MDS2 (Medical Device)

Data protection, connectivity and service capabilities (2.3.8, 2.3.9, 2.3.11, 2.3.13, 2.3.14, 2.3.16, 2.3.21 to 2.3.25) – MDS2 (Medical Device)

MDS2 (Medical Device) OTHR: OTHR Other security considerations: disclose security risks and controls not covered elsewhere, compensating controls included

A section for the manufacturer to enter security risk considerations or controls, compensating controls included, that are not categorised elsewhere in the form.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Data protection, connectivity and service capabilities (2.3.8, 2.3.9, 2.3.11, 2.3.13, 2.3.14, 2.3.16, 2.3.21 to 2.3.25) – MDS2 (Medical Device)

CONN CONN Connectivity capabilities: disclose every wireless, physical and network connection, protocol, API and internet dependency
DIDT DIDT Health data de-identification: disclose the device's built-in de-identification and the standard it follows
DTBK DTBK Data backup and disaster recovery: disclose where data lives long-term and how data, configuration and software are backed up and restored
IGAU IGAU Health data integrity and authenticity: disclose integrity checks and fault protection for stored health data
NAUT NAUT Node authentication: disclose mutual authentication of communicating nodes, network access control and certificate use
PLOK PLOK Physical locks: disclose whether PII-bearing components and removable media are physically secured
RMOT RMOT Remote service: disclose remote service connections, who initiates them, session indication, patient data visibility and other remote functions
STCF STCF Health data storage confidentiality: disclose encryption of stored data, its coverage and defaults, key management and database location

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All MDS2 (Medical Device) controls