%0 Journal Article %J Technology Innovation Management Review %D 2017 %T A Cybersecurity Risk Assessment Framework that Integrates Value-Sensitive Design %A Aida Alvarenga %A George Tanev %K cybersecurity %K framework %K medical devices %K risk assessment %K value propositions %K value-sensitive design %X Medical devices today are more effective and connected than ever before, saving more patient lives and making healthcare practitioner’s jobs more efficient. But with this interconnectedness comes inherent concerns over increased cybersecurity vulnerabilities. Medical device cybersecurity has become an increasing concern for all relevant stakeholders including: patients, regulators, manufacturers, and healthcare practitioners. Although cybersecurity in medical devices has been covered in the literature, there is a gap in how to address cybersecurity concerns and assess risks in a way that brings value to all relevant stakeholders. In order to maximize the value created from cybersecurity risk mitigations, we review literature on the state of cybersecurity in the medical device industry, on cybersecurity risk management frameworks in the context of medical devices, and on how cybersecurity can be used as a value proposition. We then synthesize the key contributions of the literature into a framework that integrates cybersecurity value considerations for all relevant stakeholders into the risk mitigation process. This framework is subsequently applied to the hypothetical case of an insulin pump. Using this example case, we illustrate how medical device manufacturers can use the framework as a standardized method that can be applicable to medical devices at large. Our ultimate goal is to make cybersecurity risk mitigation an exploitable asset for manufacturers rather than a regulatory obligation. %B Technology Innovation Management Review %I Talent First Network %C Ottawa %V 7 %P 32-43 %8 04/2017 %G eng %U http://timreview.ca/article/1069 %N 4 %1 Carleton University Aida Alvarenga Castillo is a Master’s student in the Technology Innovation Management program at Carleton University in Ottawa, Canada. Aida undertook her undergraduate studies at McGill University in Montreal, Canada, with a focus on Economics, Business Management, and Political Science. She has experience in the financial industry for well-established banks, in a business development role for a technology startup, and as an entrepreneur in launching her own family food business. Within the field of technology innovation, Aida’s main interests are in financial technologies (FinTech) and innovation within the financial industry. %2 Carleton University George Tanev is a Master’s student in the Technology Innovation Management program at Carleton University in Ottawa, Canada. George holds a Master’s of Science degree in Medicine and Technology from the Technical University of Denmark and a Bachelor of Engineering in Biomedical and Electrical Engineering from Carleton University. George has experience in the medical device industry and the air navigation services industry. His interests are in technology entrepreneurship, cybersecurity, medical device product development, signal processing, and data modelling. %R http://doi.org/10.22215/timreview/1069 %0 Journal Article %J Technology Innovation Management Review %D 2015 %T A Value Blueprint Approach to Cybersecurity in Networked Medical Devices %A George Tanev %A Peyo Tzolov %A Rollins Apiafi %K cybersecurity %K ecosystem %K market differentiation %K networked medical devices %K value proposition %X Cybersecurity for networked medical devices has been usually “bolted on” by manufacturers at the end of the design cycle, rather than integrated as a key factor of the product development and value creation process. The recently released cybersecurity guidelines by the United States Food and Drug Administration (FDA) offer an opportunity for manufacturers to find a way of positioning cybersecurity as part of front-end design, value creation, and market differentiation. However, the technological architecture and the functionality of such devices require an ecosystem approach to the value creation process. Thus, the present article adopts an ecosystem approach to including cybersecurity as part of their value proposition. It extends the value blueprint approach suggested by Ron Adner to include an additional dimension that offers the opportunity to define: the potential locations of cybersecurity issues within the ecosystem, the specific nature of these issues, the players that should be responsible for addressing them, as well as a way to articulate the added cybersecurity value as a competitive differentiator to potential customers. The value of the additional blueprint dimension is demonstrated through a case study of a representative networked medical device – a connected insulin pump and continuous glucose monitor. %B Technology Innovation Management Review %I Talent First Network %C Ottawa %V 5 %P 17-25 %8 06/2015 %G eng %U http://timreview.ca/article/903 %N 6 %1 Carleton University George Tanev is a Master of Applied Science candidate in the Technology Innovation Management program at Carleton University in Ottawa, Canada. He holds a Master of Science in Engineering degree in Medicine and Technology from the Technical University of Denmark and a Bachelor’s degree in Biomedical and Electrical Engineering from Carleton University. George has industry and research experience in the development of portable medical device products. He also has interests in technology-based entrepreneurship, biomedical signal processing, medical device research and development, medical device regulatory affairs, and medical device cybersecurity. %2 Carleton University Peyo Tzolov is a software engineer with a keen interest in entrepreneurship. He holds a Bachelor’s degree in Communications Engineering from Carleton University in Ottawa, Canada, and is currently a Master of Applied Science candidate in the Technology Innovation Management program, also at Carleton University. Peyo has several years of experience as a software engineer working on highly scalable and distributed systems. He is very interested in technology, particularly in the security concerns arising from the rapid evolution and adoption of technology. %3 Carleton University Tamunoiyowuna Rollins Apiafi is a Master of Applied Science candidate in the Technology Innovation Management program at Carleton University in Ottawa, Canada. He holds a Bachelor's degree in Industrial Chemistry from the University of Port Harcourt, Nigeria. Rollins is one of the co-founders of insight lenz, which specializes in wearable medical technologies that monitors the wearer's eyes to track the state of their health. Rollins is interested in medical device cybersecurity, medical device regulatory bodies, and networked portable medical device research and development. %R http://doi.org/10.22215/timreview/903