# Integral Security Pillars for Medical Devices:
## 4 Discussion  
The interconnection of medical devices has improved healthcare delivery but has also increased exposure to cyber threats. Despite existing regulations such as ISO, NIST, and HIPAA, vulnerabilities persist. This study analyzes the gaps in the implementation of security measures, highlighting key findings and their relation to previous research, while also discussing the implications of these results and their impact on future research and improvements in medical device security.  
The results of this study reveal the growing importance of integrating a comprehensive cybersecurity approach into medical device technology, especially in the context of system interconnection and the increasing number of common vulnerabilities and exposures (CVEs) associated with these devices. The analysis of regulations and standards such as ISO, NIST, HIPAA, ENISA, GDPR, and HITRUST highlights the need for closer alignment between security policies and the practices implemented by medical device manufacturers and suppliers. While these regulations have made significant progress in information protection, the findings indicate that the effective application of these regulations in medical  
Figure 7: Mathematical model based on Set Theory.  
devices still faces major challenges, such as a lack of consistency in the implementation of security measures and the growing sophistication of cyberattacks.  
Identified vulnerabilities, such as remote exploitation in Philips devices or malicious code injections in GE Healthcare products, illustrate the severity of the threats facing medical device infrastructures. These results align with previous studies that have highlighted the insufficient protection of medical devices against cyberattacks, especially when integrated into complex healthcare information networks. The discrepancy between the existing regulations and practical implementations emphasizes the need for a more robust and adaptive approach to auditing and managing the security of these devices.  
Furthermore, the findings reveal that the security of medical devices relies not only on protecting information but also on the integration of risk controls that consider interoperability and vulnerability management throughout the entire lifecycle of the devices. This supports the hypothesis that cybersecurity threats should be managed with a holistic approach, covering not only IT security but also physical security, identity management, and access control.  
Future research could focus on the development of adaptive security frameworks that integrate best practices from multiple standards and enable real-time audits, especially in connected healthcare environments. It would also be valuable to explore the implementation of emerging technologies, such as artificial intelligence and machine learning, for detecting and mitigating threats in interconnected medical devices. Additionally, investigating the impact of cybersecurity training for healthcare professionals, considering the interaction between human factors and technology in healthcare settings, would be highly relevant.  
This study reinforces the urgency of strengthening cybersecurity capabilities in medical devices to ensure the protection of information and the integrity of healthcare services, particularly in a context where reliance on interconnected systems continues to grow.