PLYMOUTH MEETING, PA—The threat of a cyberattack is enough to give any hospital leader nightmares. But what’s more concerning is that many health executives don’t know if their organization is fully prepared to prevent the damage levied by hackers, including device malfunctions, service disruptions, or patient data breaches.

ECRI Institute, the unbiased, independent leaders in medical device evaluation, announces a new Cybersecurity Gap Analysis service to help hospitals and health systems protect their medical devices from being used in a cyberattack against them.

The new service examines eight operational areas that hospitals often overlook, including identifying network-connected devices and their associated risks, managing the latest security patches for medical devices, prioritizing devices based on stored data and functionality, and ensuring that appropriate device security training is in place.

“As we’ve seen in the headlines, no hospital or health system of any size can afford to let their guard down when it comes to protecting themselves and their patients against hackers. Our gap analysis gives hospitals the opportunity to re-assess and re-adjust their medical device cybersecurity initiatives to better control their efforts to keep their data, devices, and patients safe,” says Robert P. Maliff, director, applied solutions group, ECRI Institute.

To learn more, please visit or contact ECRI Institute by telephone at (610) 825-6000, ext. 5655; by e-mail at; or by mail at 5200 Butler Pike, Plymouth Meeting, PA 19462-1298, USA.


Social sharing

  • .@ECRI_Institute’s new Cybersecurity Gap Analysis steers hospitals closer to a safer, more secure environment
  • Hospitals can fight the cybercrime swarm with @ECRI_Institute’s Cybersecurity Gap Analysis

About ECRI Institute

ECRI Institute (, a nonprofit organization, dedicates itself to bringing the discipline of applied scientific research to healthcare to discover which medical procedures, devices, drugs, and processes are best to enable improved patient care. As pioneers in this science for nearly 50 years, ECRI Institute marries experience and independence with the objectivity of evidence-based research. Strict conflict-of-interest guidelines ensure objectivity. ECRI Institute is designated an Evidence-based Practice Center by the U.S. Agency for Healthcare Research and Quality. ECRI Institute PSO is listed as a federally certified Patient Safety Organization by the U.S. Department of Health and Human Services. Find ECRI Institute on Facebook ( and on Twitter (

For more information, contact:
Laurie Menyo, Director of Public Relations and Marketing Communications
(610) 825-6000, ext. 5310