As someone working in medical devices, the FDA has really stepped up their game. They have issued a draft guidence on cybersecurity expectations[1] and are now

As someone working in medical devices, the FDA has really stepped up their game. They have issued a draft guidence on cybersecurity expectations[1] and are now rejecting submissions that don't adequately address security for internet connected devices. There is still a long way to go, but I think change is happening in the field. [1] - https://www.fda.gov/downloads/MedicalDevices/DeviceRegulationandGuidance/GuidanceDocuments/UCM623529.pdf https://www.fda.gov/downloads/MedicalDevices/DeviceRegulatio...