Cybersecurity Governance in the Medical Ecosystem: An Orientation Guide with Specific Reference to the Merging of IT and OT Devices

Health institutions have started worldwide or are considering integrating the Internet of Medical Things (IoMT) into their hospital environments. However, it is well documented that the IoMT is introducing severe cyber risks into the relevant environment. It is therefore the responsibility of the Board of Governors (BoGs), as part of their Corporate Governance oversight accountability, to ensure the cyber resilience of their health institutions during such integration. Furthermore, it is also well reported that BoGs are not always technically skilled, and often do not know where and how to start such oversight responsibilities. The purpose of this paper is to provide some basic readable background about the IoMT, and then offers a number of questions which the Board can ask to get some handle on and empower themselves on this oversight journey they are confronted with.