Risk Assessment, MDS2 and Inventory

Students will learn to identify, analyze, and mitigate cybersecurity risks associated with networked medical devices and the Internet of Medical Things (IoMT). The curriculum emphasizes practical application of risk assessment frameworks, detailed interpretation of security disclosure forms (MDS2), and best practices for creating and maintaining robust medical device inventories. Through a combination of theoretical knowledge and hands-on labs, participants will develop the essential skills required to protect patient safety, data privacy, and operational continuity in clinical environments. This course is vital for aspiring cybersecurity specialists in healthcare.

InstructorJacob Calhoun

Prerequisites

MDC 101

Course outline

Lectures, virtual labs, and graded assignments — completed in your browser.

01Lesson 1: Introduction to Medical Device & IoMT Cybersecurity Risklecture

02Lesson 2: Regulatory Landscape & Compliance Standards for Medical Deviceslecture

03Lesson 3: Core Concepts of Risk Management & Cybersecurity Frameworkslecture

04Hands-on Lab: Initial Asset Identification & Basic Vulnerability Mappinglab

05Lesson 5: Understanding the Manufacturer Disclosure Statement for Medical Device Security (MDS2)lecture

06Lesson 6: Analyzing MDS2 Sections: Device Capabilities & Network Interfaceslecture

07Lesson 7: Analyzing MDS2 Sections: System Hardening & Patch Managementlecture

08Hands-on Lab: MDS2 Interpretation & Midterm Reviewlab

09Lesson 9: Principles of Medical Device Inventory Managementlecture

10Lesson 10: Tools & Technologies for Automated Inventory Discoverylecture

11Lesson 11: Hands-on Lab: Implementing an Inventory Scan & Data Consolidationlab

12Lesson 12: Integrating Risk Data with Inventory for Prioritizationlecture

13Lesson 13: Developing Risk Mitigation Strategies & Continuous Monitoringlecture

14Capstone Service Project: Comprehensive Risk Assessment & Remediation Planassignment

Syllabus

["Week 1: Lesson 1: Introduction to Medical Device & IoMT Cybersecurity Risk","Week 2: Lesson 2: Regulatory Landscape & Compliance Standards for Medical Devices","Week 3: Lesson 3: Core Concepts of Risk Management & Cybersecurity Frameworks","Week 4: Hands-on Lab: Initial Asset Identification & Basic Vulnerability Mapping","Week 5: Lesson 5: Understanding the Manufacturer Disclosure Statement for Medical Device Security (MDS2)","Week 6: Lesson 6: Analyzing MDS2 Sections: Device Capabilities & Network Interfaces","Week 7: Lesson 7: Analyzing MDS2 Sections: System Hardening & Patch Management","Week 8: Hands-on Lab: MDS2 Interpretation & Midterm Review","Week 9: Lesson 9: Principles of Medical Device Inventory Management","Week 10: Lesson 10: Tools & Technologies for Automated Inventory Discovery","Week 11: Lesson 11: Hands-on Lab: Implementing an Inventory Scan & Data Consolidation","Week 12: Lesson 12: Integrating Risk Data with Inventory for Prioritization","Week 13: Lesson 13: Developing Risk Mitigation Strategies & Continuous Monitoring","Week 14: Capstone Service Project: Comprehensive Risk Assessment & Remediation Plan"]