Which is a key cybersecurity control for connected medical devices?

Which is a key cybersecurity control for connected medical devices?

• A. Sharing passwords.
• B. Open networks.
• C. Access controls restricting user privileges.
• D. No authentication.

Answer: (C)

Access controls that restrict user privileges are a key cybersecurity measure for connected medical devices. By applying the principle of least privilege, each user can perform only the actions necessary for their role, reducing the impact of a compromised account and limiting both accidental and intentional harm. Role-based access control and clearly defined permissions let clinicians adjust device settings or view data while preventing unauthorized changes to firmware, configurations, or patient information. Proper authentication should accompany these controls, but the real protective effect comes from limiting what authenticated users can do, which improves safety and containment of risks. This approach also supports traceability and accountability, since every action is tied to a specific user. Sharing passwords, open networks, or no authentication all bypass these protections and leave devices exposed to misuse and data breaches.

Access controls that restrict user privileges are a key cybersecurity measure for connected medical devices. By applying the principle of least privilege, each user can perform only the actions necessary for their role, reducing the impact of a compromised account and limiting both accidental and intentional harm. Role-based access control and clearly defined permissions let clinicians adjust device settings or view data while preventing unauthorized changes to firmware, configurations, or patient information. Proper authentication should accompany these controls, but the real protective effect comes from limiting what authenticated users can do, which improves safety and containment of risks. This approach also supports traceability and accountability, since every action is tied to a specific user. Sharing passwords, open networks, or no authentication all bypass these protections and leave devices exposed to misuse and data breaches.