email training@softwarecpr.com for more info.

Corporate Office

15148 Springview St.
Tampa, FL 33624
USA
+1-781-721-2921
Partners located in the US (CA, FL, MA, MN, TX) and Canada.