- Research Article
1
- 10.1108/jstpm-09-2024-0346
Policy and management implications of firmware vulnerabilities in medical IoT devices: a multi-case analysis
- Jun 24, 2025
- Journal of Science and Technology Policy Management
- Ricky Katsuya + 1 more +1
Purpose This study aims to examine firmware vulnerabilities in medical Internet of Things (IoT) devices, focusing on their implications for healthcare policy, management and patient safety. The research aims to provide insights into developing effective mitigation strategies and enhancing regulatory frameworks to improve device security in the rapidly advancing field of medical IoT. This study underscores the critical need for identifying and addressing vulnerabilities to safeguard patient data and maintain the integrity of healthcare systems. Design/methodology/approach The research employs a qualitative multi-case analysis of firmware vulnerabilities in medical IoT devices, including insulin pumps, pacemakers and diagnostic equipment. Cases were selected based on criteria such as device diversity, severity of vulnerabilities and their impact on patient safety, as cross-referenced with the Common Vulnerabilities Exposure database. The analysis considers factors like device age, manufacturer practices, firmware update frequency, regulatory compliance and usage context to derive insights into policy and management challenges. Findings The study identifies key factors contributing to firmware vulnerabilities in medical IoT devices and examines their implications for healthcare management and policy. It provides recommendations for manufacturers and healthcare providers to enhance device security and outlines the need for robust regulatory measures. In addition, the research highlights gaps in the healthcare technology workforce and supply chain, advocating for stronger policies and management practices to mitigate risks. Originality/value This research contributes to the literature by linking technical vulnerabilities in medical IoT devices to broader policy and management concerns. The findings underscore the necessity for enhanced regulatory frameworks, proactive management strategies and industry-wide standards to ensure the security and reliability of medical IoT devices, ultimately protecting patient safety and data integrity.
Read more