News

A new joint CEN-CENELEC Workshop is being launched as part of the EU-funded project CYMEDSEC  "Enhanced Cybersecurity for Networked Medical Devices through Optimisation of Guidelines, Standards, Risk Management and Security by Design". The workshop, titled "Continuous Security and Privacy Monitoring Processes for the Connected Medical Device Ecosystem", will develop a European standardisation deliverable, a CEN Workshop Agreement (CWA), addressing critical gaps in cybersecurity governance for connected medical devices (cMDs).

 

Cyberattacks on healthcare infrastructure have been rising at an alarming rate, placing patient safety, medical data, and healthcare supply chains at risk. CYMEDSEC responds to this challenge by enhancing cybersecurity across multiple layers of patient monitoring and care, with a particular focus on the Internet of Medical Things (IoMT), the growing ecosystem of connected devices that enable real-time patient monitoring, improved diagnostic accuracy, personalised treatment, and deeper patient engagement.

 

The new CEN-CENELEC Workshop will complement existing international and European standards by producing a process-oriented framework for the continuous security, privacy monitoring, and testing of all components within the connected medical device ecosystem, covering device hardware and software, intermediary components such as data transfer hubs, associated health IT services, and AI/ML models. The resulting CWA will address three key priorities: the integration of DevSecOps principles into the device lifecycle, the extension of MLOps to address AI/ML-specific risks, and the incorporation of ecosystem-wide monitoring for security, privacy, and interoperability.

 

The Workshop kick-off meeting will take place on June 30, 2026 in hybrid format, hosted in person at the Athena Research Center in Marousi, Athens. For more details, view the kick-off meeting Agenda (incl. remote participation link).