Policy and Advisory Work

Digital health moves faster than the rules governing it. For twenty years CBC has worked on the part that gets left behind: how these devices are secured, how the software is accounted for, who is protected, and who gets left out. 

That work happens in advisory seats, not press releases. 

Where we serve

U.S. Food and Drug Administration, 2004 to present 
Cybersecurity and Software Bill of Materials (SBOM) regulation for medical devices. 

Health Sector Coordinating Council, 2020 to present 
Executive Committee, Cybersecurity Working Group. 

Abbott, 2017 to present 
Chair, Cybersecurity Advisory Committee. 

State of California, 2017 
Chair, Governor’s Office Advisory Committee on Digital Cybersecurity Workforce Policy. 

White House Cybersecurity Forum, 2022 
USC recognized by the first National Cyber Director, Chris Inglis, for CBC’s contribution to digital healthcare cybersecurity. 

These appointments are held by CBC’s executive director, Leslie Saxon, MD, on behalf of the center. 

What we work on

Device and software security. Medical devices are networked, updated, and long-lived, which makes them a security problem that outlasts the product cycle. We have worked on this since before it was a regulatory requirement. 

Evidence standards for digital health. A wearable that has not been validated against a clinical measure is a consumer product, whatever it claims. Our research exists partly to set that bar. 

Who the technology serves. Digital health tools are built for the people easiest to enroll. We design studies around populations that are not, including active-duty Service Members and patients who do not present until they are already sick. 

Closing

CBC publishes its findings, including negative ones, and holds U.S. Patent No. 12,341,851. Our policy positions come out of the research, not ahead of it.