SGS has amalgamated its existing cybersecurity capabilities under a single umbrella – Digital Trust Services (DTS). DTS covers the four key cybersecurity areas:

Products and systems
Networks, communications & clouds
Management systems, services & professional certifications
Data integrity

The virtual world is increasingly becoming an important part of our daily lives. Consumer devices, including household items like smart refrigerators, vehicles and even production plants are all becoming connected. The Internet of Things (IoT), where devices, computers and cloud systems communicate seamlessly, is no longer the stuff of science fiction.

These products and systems are, however, under threat from cyber-attacks and authorities are responding to protect consumers and businesses. Recent initiatives include:

EU Cybersecurity Act (in force since June 2019)
European Union’s General Data Protection Regulation (GDPR)
Cyberspace Administration of China (CAC) promotes Cybersecurity Law and several draft regulations, and related standards
United States has several federal and state cybersecurity regulations – e.g. California has signed into law the California Consumer Privacy Act (CCPA), effective in 2020
Charter of Trust (CoT) – global business initiative to promote a structured approach to security, covering the complete life cycle of a product

Standards are now a primary focus for the implementation of effective cybersecurity measures in products, services and systems. Product security certification helps businesses ensure their products comply with relevant standards, cybersecurity requirements and data privacy regulations. These requirements include the need to update and maintain security applications once a product is in the field.

For medical device manufacturers, authorities are now including cybersecurity requirements in their medical device regulations. For example, the EU’s new Medical Device Regulation 2017/745, effective 2020, mandates the information security requirements to be covered. The US’s AAMI TIR 57 proposes a security risk management process based on the methodology of ISO 14971 Medical Devices – Application of risk management to medical devices standard.

Furthermore, GDPR and the EU Cybersecurity Act are increasing the pressure to introduce product security certification that covers:

· Handling personally identifiable information (PII)

Being confronted with safety risks induced by cybersecurity threats

Health IT Homepage