Incident Response, Patching and Regulatory Guidance
This course delves into the critical aspects of cybersecurity incident response within healthcare environments, covering identification, containment, eradication, recovery, and post-incident analysis specific to medical devices and IoMT. Students will learn best practices for vulnerability management and patching, including risk-based prioritization, testing methodologies, and deployment strategies tailored for clinical settings. A significant portion of the course is dedicated to understanding and applying relevant regulatory frameworks, standards, and guidance from authorities overseeing medical device cybersecurity. Through hands-on exercises and case studies, participants will gain the practical knowledge required to manage cybersecurity risks, ensure patient safety, and maintain operational integrity in a connected healthcare ecosystem, culminating in a capstone project.
InstructorJacob CalhounCourse outline
Lectures, virtual labs, and graded assignments — completed in your browser.
Syllabus
["Week 1: Lesson 1: Introduction to Medical Device Cybersecurity Incidents","Week 2: Lesson 2: Incident Response Lifecycle & Planning for IoMT","Week 3: Lesson 3: Incident Detection, Triage, and Initial Containment","Week 4: Hands-on Lab: Incident Response Playbook Development & Simulation","Week 5: Lesson 5: Eradication, Recovery, and Post-Incident Analysis","Week 6: Lesson 6: Vulnerability Management & Assessment for Medical Devices","Week 7: Lesson 7: Patching Strategies & Deployment in Clinical Environments","Week 8: Hands-on Lab: Vulnerability Scanning, Patch Evaluation & Midterm Review","Week 9: Lesson 9: Introduction to Regulatory Frameworks and Standards","Week 10: Lesson 10: Key Guidance Documents and Compliance Requirements","Week 11: Hands-on Lab: Regulatory Compliance Assessment & Reporting","Week 12: Lesson 12: Supply Chain Security & Third-Party Risk Management","Week 13: Lesson 13: Future Trends: AI/ML in Cybersecurity & Emerging Threats","Week 14: Capstone Service Project: Integrated Incident Response and Patching Plan"]