{"id":16253,"date":"2024-05-29T19:35:08","date_gmt":"2024-05-29T10:35:08","guid":{"rendered":"https:\/\/kohyoung.com\/en\/?page_id=16253"},"modified":"2024-05-29T19:51:43","modified_gmt":"2024-05-29T10:51:43","slug":"about-pss","status":"publish","type":"page","link":"https:\/\/kohyoung.com\/en\/about-pss\/","title":{"rendered":"Product Security"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Product Security<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Product & Solutions Security at Koh Young Technology<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

<\/p>\n

PSSO Message<\/span><\/p><\/div><\/div><\/div><\/div><\/div>

One of the most important concerns affecting the business is cybersecurity. At Koh Young Technology, we continue to be dedicated to security through design, development, use, and cooperation. To enable our customers to concentrate on what really matters: patient care, we work hard to ensure that our products, systems, and customer environments uphold security standards.<\/p>

While we continue to follow security measures, we are aware that new security risks appear every day, ranging from concerted attempts to breach healthcare data to coordinated attempts to interfere with clinical or manufacturing workflows. We understand that what our customers don’t know cannot be protected. Because of this, we think cooperation and transparency are crucial. We’re enhancing cybersecurity and resilience across the sector as we forge a solid community of practice, cooperating closely with our clients, industry regulators, and security researchers.<\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

Our Top Concerns<\/span><\/p><\/div><\/div><\/div><\/div><\/div>

Design & Development Security<\/span>
Industry-leading cybersecurity standards are used in the development of Koh Young products and solutions in order to ensure their security.<\/span><\/p><\/div><\/div><\/div><\/div>

Use Security<\/span>
Koh Young Technology products and solutions are protected and kept up to date across all platforms and locations for the duration of their intended life cycles.<\/span><\/p><\/div><\/div><\/div><\/div>

Cooperation Security<\/span>
To develop industry best practices, Koh Young Technology upholds a culture of openness and cooperation with customers, industry stakeholders, and reputable third parties. Contact <\/span>productsecurity@kohyoung.com<\/span><\/a>. Koh Young Technology maintains an ISAO membership per FDA guidelines for medical device coordinated vulnerability disclosures, contact <\/span>https:\/\/members.medisao.com\/vulnerability_disclosure\/.<\/span><\/a> <\/span><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

Our Framework<\/span><\/p><\/div><\/div><\/div><\/div><\/div>

Koh Young Product & Solution Security Framework<\/span><\/p>

Koh Young Technology integrates cybersecurity into product design, development, manufacturing, customer support, and enterprise systems processes. <\/span><\/p>

For industrial products, cybersecurity integration is based on ISA\/IEC 62443 intended for Industrial Automation and Control Systems (IACS). These standards are designed to help organizations secure their industrial operational technology and control system from cyber threats. <\/span><\/p>

For medical products, cybersecurity integration is based on a variety of industry work products, including FDA’s pre and post market guidance, the Healthcare & Public Health Sector Coordinating Councils (HSCC) Medical Device and Health IT Joint Security Plan (JSP), the Medical Device Innovation Consortium (MDIC) threat modeling playbook, the National Institute of Standards and Technology (NIST) Cybersecurity Framework, the International Organization for Standardization (ISO) 27001, 62443, and 80001 standards. <\/span><\/p>

 <\/p><\/div><\/div><\/div><\/div>

Koh Young Product & Solution Security Procedures<\/span>

The Product Security Risk Assessment includes a Threat Risk Assessment (TRA) encompassing the identification of potential threats, defining and prioritizing potential impacts, and determining countermeasures to mitigate the risk to an acceptable level. <\/span><\/p>

Design Input Requirements for Security are derived from TRA countermeasures as well as the respective business regulations. For Koh Young Technology products, <\/span><\/p>