top of page
Search


Software Supply Chain Security in Practice: From Threats to SCA and SBOMs
1 Introduction Historically, software security focused on in-house code, with teams reviewing developer output, running static analysis, and auditing completed applications. This approach assumed organizations authored most of their software. Today, that is no longer the case, and security concerns now extend across the entire delivery chain. The demand for faster delivery and greater returns has reshaped software engineering. Today, applications are built from open-source l
Sep 2225 min read


Zero Trust Architecture for Healthcare Systems
Despite regulatory pressure and massive efforts to strengthen cybersecurity, attacks continue to succeed, and healthcare organizations remain at substantial risk. Cyberattacks on healthcare are growing. According to the 2025 Ponemon Healthcare Cybersecurity Report, 93% of the organizations asked had experienced at least one cyberattack, with nearly three in four US healthcare organizations reporting related patient care disruption. These numbers aren't an outlier. Report afte
Sep 414 min read


Security Risk Analysis Under AAMI SW96: A Worked Example on a Vital-Signs Bracelet. Part II. Risk Control.
Contents In Part 1 we reframed how you rate a threat to a connected medical device: severity alone flattens everything to "Serious," so we paired it with exploitability - how reachable the attack actually is: to turn a flat list into an ordered one. That gives us an initial risk for every threat, before anything is done about it. This second part is about what you do with those ratings. It turns on one idea that separates medical-device security from ordinary infosec - that s
Aug 2010 min read


Security Risk Analysis Under AAMI SW96: A Worked Example on a Vital-Signs Bracelet. Part I. Analysis and Evaluation.
A walk-through of how we reason about medical-device security at the edge of hardware and software - the logic behind a SW96-aligned security risk analysis, illustrated on one deliberately ordinary device. Contents Most security writing lives comfortably on one side of a line. Either it's about software, such as web apps, APIs, and cloud misconfigurations - or it's about hardware: chips, buses, and side channels. Medical devices refuse to stay on one side. A modern connected
Aug 2024 min read


Building IoT Device Platforms: Core Components & Engineering Considerations
IoT device platform development means building a centralized software framework that connects, manages, and operates IoT devices at scale. These platforms serve as the backbone of IoT ecosystems - handling device communication, telemetry transport, data processing, and integration with external systems and applications. A well-designed IoT platform brings together everything needed to run a connected device ecosystem: device connectivity, data storage, real-time analytics, se
Apr 2716 min read


How to Conduct a HIPAA Security Rule Risk Assessment
In 2025 alone, the healthcare sector has reported over 311 data breaches, affecting more than 23 million individuals. Nearly 80% of these incidents were caused by hacking and IT-related attacks - many of them preventable. This is precisely why the HIPAA Security Rule mandates regular risk assessments. Required under §164.308(a)(1), the process helps organizations identify vulnerabilities in how they store, access, and protect electronic protected health information (ePHI). Th
Apr 218 min read


HITRUST Certification: An Executive Guide to Risk, Trust, and Healthcare Compliance at Scale
In 2026, a "check-the-box" approach to HIPAA is no longer a safety net - it's a liability. For mid-sized medical practices and high-growth healthcare startups, the margin for error has vanished. With the average cost of a healthcare data breach now reaching $10.22 million , security is no longer just an IT line item; it is a core pillar of your business's valuation and viability. While HIPAA remains the legal baseline, its inherent vagueness can leave executives with a false
Apr 209 min read


Options for Wireless Connectivity in Your IoMT Application and Medical Device
Introduction The Internet of Medical Things (IoMT) encompasses a diverse range of wireless technologies serving various health care applications. These include enterprise Wi-Fi for hospital environments with challenges with radio frequency connectivity, zero provisioning support for home health care applications, Bluetooth options for seamless interfacing with numerous smartphones and tablets, and connectivity solutions for cost-effective sensor deployment and wire replacemen
Apr 27, 202322 min read


Healthcare IT Outsourcing & How It Works
Global spending in public and private healthcare fell by 2.2% in 2020, according to the 2021 Deloitte Global Healthcare Outlook. Like other industries, the field of healthcare is also struggling to manage its finances while trying to balance IT maintenance. No doubt, information technology has enabled this sector to transform its operations into more scalable, flexible, reliable, effective, and secure systems. The necessity of balancing financial concerns and staying up to da
Aug 3, 20215 min read


Deep Learning in Healthcare
In today’s dynamic world, there are many applications for artificial intelligence, including pattern recognition (vision, speech...
Jun 1, 20218 min read
bottom of page