Actually, the physical security is important as well. The reason for this is USB viruses. I have seen one that still boggles my mind. It basically autoran on in

Actually, the physical security is important as well. The reason for this is USB viruses. I have seen one that still boggles my mind. It basically autoran on insert without displaying any sort of autorun dialog and then any stick that is inserted gets infected. With a medical device, you don't just worry about the intentionally malicious viruses that try to extort money via fake virus ads or steal record. You must make sure that the system operates as the system is supposed to operate. If in the middle of surgery, your system crashes because some virus tries to link in to a DLL load because the surgeon loaded their profile to the system with an infected usb stick, you have a problem. Imagine that you had a laser on to cut something and now it isn't getting a command to stop from the system. Guess what will happen? It doesn't need to be an intentional sabotage, unintentional does damage quite well. If your product has security issues, you don't just lose customers, you injure people.