Connected medical devices: securing the whole ecosystem
How dependencies, trust boundaries and compromised networks should shape threat modelling and penetration testing for connected medical devices.
Independent thinking on medical-device development
Where MedTech professionals think out loud.
Current commentary, professional discussion, regulatory developments, opinions and practical observations from the realities of developing medical devices.
Independent perspective based on 40+ years in safety-critical engineering and 12+ years in medical-device development.
Current commentary
Ideas, observations and arguments worth discussing.
When medical software fails quietly
How stale data, incorrect units, patient mismatches and misleading displays can produce plausible but wrong outputs—and how to detect and control these quiet failures.
The algorithm is not the product
Why successful medical software requires evidence for the complete clinical product and workflow—not only the performance of its algorithm.
CSA, Part 11 and QMSR: building a coherent software assurance approach
A practical approach to shared software assurance evidence, with clear regulatory boundaries and a worked calibration-system example.
Browse by subject
The conversations shaping development.
Follow commentary across the connected technical, regulatory and organisational questions facing medical-device teams.
01
Design controls
Turn user needs into controlled requirements, verified outputs and defensible development evidence.
View commentary →02Risk management
Apply ISO 14971 as an active product-development discipline—not simply a collection of forms.
View commentary →03Software & SaMD
Practical lifecycle guidance for embedded, cloud, mobile and software-only medical devices.
View commentary →04Product cybersecurity
Integrate security into development, risk management, verification and post-market governance.
View commentary →05Verification & validation
Produce objective evidence that the product was built correctly—and is the right product.
View commentary →06Systems engineering
Define product purpose, architecture, interfaces, performance and traceability across disciplines.
View commentary →07Quality & regulatory
Connect QMS and regulatory expectations with proportionate practice and useful evidence.
View commentary →08Leadership & organisation
Build capable teams, effective governance and the conditions for reliable delivery.
View commentary →Choose what you need
Discuss. Learn.
MedTech.blog is one part of a connected set of independent resources from Paul Gardner.
MedTech.blog
Current commentary, regulatory developments, professional opinion and observations from practice.
Continue reading →MedTech Learning
Structured learning pathways, role-specific guides, standards explainers and downloadable resources.
Visit MedTech Learning →The editorial lens
Experience.
Evidence.
Judgement.
Discussion.
Standards and regulations define expectations, but real projects still depend on interpretation, trade-offs, leadership and professional judgement.
MedTech.blog examines that space openly: what works, what fails, what changes—and what the industry should discuss next.
Read the editorial principles →