New collaboration promises greater innovation in medical device security

The two organizations will connect their membership and partner networks to work on advancing security for life-saving devices.

AAMI and Archimedes logos Enlarge
The Association for the Advancement of Medical Instrumentation and the Archimedes Center for Medical Device Security announce a new collaboration.

Two prominent medical device organizations have announced a new collaboration to advance medical device cybersecurity practices across the entire medical device lifecycle. The Association for the Advancement of Medical Instrumentation (AAMI) and the Archimedes Center for Medical Device Security will work together to connect their networks of medical device and health technology management (HTM) professionals across the country.

“Cybersecurity is a major area of concern for medical device safety, and it’s an area where AAMI has been active and will be even more active in the future,” says Robert Burroughs, AAMI’s Senior Vice President of Education. “Our collaboration with Archimedes will expand the reach of some of the world’s leading experts in the area of cybersecurity and lead to new education offerings and resources that will drive patient safety. We welcome them as members to the AAMI community.”

AAMI is a nonprofit community of over 9,000 experts, hospitals, and medical device manufacturers working to support the healthcare community in the development, management, and use of safe and effective health technology. Founded in 1967, the organization is the primary source of consensus standards, both national and international, for the medical device industry, as well as practical information, support, and guidance for health technology and sterilization professionals.

AAMI members happy at a conference Enlarge
Members of AAMI at the 2019 AAMI Exchange. Credit: AAMI

Archimedes was the first of its kind to bring together the different stakeholders from the medical devices industry – including healthcare providers, medical device manufacturers, security researchers, and regulators – for the purpose of solving security challenges. Housed at the University of Michigan’s Computer Science and Engineering department, the unique center is funded by 17 institutional members to support graduate students and train healthcare professionals to better integrate security engineering into medical device design, procurement, and operation.

Representatives at AAMI cite a growing focus on security across the medical devices industry as a major motivation behind the collaboration.

“There are a few things happening in the future that are really crucial for medical devices,” says Burroughs. “In an Internet of Things world, cybersecurity is already here today as an issue and it’s only going to grow in importance.”

The two organizations intend to connect their membership and stakeholder networks to work on advancing security practices for these life-saving devices. Potential outcomes of this initiative include a standardized healthcare and medical device security curriculum for manufacturers and health delivery organizations.

“We appreciate how AAMI represents thousands of experts in healthcare technology, sterilization, and medical device manufacturing,” says Michigan’s Prof. Kevin Fu, Chief Scientist and Founder of the Archimedes Center. “The Archimedes cybersecurity collaboration with AAMI will help us to significantly grow our broader impact on society for trustworthy, safe, and effective delivery of healthcare.”

Kevin Fu at the podium Enlarge
Prof. Kevin Fu, Chief Scientist and Founder of the Archimedes Center, delivering remarks at the Center's 2020 Annual Conference in New Orleans. Credit: Archimedes Center for Medical Device Security.

The organizations are considering additional joint activities to promote their overlapping work, including an annual innovation award for medical device security.

“In the end the goal is to increase awareness, improve education, and have influence across the industry,” says Sarah Peña, Archimedes Senior Operations and Business Development Manager.

AAMI, Archimedes, and their members have a long history of collaboration. Fu previously co-chaired the AAMI Working Group on Medical Device Security, which developed a technical report outlining core principles for medical device security and risk management.

Beyond their past collaborations, the two organizations share a common vision for providing more resources in the healthcare and device security space. Archimedes offers security expertise and a close network of leaders who are driving the industry, while AAMI has connections and resources spanning the field of medical instrumentation.

“Each group brings something valuable, so the collaboration is a natural fit,” says Peña. “We know that in order to make meaningful progress and have an impact in a rapidly changing industry, we are better together.”