The US FDA issues best practices for communicating cybersecurity vulnerabilities to patient

The U.S. Food and Drug Administration’s (FDA’s) Center for Devices and Radiological Health (CDRH) published best practices for communicating cybersecurity vulnerabilities to patients. The document provides information for the FDA, federal partners, and industry stakeholders to inform patients and the public about cybersecurity vulnerabilities. The paper highlights the following points: (1) make the content accessible (timely, relevant, simple, and readable) for people to read and understand; (2) discuss risks and benefits; (3) acknowledge and explain the unknown; (4) make it easy for patients to find and use information in online searches, and mobile devices.