Management Forum Logo

Presented by
Management Forum

Cyber Security for Medical Devices Training Course

Gain the skills to design medical devices with cybersecurity in mind, addressing today’s rapidly evolving regulatory landscape and customer demand. This course provides a practical understanding of cybersecurity requirements and shows you how to integrate state-of-the-art security practices into your existing development processes to deliver safe, compliant, resilient, and trusted products and solutions.

★★★★★ "Excellent, it was very interesting and I find the speaker very knowledgeable."

8-9 October 2026 »
from £1299

Need help? Enrol/reserve

Course overview

As cyber threats against healthcare systems continue to rise, securing medical devices has become critical to protecting patient care and maintaining trust in healthcare services. Effective cybersecurity goes beyond safety alone, it also ensures the confidentiality, integrity, and availability of systems and sensitive data.

This course equips you with a practical understanding of medical device cybersecurity, the growing regulatory expectations, and the latest industry best practices. Learn how to embed state-of-the-art security into your existing development processes to deliver compliant, resilient, and secure products and solutions with confidence.

This course is part of our range of Medical Devices training courses

Benefits in attending

Gain a clear overview of EU, US, and global cybersecurity regulations
Recognise the regulatory expectations of the manufacturer’s due diligence
Understand key healthcare cybersecurity standards and how to apply them effectively
Learn best practices for embedding security by design into existing processes
Receive practical guidance on effective threat modelling techniques
Grasp the link between cybersecurity risk management and patient safety
Discuss shared responsibility and critical cybersecurity information requirements

Who should attend

Security and privacy specialists
Risk managers and architects
R&D, product and project managers
Regulatory and quality managers
Software engineers
Healthcare IT consultants and auditors

Popular with...

This course has proven particularly popular among our customers in these roles:

Business Development Manager
Principal Consultant
Regulatory Affairs Manager

Enrol/reserve

This course will cover:

Day 1
Day 2

Introduction to cybersecurity

Impact of cybercrime
Definitions
Different perspectives

Cybersecurity regulatory overview

For the manufacturer (both medical and non-medical)
For the user (hospital)
US focus (FDA)
EU focus (MDR/IVDR, MDCG Cybersecurity Guidance, NIS2 and CRA)
Global focus (IMDRF and guidance’s around the world)

Security by design

Introduction
Security by design process standards (An introduction to IEC 81001-5-1:2021 Health software and health IT systems safety, effectiveness and security - Part 5-1: Security - Activities in the product life cycle)
Secure design, coding and testing
Monitoring and Incident handling
Documentation (Technical file and submission)
Obsolescence/security updates
Supply chain

Security risk management

Dealing with risk
Security versus Safety
Methodologies
Introduction to threat modelling

Threat modeling

Threat modelling exercise
Relation to safety risk management

Organisational requirements, shared responsibility & user documentation

Organisational requirements
Shared responsibility
User documentation (e.g., IFUs and MDS2)

Security standards

For processes (Manufacturer, suppliers)
For products (MD, SaMD and Health & Wellness apps)
For services and cloud
For hospitals
Security certifications

Further considerations

Products, services, apps (and a little bit on AI)
Development models
Coordinated vulnerability disclosure
Information sharing and analysis centers
Accountability and oversight

Enrol/reserve

Ben Kokx
Gentle Giant Software

Ben Kokx joined Philips in 2001 as a software designer before transitioning into product security and privacy leadership roles across multiple businesses and markets. Since 2013, as Director Product Security within the central Philips Product Security Office, he has been responsible for the global Philips Product Security Policy and Process Framework and has played a key role in cybersecurity-related standards and regulations. In 2023, he moved to the Regulatory Affairs department to focus more extensively on his external roles as a healthcare and IoT cybersecurity expert, contributing to public-private partnerships, industry associations, and standards development organisations.

Ben leads and actively contributes to several industry associations and standards organisations, including ISO, IEC, CEN-CENELEC, and ETSI. He is deeply involved in the development of the ISO/IEC 80001 series and ISO/IEC 81001 series healthcare cybersecurity standards.

He serves as convenor of CEN/CENELEC JTC 13 Working Groups 6, 8, and 9, focusing on the development of European harmonized cybersecurity standards supporting the RED Delegated Act and the Cyber Resilience Act. Ben is also an eHealth cybersecurity expert for ENISA and a member of the ENISA Advisory Group. In addition, he holds leadership positions within the cybersecurity working groups of MedTech Europe and COCIR, and through DITTA participates in international public-private initiatives such as the IMDRF Cybersecurity Working Group.

More details

NEW higher discounts for multiple bookings - bring your colleagues to make your training budget go further:

30% off the 2nd delegate
40% off the 3rd delegate
50% off the 4th delegate

Please contact us for pricing if you are interested in booking 5 or more delegates

8-9 October 2026

Live online

09:00-17:00 UK (London) (UTC+01)
10:00-18:00 Paris (UTC+02)
04:00-12:00 New York (UTC-04)
Course code 16308

GBP 1,299 1,499
EUR 1,819 2,099
USD 2,087 2,399

Until 03 Sep

2 days live online training
Browser-based, no download usually required
See presenters and interact with fellow attendees
Download documentation and certification of completion
Fair transfer and cancellation policy

View basket

Not ready to book yet?

for 7 days, no obligation

* Early booking discounts may not be combined with other discounts or offers. As such, the discounts for 2nd/3rd/4th delegates are based on the full price; and apply only when booking multiple delegates on the same date.

Reviews of IPI's Cyber Security for Medical Devices training course

Excellent, it was very interesting and I find the speaker very knowledgeable.

Jan 30 2024

Kolbrun E Ottosdottir Iceland
Nox Medical

Jan 30 2024

Very knowledgeable, up to date on things in this field even parts you usually do not get a glimpse in. An excellent program.

Harpa Arnardóttir Iceland
Chief Quality Officer, Nox Medical

Jan 30 2024

Very passionate and answered questions clearly

Genn Kamei Iceland
Nox Medical

Oct 10 2023

I was looking for the exact standards what we could apply for our Device Cyber Security Perspective and how we could document Cybersecurity in Regulatory Documents (Risk Assessment, GSPR etc.) Training was helpful, now we could conclude which standard and how we could comply in our documents.

Meenakshi Kamboj United Kingdom
Senior Regulatory Specialist - Development • Regulatory, Flexicare Ltd

Oct 10 2023

The course was well structured, in depth, and clearly from an expert in the field. Threat modelling was very helpful.

Richard Hoodless United Kingdom
Principal Engineer, ATL technology

Oct 10 2023

Very knowledgeable provided a very good insight.

Mike Ibbotson United Kingdom
Embedded Engineer, ATL Technology Ltd

Oct 11 2022

I liked that the speaker gave a good introduction of the content and going through the parts systematically and clearly

Tiong Han Toh Singapore
Lecturer, Nanyang Polytechnic

Apr 29 2022

[Ben was] absolutely competent on the topic from multiple standpoints - great choice

Andrea Forcolin Italy
R&D Development Manager, Orthofix srl

Jun 21 2017

Very well organised and a nice broad range of topics. Some very good speakers and interesting talks.

David Harris United Kingdom
Scientist and Inventor, PA Consulting

Jun 21 2017

I feel the course was very useful and provided an good understanding of connectivity in medical technology and has opened my mind to the many challenges but benefit of connectivity in medical technology.

Paul Fitton United Kingdom
Regulatory Affairs Specialist, Presspart

Jun 21 2017

Quality of speakers and ability to present very good.

Stefan Gaul Switzerland
Head of Strategic Product Management, Haselmeier AG

Jun 21 2017

A lot of focus on describing status of industry and issues but little insight into innovations and technical solutions. Some talks lacked technical depth with was disappointing.

James Gani United Kingdom
Design Team Leader, SPD Development Company Ltd

Jun 21 2017

Good overall overview

Frederic Bustos Australia
Quality and Regulatory Affairs Manager, Cochlear Ltd