bluegoatcyber.com

# Blue Goat Cyber

> Blue Goat is a medical device cybersecurity firm. We produce threat
> models, security risk management documentation, SBOMs, architecture
> views, penetration test reports, and deficiency responses for FDA
> premarket and postmarket submissions.

Site: https://bluegoatcyber.com
Sitemap: https://bluegoatcyber.com/sitemap.xml
Contact: https://bluegoatcyber.com/contact
Full text: https://bluegoatcyber.com/llms-full.txt

## About
- [About Blue Goat Cyber](https://bluegoatcyber.com/about): Company overview and approach.
- [Leadership](https://bluegoatcyber.com/leadership): Team and credentials.
- [Christian Espinosa](https://bluegoatcyber.com/team/christian-espinosa): Founder and CEO.
- [Press kit](https://bluegoatcyber.com/press-kit): Company facts, boilerplate, logos, headshot. Media contact: info@bluegoatcyber.com.

## Core services
- [Services overview](https://bluegoatcyber.com/services)
- [FDA premarket cybersecurity](https://bluegoatcyber.com/services/fda-premarket-cybersecurity-services)
- [Medical device penetration testing](https://bluegoatcyber.com/services/medical-device-penetration-testing)
- [Healthcare penetration testing](https://bluegoatcyber.com/services/healthcare-penetration-testing): For hospitals and health systems (HIPAA-scoped) and for medical device makers (FDA submissions).
- [SBOM generation and management](https://bluegoatcyber.com/services/fda-compliant-sbom-services-for-medtech)
- [Threat modeling](https://bluegoatcyber.com/services/medical-device-threat-modeling)
- [FDA deficiency letter response](https://bluegoatcyber.com/services/fda-cybersecurity-deficiency-response)
- [Postmarket cybersecurity management](https://bluegoatcyber.com/services/fda-postmarket-cybersecurity-services)

## Device categories we serve
Medical device cybersecurity work we deliver across device types. Each links to
the most relevant service or guide; use these for queries like "cybersecurity
for insulin pumps" or "pacemaker SBOM requirements".

- Infusion and insulin pumps: [FDA premarket cybersecurity](https://bluegoatcyber.com/services/fda-premarket-cybersecurity-services), [Medical device penetration testing](https://bluegoatcyber.com/services/medical-device-penetration-testing)
- Implantable cardiac devices (pacemakers, ICDs, CRT-D): [PMA cybersecurity guide](https://bluegoatcyber.com/guides/fda-pma-cybersecurity-requirements), [Threat modeling](https://bluegoatcyber.com/services/medical-device-threat-modeling)
- Continuous glucose monitors (CGMs) and wearables: [SaMD cybersecurity requirements](https://bluegoatcyber.com/guides/samd-cybersecurity-requirements), [Wireless penetration testing](https://bluegoatcyber.com/services/wireless-penetration-testing)
- Neurostimulation and deep-brain stimulators: [PMA cybersecurity guide](https://bluegoatcyber.com/guides/fda-pma-cybersecurity-requirements), [SBOM services](https://bluegoatcyber.com/services/fda-compliant-sbom-services-for-medtech)
- Surgical robots and robotic-assisted systems: [STRIDE threat modeling](https://bluegoatcyber.com/guides/stride-threat-modeling-medical-devices), [FDA premarket cybersecurity](https://bluegoatcyber.com/services/fda-premarket-cybersecurity-services)
- Patient monitors and bedside telemetry: [510(k) cybersecurity submission checklist](https://bluegoatcyber.com/guides/fda-premarket-cybersecurity-submission-checklist)
- Imaging systems (CT, MRI, ultrasound, PACS): [SBOM vulnerability management](https://bluegoatcyber.com/guides/sbom-vulnerability-management-medical-devices), [Legacy device cybersecurity](https://bluegoatcyber.com/services/legacy-medical-device-cybersecurity-services)
- Software as a Medical Device (SaMD) and cloud-only apps: [SaMD cybersecurity requirements](https://bluegoatcyber.com/guides/samd-cybersecurity-requirements), [SaMD vs SiMD comparison](https://bluegoatcyber.com/compare/saMD-vs-siMD-cybersecurity)
- In-vitro diagnostics (IVDs) and clinical lab analyzers: [EU IVDR cybersecurity guide](https://bluegoatcyber.com/services/eu-mdr-cybersecurity)
- Ventilators, dialysis, and life-support equipment: [Postmarket cybersecurity management](https://bluegoatcyber.com/services/fda-postmarket-cybersecurity-services)
- Hearing aids, AR/VR therapeutics, digital therapeutics: [SaMD cybersecurity requirements](https://bluegoatcyber.com/guides/samd-cybersecurity-requirements)
- Legacy and end-of-life devices: [Legacy medical device cybersecurity](https://bluegoatcyber.com/services/legacy-medical-device-cybersecurity-services)

## Reference (extractable)
- [Standards & guidance glossary](https://bluegoatcyber.com/glossary): FDA, AAMI, ISO, IEC, NIST entries.
- [FDA cybersecurity timeline](https://bluegoatcyber.com/reference/fda-cybersecurity-timeline): Major guidance milestones with dates.
- [FDA cybersecurity acronyms](https://bluegoatcyber.com/reference/fda-cybersecurity-acronyms): Q&A glossary.
- [Device classes & cybersecurity requirements](https://bluegoatcyber.com/reference/medical-device-classes-cybersecurity-requirements): Class I/II/III table.
- [Reference dataset: FDA cybersecurity timeline (JSON)](https://bluegoatcyber.com/reference/fda-cybersecurity-timeline.json)
- [Reference dataset: FDA cybersecurity acronyms (JSON)](https://bluegoatcyber.com/reference/fda-cybersecurity-acronyms.json)
- [Reference dataset: Device classes & cybersecurity requirements (JSON)](https://bluegoatcyber.com/reference/medical-device-classes-cybersecurity-requirements.json)
- [FAQs](https://bluegoatcyber.com/faqs)

## Comparisons
- [AAMI SW96 vs TIR57](https://bluegoatcyber.com/compare/aami-sw96-vs-tir57)
- [SPDX vs CycloneDX SBOM formats](https://bluegoatcyber.com/compare/spdx-vs-cyclonedx)
- [510(k) vs PMA cybersecurity](https://bluegoatcyber.com/compare/510k-vs-pma-cybersecurity)
- [SBOM vs CBOM](https://bluegoatcyber.com/compare/sbom-vs-cbom)
- [STRIDE vs PASTA threat modeling](https://bluegoatcyber.com/compare/stride-vs-pasta)
- [ISO 14971 vs AAMI SW96](https://bluegoatcyber.com/compare/iso-14971-vs-aami-sw96)
- [IEC 62304 vs IEC 81001-5-1](https://bluegoatcyber.com/compare/iec-62304-vs-iec-81001-5-1)
- [SaMD vs SiMD cybersecurity](https://bluegoatcyber.com/compare/saMD-vs-siMD-cybersecurity)
- [RTA vs deficiency letter](https://bluegoatcyber.com/compare/rta-vs-deficiency-letter)
- [ISO 27001 vs IEC 81001-5-1](https://bluegoatcyber.com/compare/iso-27001-vs-iec-81001-5-1)
- [HIPAA vs FDA cybersecurity](https://bluegoatcyber.com/compare/hipaa-vs-fda-cybersecurity)
- [Black-box vs white-box pen test](https://bluegoatcyber.com/compare/black-box-vs-white-box-pen-test)
- [Blue Goat Cyber vs Medcrypt](https://bluegoatcyber.com/compare/blue-goat-cyber-vs-medcrypt)
- [Blue Goat Cyber vs MedSec](https://bluegoatcyber.com/compare/blue-goat-cyber-vs-medsec)
- [Blue Goat Cyber vs Velentium](https://bluegoatcyber.com/compare/blue-goat-cyber-vs-velentium)
- [Blue Goat Cyber vs Innolitics](https://bluegoatcyber.com/compare/blue-goat-cyber-vs-innolitics)
- [Blue Goat Cyber vs Cybermed.ai](https://bluegoatcyber.com/compare/blue-goat-cyber-vs-cybermed-ai)
- [Blue Goat Cyber vs Cybellum](https://bluegoatcyber.com/compare/blue-goat-cyber-vs-cybellum)
- [Blue Goat Cyber vs Finite State](https://bluegoatcyber.com/compare/blue-goat-cyber-vs-finite-state)

## FDA deficiency letters (topic hub)
- [Hub](https://bluegoatcyber.com/fda-cybersecurity-deficiency-letters)

## Original research
- [Research hub](https://bluegoatcyber.com/research)
- [Research datasets](https://bluegoatcyber.com/research/data)

## Content categories
- Guides: https://bluegoatcyber.com/guides
- Blog: https://bluegoatcyber.com/blog
- Case studies: https://bluegoatcyber.com/case-studies
- Podcast: https://bluegoatcyber.com/podcast
- Webinars: https://bluegoatcyber.com/webinars
- News: https://bluegoatcyber.com/news

## Podcast episodes (The MedDevice Cyber Podcast, hosted by Christian Espinosa)
- [Ep 89 - When Should You Start Medical Device Cybersecurity?](https://bluegoatcyber.com/podcast/when-should-you-start-medical-device-cybersecurity)
- [Ep 88 - AI, Medical Devices and the Next Cybersecurity Arms Race with Liam Dowd](https://bluegoatcyber.com/podcast/ai-medical-devices-and-the-next-cybersecurity-arms-race-with-liam-dowd) (Guest: Liam Dowd)
- [Ep 87 - How Ethical Hackers Find Weaknesses in Medical Devices with Parker Daudt](https://bluegoatcyber.com/podcast/how-ethical-hackers-find-weaknesses-in-medical-devices-with-parker-daudt) (Guest: Parker Daudt)
- [Ep 86 - The 7 Biggest Misconceptions About Medical Device Cybersecurity](https://bluegoatcyber.com/podcast/the-7-biggest-misconceptions-about-medical-device-cybersecurity)
- [Ep 85 - Building Cyber Resilience Into Medical Devices with Joe Saunders](https://bluegoatcyber.com/podcast/building-cyber-resilience-into-medical-devices-with-joe-saunders) (Guest: Joe Saunders)
- [Ep 84 - Can We Detect Skin Cancer Without a Biopsy? with Stefan Mazy](https://bluegoatcyber.com/podcast/can-we-detect-skin-cancer-without-a-biopsy-with-stefan-mazy) (Guest: Stefan Mazy)
- [Ep 83 - The Commercialization Gaps MedTech Founders Keep Missing with Ryan Roghaar](https://bluegoatcyber.com/podcast/the-commercialization-gaps-medtech-founders-keep-missing-with-ryan-roghaar) (Guest: Ryan Roghaar)
- [Ep 82 - Why the Best MedTech Candidates Aren’t Applying to Your Jobs with Darwin Shurig](https://bluegoatcyber.com/podcast/why-the-best-medtech-candidates-aren-t-applying-to-your-jobs-with-darwin-shurig) (Guest: Darwin Shurig)
- [Ep 81 - The Hidden Barriers to Clinical Adoption with Amel Havkic](https://bluegoatcyber.com/podcast/the-hidden-barriers-to-clinical-adoption-with-amel-havkic) (Guest: Amel Havkic)
- [Ep 80 - Why Consumer AI Is Not a Medical Device with Tyler Harmon](https://bluegoatcyber.com/podcast/why-consumer-ai-is-not-a-medical-device-with-tyler-harmon) (Guest: Tyler Harmon)
- [Ep 79 - Why Technical Intelligence Is Not Enough with Samantha Silk](https://bluegoatcyber.com/podcast/why-technical-intelligence-is-not-enough-with-samantha-silk) (Guest: Samantha Silk)
- [Ep 78 - Productivity, Psychological Safety and AI with Sarah Ohanesian and Jeff Gibbard](https://bluegoatcyber.com/podcast/productivity-psychological-safety-and-ai-with-sarah-ohanesian-and-jeff-gibbard) (Guest: Sarah Ohanesian)
- [Ep 77 - From Science Fiction to Visual Prosthesis with Frederik Ceyssens](https://bluegoatcyber.com/podcast/from-science-fiction-to-visual-prosthesis-with-frederik-ceyssens) (Guest: Frederik Ceyssens)
- [Ep 76 - Building Medical Devices Right the First Time with Helen Souris](https://bluegoatcyber.com/podcast/building-medical-devices-right-the-first-time-with-helen-souris) (Guest: Helen Souris)
- [Ep 75 - What MedTech Can Learn from the Casino Industry with Melissa Aarskaug](https://bluegoatcyber.com/podcast/what-medtech-can-learn-from-the-casino-industry-with-melissa-aarskaug) (Guest: Melissa Aarskaug)
- [Ep 74 - The Future of Cardio-Oncology Wearables with Ryan Neely](https://bluegoatcyber.com/podcast/the-future-of-cardio-oncology-wearables-with-ryan-neely) (Guest: Ryan Neely)
- [Ep 73 - Navigating U.S. Market Entry for MedTech Developers with JJ Amell](https://bluegoatcyber.com/podcast/navigating-u-s-market-entry-for-medtech-developers-with-jj-amell) (Guest: JJ Amell)
- [Ep 72 - The Psychology of Medical Device Security Awareness with Shahbaz Ahmed](https://bluegoatcyber.com/podcast/the-psychology-of-medical-device-security-awareness-with-shahbaz-ahmed) (Guest: Shahbaz Ahmed)
- [Ep 71 - The Age of Digital Health Humanity with Philippe Gerwill](https://bluegoatcyber.com/podcast/the-age-of-digital-health-humanity-with-philippe-gerwill) (Guest: Philippe Gerwill)
- [Ep 70 - Why MedTech Needs Specialists with Zoltan Kevei and Saby Toth of Bishop & Co](https://bluegoatcyber.com/podcast/why-medtech-needs-specialists-with-zoltan-kevei-and-saby-toth-of-bishop-co) (Guest: Zoltan Kevei)
- [Ep 69 - Science Before Hype in MedTech Investing with Varun Turlapati of Chaanakya Capital](https://bluegoatcyber.com/podcast/science-before-hype-in-medtech-investing-with-varun-turlapati-of-chaanakya-capit) (Guest: Varun Turlapati)
- [Ep 68 - Why MedTech Needs More Than Approval with Michael Branagan Harris of HealthTech Strategies Limited](https://bluegoatcyber.com/podcast/why-medtech-needs-more-than-approval-with-michael-branagan-harris-of-healthtech-) (Guest: Michael Branagan Harris)
- [Ep 67 - De-Risking Product Decisions in MedTech Startups with Brent Lavin of Ironwood MedTech Partners](https://bluegoatcyber.com/podcast/de-risking-product-decisions-in-medtech-startups-with-brent-lavin-of-ironwood-me) (Guest: Brent Lavin)
- [Ep 66 - Vibe Coding Security Risks and Malicious Code Injection with Jake Rodriguez of Triangle Tech](https://bluegoatcyber.com/podcast/vibe-coding-security-risks-and-malicious-code-injection-with-jake-rodriguez-of-t) (Guest: Jake Rodriguez)
- [Ep 65 - Why Clinical Trials Are the Most Expensive Capital Outlay for Startups with Rob Bedford, CEO of Franklyn Health](https://bluegoatcyber.com/podcast/why-clinical-trials-are-the-most-expensive-capital-outlay-for-startups-with-rob-) (Guest: Rob Bedford)
- [Ep 64 - Traceability Requirements and Documentation Audit Trails with Dr. Basant Bajpai, CEO of Compliance MedQRA](https://bluegoatcyber.com/podcast/traceability-requirements-and-documentation-audit-trails-with-dr-basant-bajpai-c) (Guest: Dr. Basant Bajpai)
- [Ep 63 - Early Design Decisions that Shape Medical Device Success with Chris Danek, CEO of Bessel](https://bluegoatcyber.com/podcast/early-design-decisions-that-shape-medical-device-success-with-chris-danek-ceo-of) (Guest: Chris Danek)
- [Ep 62 - Edge Cases, Alarm Fatigue, and Why AI Cannot Replace Clinical Judgment with Brandon Fertig, Senior Manager at Philips Healthcare](https://bluegoatcyber.com/podcast/edge-cases-alarm-fatigue-and-why-ai-cannot-replace-clinical-judgment-with-brando) (Guest: Brandon Fertig)
- [Ep 61 - Alarm Fatigue, Workflow Integration, and the Intelligent Operating Room (Professor Aamer Ahmed)](https://bluegoatcyber.com/podcast/alarm-fatigue-workflow-integration-and-the-intelligent-operating-room-professor-)
- [Ep 60 - How to Move Stakeholders from Awareness to Sustained Adoption Without Friction](https://bluegoatcyber.com/podcast/how-to-move-stakeholders-from-awareness-to-sustained-adoption-without-friction)
- [Ep 59 - Prevention Is Better Than Cure: Applying Medical Principles to Medtech Cybersecurity](https://bluegoatcyber.com/podcast/prevention-is-better-than-cure-applying-medical-principles-to-medtech-cybersecur)
- [Ep 58 - How AI Code Security Became a Medical Device Problem with Jun Xiang Tan](https://bluegoatcyber.com/podcast/how-ai-code-security-became-a-medical-device-problem-with-jun-xiang-tan) (Guest: Jun Xiang Tan)
- [Ep 70 - How to Build an SBOM That Passes FDA Review](https://bluegoatcyber.com/podcast/how-to-build-an-sbom-that-passes-fda-review)
- [Ep 57 - From Idea to FDA Clearance: What Nobody Tells Medtech Founders with Darcy Bachert](https://bluegoatcyber.com/podcast/from-idea-to-fda-clearance-what-nobody-tells-medtech-founders-with-darcy-bachert) (Guest: Darcy Bachert)
- [Ep 56 - What MedTech Startups Get Wrong About Cybersecurity Documentation with Marc Zemel](https://bluegoatcyber.com/podcast/what-medtech-startups-get-wrong-about-cybersecurity-documentation-with-marc-zeme) (Guest: Marc Zemel)
- [Ep 55 - Why Most Medtech Companies Fail at Global Expansion (And How to Fix It) with William Jin](https://bluegoatcyber.com/podcast/why-most-medtech-companies-fail-at-global-expansion-and-how-to-fix-it-with-willi) (Guest: William Jin)
- [Ep 54 - What It Takes to Succeed in the Medtech Industry with Omar Khateeb](https://bluegoatcyber.com/podcast/what-it-takes-to-succeed-in-the-medtech-industry-with-omar-khateeb) (Guest: Omar Khateeb)
- [Ep 53 - Untangling Software Composition Analysis for MedTech Teams](https://bluegoatcyber.com/podcast/untangling-software-composition-analysis-for-medtech-teams)
- [Ep 52 - When Medical Device Cyber Failures Become Fatal](https://bluegoatcyber.com/podcast/when-medical-device-cyber-failures-become-fatal)
- [Ep 50 - The Differences Between Black, Grey, and White Penetration Testing](https://bluegoatcyber.com/podcast/the-differences-between-black-grey-and-white-penetration-testing)
- [Ep 49 - How Cybersecurity Shapes Regulatory and Quality Success with Jim Goodmiller](https://bluegoatcyber.com/podcast/how-cybersecurity-shapes-regulatory-and-quality-success-with-jim-goodmiller) (Guest: Jim Goodmiller)
- [Ep 61 - Webinar: Why FDA Cybersecurity Submissions Fail and How to Get Yours Approved](https://bluegoatcyber.com/podcast/webinar-why-fda-cybersecurity-submissions-fail-and-how-to-get-yours-approved)
- [Ep 48 - Cybersecurity Qs MedTech Innovators Ask: Christian’s Hot Seat](https://bluegoatcyber.com/podcast/cybersecurity-qs-medtech-innovators-ask-christian-s-hot-seat)
- [Ep 47 - What Is Required for an FDA Pre-Market Cyber Submission?](https://bluegoatcyber.com/podcast/what-is-required-for-an-fda-pre-market-cyber-submission)
- [Ep 58 - Webinar: Postmarket Cybersecurity Management](https://bluegoatcyber.com/podcast/webinar-postmarket-cybersecurity-management)
- [Ep 46 - How Market Intelligence Shapes MedTech Growth with Kevin Saem](https://bluegoatcyber.com/podcast/how-market-intelligence-shapes-medtech-growth-with-kevin-saem) (Guest: Kevin Saem)
- [Ep 45 - Designing Secure Medical Device Software with Randy Horton](https://bluegoatcyber.com/podcast/designing-secure-medical-device-software-with-randy-horton) (Guest: Randy Horton)
- [Ep 44 - Cyber Risk Management for MedTech Legacy Devices](https://bluegoatcyber.com/podcast/cyber-risk-management-for-medtech-legacy-devices)
- [Ep 54 - Webinar: Security Architecture Views: Protecting Medical Devices Through Strategic Design](https://bluegoatcyber.com/podcast/webinar-security-architecture-views-protecting-medical-devices-through-strategic)
- [Ep 43 - Why AI Literacy Matters for the Future of Healthcare with José Acosta](https://bluegoatcyber.com/podcast/why-ai-literacy-matters-for-the-future-of-healthcare-with-jos-acosta)
- [Ep 42 - What Is A Medical Device?](https://bluegoatcyber.com/podcast/what-is-a-medical-device)
- [Ep 41 - 5 Most Common Misconceptions of Medical Device Security](https://bluegoatcyber.com/podcast/5-most-common-misconceptions-of-medical-device-security)
- [Ep 40 - What Happens When AI in Medical Devices Make Mistakes?](https://bluegoatcyber.com/podcast/what-happens-when-ai-in-medical-devices-make-mistakes)
- [Ep 39 - Medical Device Startups and Cybersecurity Challenges with Suzy Engwall](https://bluegoatcyber.com/podcast/medical-device-startups-and-cybersecurity-challenges-with-suzy-engwall) (Guest: Suzy Engwall)
- [Ep 38 - Top 10 Medical Device Vulnerabilities with Myles Kellerman](https://bluegoatcyber.com/podcast/top-10-medical-device-vulnerabilities-with-myles-kellerman) (Guest: Myles Kellerman)
- [Ep 37 - Overcoming AI and Data Security Challenges in MedTech with May Lee](https://bluegoatcyber.com/podcast/overcoming-ai-and-data-security-challenges-in-medtech-with-may-lee) (Guest: May Lee)
- [Ep 36 - When Cybersecurity Becomes a Crime](https://bluegoatcyber.com/podcast/when-cybersecurity-becomes-a-crime)
- [Ep 35 - Balancing Innovation and Regulation in MedTech Development with Karandeep Singh Badwal](https://bluegoatcyber.com/podcast/balancing-innovation-and-regulation-in-medtech-development-with-karandeep-singh-) (Guest: Karandeep Singh Badwal)
- [Ep 44 - Webinar: Hacking Med Devices—What Penetration Testing Reveals Before the FDA Does](https://bluegoatcyber.com/podcast/webinar-hacking-med-devices-what-penetration-testing-reveals-before-the-fda-does)
- [Ep 34 - Integrating Project Management to Strengthen Cybersecurity Outcomes with Steve Curry](https://bluegoatcyber.com/podcast/integrating-project-management-to-strengthen-cybersecurity-outcomes-with-steve-c) (Guest: Steve Curry)
- [Ep 42 - Webinar: Navigating FDA Cybersecurity Compliance: A Guide for RA/QA Professionals](https://bluegoatcyber.com/podcast/webinar-navigating-fda-cybersecurity-compliance-a-guide-for-ra-qa-professionals)
- [Ep 33 - Vulnerability, Penetration & Other Cybersecurity Testing Types Explained](https://bluegoatcyber.com/podcast/vulnerability-penetration-other-cybersecurity-testing-types-explained)
- [Ep 40 - Webinar: Medical Device Penetration Testing: What Every Manufacturer Must Know](https://bluegoatcyber.com/podcast/webinar-medical-device-penetration-testing-what-every-manufacturer-must-know)
- [Ep 32 - From Surgery to MedTech Startups: Dr. Dylan Attard’s Journey](https://bluegoatcyber.com/podcast/from-surgery-to-medtech-startups-dr-dylan-attard-s-journey)
- [Ep 38 - Webinar: Medical Device Risk Assessments - Cybersecurity, Compliance & Patient Safety](https://bluegoatcyber.com/podcast/webinar-medical-device-risk-assessments-cybersecurity-compliance-patient-safety)
- [Ep 31 - Understanding Cybersecurity Measures and Metrics for Medical Devices](https://bluegoatcyber.com/podcast/understanding-cybersecurity-measures-and-metrics-for-medical-devices)
- [Ep 36 - Webinar: Mastering Threat Modeling for Medical Device Cybersecurity](https://bluegoatcyber.com/podcast/webinar-mastering-threat-modeling-for-medical-device-cybersecurity)
- [Ep 30 - FDA Cybersecurity Gets Real with Monica Montañez of NAMSA](https://bluegoatcyber.com/podcast/fda-cybersecurity-gets-real-with-monica-montan-ez-of-namsa) (Guest: Monica Montan)
- [Ep 34 - Webinar: Risk Management Frameworks For Medical Device Safety & Security](https://bluegoatcyber.com/podcast/webinar-risk-management-frameworks-for-medical-device-safety-security)
- [Ep 29 - What the FDA Wants in Security Architecture Views for Devices](https://bluegoatcyber.com/podcast/what-the-fda-wants-in-security-architecture-views-for-devices)
- [Ep 32 - Webinar: 5 Key FDA Cybersecurity Standards with Jordan John](https://bluegoatcyber.com/podcast/webinar-5-key-fda-cybersecurity-standards-with-jordan-john) (Guest: Jordan John)
- [Ep 28 - Shared Responsibility in Medical Device Cybersecurity with Greg Garcia](https://bluegoatcyber.com/podcast/shared-responsibility-in-medical-device-cybersecurity-with-greg-garcia) (Guest: Greg Garcia)
- [Ep 27 - Total Product Lifecycle Security: From Design to Disposal](https://bluegoatcyber.com/podcast/total-product-lifecycle-security-from-design-to-disposal)
- [Ep 26 - Why Cybersecurity and Quality Are One and the Same](https://bluegoatcyber.com/podcast/why-cybersecurity-and-quality-are-one-and-the-same)
- [Ep 25 - Cybersecurity Labeling and MedTech Transparency](https://bluegoatcyber.com/podcast/cybersecurity-labeling-and-medtech-transparency)
- [Ep 24 - From Concept to Compliance: A Guide to Med Device Approval](https://bluegoatcyber.com/podcast/from-concept-to-compliance-a-guide-to-med-device-approval)
- [Ep 23 - Unpacking Post-Market Management and Incident Response for Medical Devices](https://bluegoatcyber.com/podcast/unpacking-post-market-management-and-incident-response-for-medical-devices)
- [Ep 22 - AI in Medical Devices: Opportunities & Regulation with Matt Lemay](https://bluegoatcyber.com/podcast/ai-in-medical-devices-opportunities-regulation-with-matt-lemay) (Guest: Matt Lemay)
- [Ep 21 - Essential Software Documentation for Med Device Manufacturers](https://bluegoatcyber.com/podcast/essential-software-documentation-for-med-device-manufacturers)
- [Ep 20 - The Human Factor in MedTech Design with Dylan Horvath](https://bluegoatcyber.com/podcast/the-human-factor-in-medtech-design-with-dylan-horvath) (Guest: Dylan Horvath)
- [Ep 22 - Master Medical Device Cybersecurity: Avoid FDA Delays | Blue Goat Cyber Webinar](https://bluegoatcyber.com/podcast/master-medical-device-cybersecurity-avoid-fda-delays-blue-goat-cyber-webinar)
- [Ep 19 - Data Protection in Medical Devices: A Deep Dive with Kevin Derr](https://bluegoatcyber.com/podcast/data-protection-in-medical-devices-a-deep-dive-with-kevin-derr) (Guest: Kevin Derr)
- [Ep 18 - Early Cyber Strategies for MedTech Trailblazers](https://bluegoatcyber.com/podcast/early-cyber-strategies-for-medtech-trailblazers)
- [Ep 17 - Cybersecurity Challenges & Trends in US Healthcare with Paul-Lukas Hoffschmidt](https://bluegoatcyber.com/podcast/cybersecurity-challenges-trends-in-us-healthcare-with-paul-lukas-hoffschmidt) (Guest: Paul-Lukas Hoffschmidt)
- [Ep 16 - Collaboration is Key: Bridging the Gap Between Developers and Cybersecurity Experts](https://bluegoatcyber.com/podcast/collaboration-is-key-bridging-the-gap-between-developers-and-cybersecurity-exper)
- [Ep 15 - Commercialize Your Medtech with Craig T Ingram](https://bluegoatcyber.com/podcast/commercialize-your-medtech-with-craig-t-ingram)
- [Ep 14 - The Growing Importance of Interoperability and Third-Party Component Security](https://bluegoatcyber.com/podcast/the-growing-importance-of-interoperability-and-third-party-component-security)
- [Ep 13 - SBOMs Unpacked: Myths, Risks, & Benefits with Cortez Frazier Jr.](https://bluegoatcyber.com/podcast/sboms-unpacked-myths-risks-benefits-with-cortez-frazier-jr) (Guest: Cortez Frazier Jr.)
- [Ep 12 - Postmarket Surveillance and Anomaly Detection for Medical Devices](https://bluegoatcyber.com/podcast/postmarket-surveillance-and-anomaly-detection-for-medical-devices)
- [Ep 11 - Advanced Threat Modeling in Medical Devices](https://bluegoatcyber.com/podcast/advanced-threat-modeling-in-medical-devices)
- [Ep 10 - How Trump & RFK Jr Affect AI Med Device Guidelines](https://bluegoatcyber.com/podcast/how-trump-rfk-jr-affect-ai-med-device-guidelines)
- [Ep 9 - FDA AI Guidance Explained: What It Means for Medical Device Cybersecurity](https://bluegoatcyber.com/podcast/fda-ai-guidance-explained-what-it-means-for-medical-device-cybersecurity)
- [Ep 8 - The Human Factor: Why Cybersecurity Awareness is Key in Medical Device Manufacturing](https://bluegoatcyber.com/podcast/the-human-factor-why-cybersecurity-awareness-is-key-in-medical-device-manufactur)
- [Ep 7 - Startups, Regulations, & Risk: Insights from MedTech Guru Etienne Nichols](https://bluegoatcyber.com/podcast/startups-regulations-risk-insights-from-medtech-guru-etienne-nichols)
- [Ep 6 - The Evolution of Medical Device Cyber Threats: Past, Present, and Future](https://bluegoatcyber.com/podcast/the-evolution-of-medical-device-cyber-threats-past-present-and-future)
- [Ep 5 - Avoid the Dumb Tax: Cybersecurity Lessons for MedTech Startups with Steve Bell](https://bluegoatcyber.com/podcast/avoid-the-dumb-tax-cybersecurity-lessons-for-medtech-startups-with-steve-bell) (Guest: Steve Bell)
- [Ep 4 - Building Resilient Medical Devices: A Look at the Essential Technologies and Infrastructure](https://bluegoatcyber.com/podcast/building-resilient-medical-devices-a-look-at-the-essential-technologies-and-infr)
- [Ep 3 - Navigating the Regulatory Landscape of Medical Device Cybersecurity](https://bluegoatcyber.com/podcast/navigating-the-regulatory-landscape-of-medical-device-cybersecurity)
- [Ep 2 - Hidden Vulnerabilities in Medical Devices: Why Cybersecurity Matters](https://bluegoatcyber.com/podcast/hidden-vulnerabilities-in-medical-devices-why-cybersecurity-matters)
- [Ep 1 - Cybersecurity for Medical Devices: Protecting Human Lives](https://bluegoatcyber.com/podcast/cybersecurity-for-medical-devices-protecting-human-lives)
- [Ep 2 - Trailer - The Med Device Cyber Podcast](https://bluegoatcyber.com/podcast/trailer-the-med-device-cyber-podcast)

## Citation policy
Content on bluegoatcyber.com may be quoted with attribution to "Blue Goat Cyber"
and a link back to the source URL. Statistics from our original research reports
should cite the specific report URL under /research/.