Cybersecurity is one of the most critical issues impacting the healthcare industry. At BD, we maintain an unwavering commitment to security by design, in use and through partnership. We strive to ensure our products, systems and customer environments maintain high security standards so our customers can focus on what matters most: caring for patients.
While we maintain robust security protocols, we also recognize that new security threats emerge daily, from attempts to compromise healthcare data to coordinated efforts to disrupt clinical workflows or manufacturing. We recognize that our customers cannot protect what they don’t know. That’s why we believe transparency and collaboration are essential. As we build a strong community of practice, working closely with our customers, industry regulators and security researchers, we’re improving cybersecurity and resilience across the industry.
— Rob Suárez, Vice President and Chief Information Security Officer
BD products and systems are designed to be secure and are developed using industry-leading cybersecurity standards, including those from ISO and NIST.
BD utilizes a framework to incorporate cybersecurity into our processes for product design, manufacturing, customer support and enterprise systems. Our framework has been aligned to various industry work products including the Healthcare & Public Health Sector Coordinating Councils (HSCC) Medical Device and Health IT Joint Security Plan, the National Institute of Standards and Technology (NIST) Cybersecurity Framework, the International Organization for Standardization (ISO) 27001 standards, Underwriters Laboratories (UL) 2900 Standard for Software Cybersecurity for Network-Connectable Products and the International Society of Automation (ISA) 62443.
BD became the first medical technology company authorized as a Common Vulnerability and Exposures (CVE®) Numbering Authority.
The IMDRF published Principles and Practices for Medical Device Cybersecurity.
BD received UL CAP certification for BD Synapsys™ Microbiology Informatics.
The HSCC published the Medical Device and Health IT Joint Security Plan (JSP).
BD CISO Rob Suárez co-chaired the HSCC Med Tech Cybersecurity Risk Management Task Group.
BD made product security templates available via the BD Cybersecurity Trust Center.
BD received UL CAP certification for the BD FACSLyric™ flow cytometer.
BD established a Product Security Partnership program.
The FDA published Postmarket Management of Cybersecurity in Medical Devices.
The FDA published Content of Premarket Submissions for Management of Cybersecurity in Medical Devices.
The Advanced Medical Technology Association advocates globally for the highest ethical standards and patient access to safe, effective and innovative medical technologies.
The Association of Information Security Professionals, based in Singapore, is committed to promoting the development, increase and spread of cybersecurity knowledge.
The Cybersecurity Coalition for Asia Pacific is dedicated to improving the policy landscape for cybersecurity in Asia.
BD is authorized as a Common Vulnerability and Exposures (CVE) Numbering Authority by the CVE Program.
The Domestic Security Alliance Council is a strategic alliance that includes the U.S. Federal Bureau of Investigation (FBI), Department of Homeland Security and private industry networking together.
For maximum reach, BD shares coordinated vulnerability disclosures with the Health Information Sharing and Analysis Center.
BD participates in multiple Healthcare and Public Health Sector Coordinating Council (HSCC) Cybersecurity Working Group Task Groups.
BD participates in the International Medical Device Regulators Forum with the shared goal of harmonizing medical device cybersecurity around the world.
The Medical Device Innovation Consortium works with government and industry stakeholders to advance solutions that promote patient access to innovative medical technologies.
BD participates in the MedTech Europe Cybersecurity Working Group, which brings cybersecurity experts together to engage with European institutions, including the European Union Agency for Cybersecurity (ENISA).
BD participates in the U.S. FBI InfraGard, a partnership between the FBI and the private sector for the purpose of protecting U.S. Critical Infrastructure.
