RCCE Course
Course #381

Essentials of Medical devices

📊 Level: Beginner
⏱️ Duration: 2 Days
🏷️ Track: OT Security
📋 Prerequisites: None
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn medical device cybersecurity including FDA premarket and postmarket guidance, medical device network security, legacy device protection, clinical network segmentation, and healthcare IoT security. RCCE students will learn to assess medical device cybersecurity risks in clinical environments, implement network segmentation to isolate medical devices from general IT networks, manage legacy medical device vulnerabilities without disrupting patient care, comply with FDA cybersecurity guidance and HIPAA security requirements, monitor medical device communications for anomalies, coordinate vulnerability disclosure with device manufacturers, and respond to cybersecurity incidents affecting medical devices while maintaining patient safety. This essentials course covers the core knowledge needed to operate competently in this domain. Starting from foundational concepts, RCCE students will learn the fundamental concepts, terminology, risks, and defenses that form the foundation for all further study and professional practice. Students build a solid knowledge base that prepares them for more advanced courses and real-world security responsibilities.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Essentials of Medical devices
🧠 What You Will Learn
  • Explain Course Overview fundamentals
  • Execute hands-on tasks for what you will learn — covering Skills You Will Gain.
  • Execute hands-on tasks for healthcare iot security essentials — covering Skills You Will Gain.
  • Execute hands-on tasks for what are medical devices?
  • Execute hands-on tasks for class i - low risk — covering Tongue depressors, bandages, Infusion pumps, CT scanners.
  • Execute hands-on tasks for class iii - high risk — covering Tongue depressors, bandages.
  • Execute hands-on tasks for the connected medical device ecosystem
  • Execute hands-on tasks for infusion pumps
  • Monitor and audit privilege usage; detect escalation attempts
  • Execute hands-on tasks for imaging systems
  • Execute hands-on tasks for lab equipment
  • Execute hands-on tasks for building systems
📚 Course Outline
Module 01Course Overview
Module 02What You Will Learn
Module 03Healthcare IoT security essentials
Module 04What Are Medical Devices?
Module 05Class I - Low Risk
Module 06Class III - High Risk
Module 07The Connected Medical Device Ecosystem
Module 08Infusion Pumps
Module 09Patient Monitors
Module 10Imaging Systems
Module 11Lab Equipment
Module 12Building Systems
Module 13Why Medical Device Cybersecurity Matters
Module 14Patient Safety Risks
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice essentials of medical devices by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Explain Course Overview fundamentals
  • Lab 2: Execute hands-on tasks for what you will learn
  • Lab 3: Execute hands-on tasks for healthcare iot security essentials
  • Lab 4: Execute hands-on tasks for what are medical devices?
  • Lab 5: Execute hands-on tasks for class i - low risk
📊 Skill Level
Beginner
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Essentials of Medical devices, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI