A draft of a new revision of the NIST Framework for Improving Critical Infrastructure Cybersecurity has been circulated for comment.  This draft (NIST_cybersecurity_framework-v1-1) revision refines, clarifies, and enhances Version 1.0 issued in February 2014.  This is a draft for comment. See copy of draft Framework for Improving Critical Infrastructure Cybersecurity Version 1.1Read More

The National Institute of Science of Technology issued Version 1 of its framework for improving cybersecurity for critical infrastructure including health care. The full press release is at the link provided.Read More

The U.S. National Institute of Standards and Technology issued a document entitled “Framework for Improving Critical Infrastructure Cybersecurity” dated February 12, 2014.   This document is now being used by FDA as a reference in its cybersecurity program.  You can download version 1.0 here: Framework for Improving Critical Infrastructure Cybersecurity Version 1.0 See our later post...Read More

A number of draft standards were released for comment, including including several related to specific security for medical devices and Health IT: AAMI TIR38 – AAMI Medical device safety assurance case guidance IEC Health SW Standards Framework ISO 27799 Health informatics “Information management in health using ISO/IEC 27002” IEC TR 80001-2-8, Application of risk management...Read More

http://www.nist.gov/cyberframework/.Read More

NIST received comments on the Preliminary Cybersecurity Framework for improving critical infrastructure cybersecurity and is updating the framework. They have announced that the final version (Version 1.0) will be released on February 13. When it is released, the Final Framework will be posted at NIST.Read More

http://www.nist.gov/itl/upload/preliminary-cybersecurity-framework.pdfRead More

NIST was directed to prepare a cybersecurity framework for critical infrastructure in Presidential Executive Order 13636. Healthcare was identified as one of the areas with critical infrastructure. This draft for comment is only an outline of the framework. NIST_draft_outline_cybersecurity_frameworkRead More

http://www.itl.nist.gov/div898/strd/Read More

http://hissa.nist.gov/effProject/handbook/c++/Read More

“Lessons from 342 Medical Device Failures” by Dolores R. Wallace and D. Richard Kuhn of NIST examines software related recalls for medical devices and their possible causes and preventive measures. IEEE-NIH_CBMS_Safety_Model-13Read More