Is That Medical Device Secure? Get It Right in the Contract

HSCC 'Model Contract' Calls for Shared Cyber Risks for Providers and Device Makers Marianne Kolbasuk McGee (HealthInfoSec) • November 21, 2025

The global healthcare industry is expected to spend more than $500 billion on medical devices this year, and a growing number of those devices are connected to the internet and tapping in to artificial intelligence to bring new capabilities - from imaging services to advanced patient monitors and wearables.

See Also: Gartner Report | Magic Quadrant for SD-WAN

Healthcare delivery organizations must negotiate product and services contracts with multiple medical devices makers, and during that process, important cybersecurity details are often overlooked, unclear or misinterpreted, according to the Health Sector Coordinating Council.

The HSCC's Model Contract-Language for Medtech Cybersecurity Version 2 issued on Wednesday is aimed at helping ...