REPORT AN ISSUE Cybersecurity About us Trust center Bulletins and patches Vulnerability disclosures Helpful resources Cybersecurity at BD A note from the CISO Cybersecurity is one of the most critical issues impacting the healthcare industry. At BD, we maintain an unwavering commitment to security by design, in use and through partnership. We strive to ensure our products, systems and customer environments maintain high security standards so our customers can focus on what matters most: caring for patients. While we maintain robust security protocols, we also recognize that new security threats emerge daily, from attempts to compromise healthcare data to coordinated efforts to disrupt clinical workflows or manufacturing. We recognize that our customers cannot protect what they don’t know. That’s why we believe transparency and collaboration are essential. As we build a strong community of practice, working closely with our customers, industry regulators, and security researchers, we’re improving cybersecurity and resilience across the industry. – Rob Suárez, Vice President and Chief Information Security Officer OUR PRIORITIES Security by design BD products and systems are designed to be secure and are developed using industry-leading cybersecurity standards, including those from ISO and NIST. Security in use BD products and systems are secured and maintained throughout their intended life cycle, across all technologies and sites. Security through partnership BD maintains a culture of transparency and collaboration with customers and industry stakeholders to establish industry best practices. OUR FRAMEWORK BD Cybersecurity framework BD utilizes a framework to incorporate cybersecurity into our processes for product design, manufacturing, customer support and enterprise systems. Our framework has been aligned to various industry work products including the HSCC Joint Security Plan, NIST Cybersecurity Framework, ISO 27001, UL 2900 and ISA 62443. CYBERSECURITY MATURITY As the industry matures, so does BD cybersecurity Across the industry, we have made significant advances in cybersecurity over the last decade. 2021 BD became the first medical technology company authorized as a Common Vulnerability and Exposures (CVE®) Numbering Authority. 2020 The IMDRF published Principles and Practices for Medical Device Cybersecurity. 2020 BD received UL CAP certification for BD Synapsys™ Microbiology Informatics. 2019 The HSCC published the Medical Device and Health IT Joint Security Plan (JSP). 2019 BD CISO Rob Suárez co-chaired the HSCC Med Tech Cybersecurity Risk Management Task Group. 2018 BD made product security templates available via the BD Cybersecurity Trust Center. 2018 BD received UL CAP certification for the BD FACSLyric™ flow cytometer. 2017 BD established a Product Security Partnership program. 2016 The FDA published Postmarket Management of Cybersecurity in Medical Devices. 2014 The FDA published Content of Premarket Submissions for Management of Cybersecurity in Medical Devices. 2021 2014 PARTNERS AND INITIATIVES Collaborating to improve cybersecurity At BD, we believe industry collaboration makes us stronger. We are committed not only to security by design and in use, but also through partnership with stakeholders—including our customers, industry regulators, and security researchers. The following partnerships exemplify the types of collaborations we engage in regularly: AdvaMed The Advanced Medical Technology Association advocates globally for the highest ethical standards and patient access to safe, effective and innovative medical technologies. AiSP The Association of Information Security Professionals, based in Singapore, is committed to promoting the development, increase and spread of cybersecurity knowledge. CCAPAC The Cybersecurity Coalition for Asia Pacific is dedicated to improving the policy landscape for cybersecurity in Asia. CYBERSECURITY About us Trust center Helpful resources Vulnerability disclosures Bulletins and patches OFFERINGS Capabilities Brands Integrated solutions Catalogs COMPANY Contact us BD code of conduct Careers Inclusion and diversity Sustainability Suppliers News Investors Video gallery External funding program SUPPORT Technical support Product security and privacy Live chat Order status Customer portals Alerts and notices Electronic instructions for use COVID-19 © 2020 BD. All rights reserved. Unless otherwise noted, BD, the BD Logo and all other trademarks are property of Becton, Dickinson and Company. Privacy | Terms of Use | Cookies Settings By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies