{{modelList[0].title}}

Governance Structure and Policy

Through streamlining the strategic decision-making and policy implementation process, we established clear accountability and communication channels.

Risk Management Framework

A robust risk management framework is the cornerstone of Mindray's cybersecurity strategy, enabling us to identify, assess, and mitigate potential cybersecurity vulnerabilities in a systematic manner throughout the product lifecycle.

Regulatory and Internal Requirement Compliance Monitoring

At Mindray, regulatory compliance monitoring is a critical component of our cybersecurity strategy, ensuring that the internal standards align with the regulatory requirements and industry expectations.

{{modelList[1].title}}

Security by Design

Security by Design is Mindray's foundational ideology that integrates security principles and requirements from the very beginning and throughout every stage of product development.

Secure Coding Practice and Quality Controls

Building on the principles of Security by Design, we have established comprehensive and systematic secure coding standards based on International Electronic Commission (IEC) standards, industry best practices, and our extensive software development experiences.
We regard process control and quality assurance standards as key parts of secure coding.
We emphasize continuous improvement and knowledge sharing among its developers.

Security Assessment & Testing

Together with secure coding practices, Mindray conducts robust security assessment and testing to ensure that potential vulnerabilities are identified and mitigated, and implemented security measures are tested and validated.

{{modelList[2].title}}

Access Control

Our medical devices are equipped with role-based access control (RBAC) functionality, which assigns access permissions based on the roles of individual users within the organization. Locking mechanism, automatic logout, password management, WiFi authentication, centralized and secure authentication, controlled major configuration changes are several additional protective measures to further enhance access security.

System Hardening and Configuration Controls

System hardening is another critical step to fortify our devices through minimizing the attack surface. Key components of Mindray's system hardening practices, though may vary by model, include Operating System (OS) Hardening Guideline, Application & Process Whitelisting, Anti-Virus and Malware Programs, Firewall, Disabling Unnecessary Risk Vectors, Kiosk Mode, Controlled OS and Software Upgrades.

Transparent Information Sharing

We strive to relentlessly improve our commitment to maintain transparency on the security measures implemented in our devices. Our key efforts to promote transparency include but not limited to: Cybersecurity Whitepapers, Product User Manuals, Manufacturer Disclosure Statement for Medical Device Security (MDS2), Software Bill of Materials (SBOM), Assisting with Deployment Plans.

{{modelList[3].title}}

Post-Market Vulnerability & Patch Management

Mindray products use third-party operating systems (OS), such as Microsoft Windows and Linux. To ensure the use of these OS do not pose any risks, we developed a comprehensive patch management strategy to continuously monitor relevant vulnerabilities, assess their impact on our devices, and deploy patches to address these issues.

End-Of-Life & Decommissioning Support

We proactively provide customers with detailed End-Of-Life (EOL) letters when a product is reaching the end of its serviceable life.
We assist and enable healthcare providers to securely decommission devices through providing in-person guidance or user manuals on secure disposal practices, such as instructions on data wiping procedure.