Semi-Automated Threat Vulnerability & Risk Assessment (TVRA) for Medical Devices

This paper presents a novel Threat, Vulnerability, and Risk Assessment (TVRA) methodology specifically designed for the Internet of Medical Things (IoMT) to address the unique cybersecurity challenges in the healthcare sector. Given the critical nature of healthcare services and the sensitivity of patient data, there is an urgent need for a robust, IoMT-specific TVRA approach. This work integrates the proposed TVRA methodology with SPYDERISK, an advanced risk management tool, showcasing its application through a Remote Patient Monitoring Systems scenario. The combination aims to enhance the security and reliability of healthcare services, ensuring the protection of sensitive health information and maintaining the trust of patients and providers.