This workshop equips healthcare technology teams with practical strategies to secure connected medical devices against emerging quantum threats.
A hospital trust operating a modern estate has several thousand connected devices. Infusion pumps, ventilators, pacemakers, insulin delivery systems, imaging equipment, wearable monitors. Every device that communicates over a network uses cryptography. Most of that cryptography is RSA or ECC, implemented in firmware that was written years ago and certified against a specific algorithm suite that cannot be changed without regulatory re-approval. That is not a future problem. It is a current liability, because adversaries are harvesting device communications traffic now with the intention of decrypting it once quantum capability arrives.
The FDA made cryptographic agility a premarket submission requirement in its June 2025 final guidance, the third iteration of its medical device cybersecurity framework. Under FD&C Act Section 524B, FDA now has authority to refuse device submissions lacking cryptographic resilience planning. For NHS trusts and private hospital groups managing existing device fleets, the question is sequencing: which devices present the highest quantum cryptographic risk, and how do you build a remediation programme that does not disrupt clinical operations? This workshop provides the risk triage framework, covers the regulatory requirements across US, UK, and EU jurisdictions (including the post-Brexit divergence between MHRA and EU MDR/IVDR), and works through the practical constraints of deploying lightweight PQC algorithms on resource-limited embedded systems.
Half-day session structure with a scheduled break. Content is configurable to your team's technical level and device estate composition.
| # | Session | Topics |
|---|---|---|
| 1 | The Quantum Threat to Medical Devices What makes IoMT different from enterprise IT | |
| 2 | Device Fleet Risk Assessment Exercise Categorising your estate |
|
| Break, after 45 min | ||
| 3 | FDA June 2025 Guidance and FD&C Act 524B What has changed and what it means |
|
| 4 | PQC on Constrained Hardware What runs on medical device firmware |
|
| 5 | DICOM and PACS Quantum cryptographic exposure in radiology and imaging infrastructure |
|
| 6 | Fleet Remediation Roadmap Building a phased device migration plan |
|
| 7 | Q&A and Next Steps | |
Workshops are designed and delivered by QSECDEF in collaboration with sector specialists. All facilitators have direct experience in both quantum technologies and healthcare systems.
Workshop design and delivery
QSECDEF brings world-leading expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our advisory membership spans 600+ organisations and 1,200+ professionals working at the intersection of quantum technologies and critical infrastructure security.
Domain expertise and clinical validation
Healthcare-specific workshops are co-delivered with sector specialists who bring direct operational experience in NHS trusts, private hospital groups, pharmaceutical R&D, and medical device manufacturing. This ensures workshop content is grounded in regulatory, clinical, and operational realities.
Sessions are configured around your team's technical level, device estate composition, and regulatory jurisdiction. Get in touch to discuss requirements and schedule a date.
Contact Us