Conference Description
Key Takeaways
- Three-day conference addressing cybersecurity challenges specific to medical devices, including regulatory compliance with FDA, MDR and PMDA requirements.
- Covers secure product development lifecycle, supply chain risk management and incident response strategies.
- Examines practical application of security frameworks including NIST and TIR 57 guidelines.
- Designed for senior cybersecurity, regulatory affairs and product security professionals from medical device manufacturers and healthcare providers.
About the Conference
The 11th Edition US Medical Device Cybersecurity Conference 2026 takes place in Boston over three days, bringing together cybersecurity leaders and practitioners from across the healthcare and medical device ecosystem. The programme combines expert sessions, workshops, panel discussions and roundtables, with content structured across both strategic and technical tracks to accommodate executive and hands-on learning preferences.
Core Topics and Technical Focus
Sessions address cyber resilience and risk management approaches for connected medical technologies. The programme examines secure product development practices throughout the device lifecycle, from design through post-market surveillance. Specific attention is given to managing threats from AI-enabled attacks and data breaches affecting medical systems.
Supply chain and third-party risk management features prominently, reflecting the complex vendor relationships in medical device manufacturing. The conference also covers incident response and crisis management, providing frameworks for organisations to prepare for and recover from security events.
Regulatory and Standards Landscape
The conference addresses compliance requirements across multiple regulatory jurisdictions, including FDA regulations in the United States, the Medical Device Regulation (MDR) in Europe and PMDA requirements in Japan. Sessions explore practical implementation of established security frameworks, particularly NIST cybersecurity guidelines and AAMI TIR 57, which provides guidance on integrating security into medical device risk management processes.
Content examines how organisations can balance innovation with compliance obligations while demonstrating return on investment for security programmes to business stakeholders.
Who Should Attend
The conference targets senior professionals working in medical device cybersecurity, including those from device manufacturers, healthcare providers and hospitals. Relevant roles include Directors and Managers of Cybersecurity, Product Security Architects, Regulatory Affairs Specialists, Quality Engineers, Principal Software Engineers and Digital Health Security Leads. Professionals responsible for quality systems, IT infrastructure, engineering and R&D within medical device organisations will find applicable content.
Sponsors
Gold sponsors include Cumulocity and SkillGym. Velentium Medical serves as silver sponsor, with MedCrypt as bronze sponsor. Clearly AI sponsors the roundtable sessions.