Overview

This assignment requires you to review Device Overview 1: Secure Wireless Infusion Pumps (D2L->Content, Case Studies) and the NIST Special Publication 1800-8B, https://www.nccoe.nist.gov/publication/1800-8/VolB/index.html (available in D2L- >Supplemental) focusing on Section 4, Risk Management and Section 5, Infrastructure. It also requires you to analyze the risk to infusion pumps and the environments they reside in, potential and known vulnerabilities, security characteristics, and associated solutions and controls.

NIST Special Publication 1800-8B NIST SPECIAL PUBLICATION 1800-8B, Securing Wireless Infusion Pumps in Healthcare Delivery Organizations was developed in August of 2018. This practice guide helps HDOs implement current cybersecurity standards and best practices to reduce their cybersecurity risk, while maintaining the performance and usability of wireless infusion pumps. (1)

Instructions: Summarize the cybersecurity risks to infusion pumps and the IoMT to which they are connected. Explain why the cybersecurity risks are more critical than in other industries.

Select two CVEs referenced in Device Overview 1, Section 5, Page 5. Locate them on CVE - Search CVE List (mitre.org). o Provide a summary of the CVEs in plain language including the CVSS score. o Identify a viable solution and explain what needs to be done to implement it on the pump and/or the network for each vulnerability. Hint: You need to visit the National Vulnerability Database (NVD) via the link provided with the CVE. o Provide an explanation of if each solution eliminates the vulnerability or mitigates the risk for each. What is the residual risk, if any?

Select 3 characteristics from Section 4.3 of the NIST Special Publication 1800-8B, Security Characteristics and Controls Mapping. o Provide a description of the technology that may be used to implement each characteristic and who owns the responsibility for implementation (manufacturer or health delivery organization).

Opinion: Provide two areas/specifics that you found new/interesting from the overview, NIST publication, and/or assignment. Were you aware of the complexity of medical devices and the associated risks? Format Requirements/Sources:

APA style formatting and citation

12-point font 2

2 pages minimum, 3 pages maximum