Healthtech · Medtech & Devices · 1000+ · Europe #b032_22

Context

We design and manufacture implantable cardiac and vascular devices and operate a long-running remote monitoring service that transmits device data to physicians worldwide.

Industry

Healthtech · Medtech & Devices

Size

1000+ employees

Region

Europe

Tools budget

$20K+ per month

Needs

SOC 2 / ISO 27001 automation. Our remote monitoring service is certified to an information security standard, and recertification evidence still takes manual effort.

Today: a remote monitoring service run under a certified information security management system · Urgency: this year

Application security & code scanning. Connected transmitters in patients' homes must be continuously assessed for new vulnerabilities across their whole service life.

Today: security by design reviews across the product lifecycle, with public advisories for older transmitters · Urgency: this year

Continuous compliance monitoring. Security governance spans many subsidiaries, and we cannot see control gaps until an audit finds them.

Today: corporate governance staff tracking security obligations across services, mostly through periodic reviews · Urgency: later

Who decides

ciso security · procurement

Expects from suppliers

Experience with long-lived connected medical hardware; Control mapping across security and device rules; On-premise or sovereign hosting option

Not a fit

Tools that assume frequent over-the-air updates; US-only hosting providers

Stack

on-prem / private cloud, compliance tooling in place, ticketing / issue tracker

Buying triggers

security incident risk, upcoming audit or certification