MedSec LLC
MedSec is dedicated to safeguarding medical devices and healthcare infrastructure by providing comprehensive security solutions tailored to the healthcare industry. They are a global leader in medical device cybersecurity, offering expertise in security assessments, risk management, threat modeling, and regulatory compliance. Their mission is to empower organizations to navigate the evolving landscape of cybersecurity with confidence, ensuring the resilience and integrity of medical systems.
Industries
Nr. of Employees
small (1-50)
MedSec LLC
Products
Product Security Programs
MedSec assists in establishing and integrating product security programs, including incident response, vulnerability monitoring, patch management, baseline design requirements, secure development lifecycle, and coordinated vulnerability disclosure.
Cybersecurity Risk Management
MedSec offers services to identify and manage cybersecurity risks in medical devices, including risk assessments and compliance with FDA and global premarket cybersecurity guidance.
Penetration Testing
MedSec performs vulnerability and penetration testing on medical devices and ecosystems, considering the unique regulatory and operational environments.
System Design And Architecture Review
MedSec reviews design and architecture documentation to identify potential cybersecurity weaknesses and aid in securing product designs.
Regulatory Compliance
MedSec provides consultation and strategic planning to navigate the medical device regulatory environment for cybersecurity and software issues, including global regulatory compliance and submission activities.
Training
MedSec offers customized training on various cybersecurity topics, including threat modeling, compliance updates, standards, digital health strategy, and secure design lifecycle.
Product Security Programs
MedSec assists in establishing and integrating product security programs, including incident response, vulnerability monitoring, patch management, baseline design requirements, secure development lifecycle, and coordinated vulnerability disclosure.
Cybersecurity Risk Management
MedSec offers services to identify and manage cybersecurity risks in medical devices, including risk assessments and compliance with FDA and global premarket cybersecurity guidance.
Penetration Testing
MedSec performs vulnerability and penetration testing on medical devices and ecosystems, considering the unique regulatory and operational environments.
System Design And Architecture Review
MedSec reviews design and architecture documentation to identify potential cybersecurity weaknesses and aid in securing product designs.
Regulatory Compliance
MedSec provides consultation and strategic planning to navigate the medical device regulatory environment for cybersecurity and software issues, including global regulatory compliance and submission activities.
Training
MedSec offers customized training on various cybersecurity topics, including threat modeling, compliance updates, standards, digital health strategy, and secure design lifecycle.
Services
Technical engagements to test devices and review designs, producing reports aligned with regulatory expectations.
Preparation and review of cybersecurity submission materials, mock submissions, deficiency defense, and support for global regulatory requirements.
Program development, policy and procedure templates, risk measurement and reporting, network segmentation guidance, and check-ins to support program progress.
Instructor-led courses and free webinars covering device cybersecurity fundamentals, standards, architecture views, postmarket management, and documentation for regulatory submissions.
Ongoing strategic support programs, accelerator offerings for risk management and threat modeling, and community intelligence sessions.
Technical engagements to test devices and review designs, producing reports aligned with regulatory expectations.
Preparation and review of cybersecurity submission materials, mock submissions, deficiency defense, and support for global regulatory requirements.
Program development, policy and procedure templates, risk measurement and reporting, network segmentation guidance, and check-ins to support program progress.
Instructor-led courses and free webinars covering device cybersecurity fundamentals, standards, architecture views, postmarket management, and documentation for regulatory submissions.
Ongoing strategic support programs, accelerator offerings for risk management and threat modeling, and community intelligence sessions.
Expertise Areas
- Medical device cybersecurity
- Hospital and health system device security programs
- Regulatory compliance for device cybersecurity
- Security testing and penetration testing
Key Technologies
- Penetration testing
- Threat modeling
- Security architecture views
- Vulnerability management
News & Updates
Meet Mendy Foster, the newest addition to the MedSec team as Program Manager on the Services team.
Introducing Bo Lanham, a new team member with extensive experience joining MedSec.
Celebrating the addition of Bob Haack and Émilie St-Pierre to the MedSec team.
Meet Mendy Foster, the newest addition to the MedSec team as Program Manager on the Services team.
Introducing Bo Lanham, a new team member with extensive experience joining MedSec.
Celebrating the addition of Bob Haack and Émilie St-Pierre to the MedSec team.