Abstract:Omar Kheir, Alexis Jacoby, Stijn Verwulgen Product Development, University of Antwerp, Antwerp, Belgium Correspondence: Omar Kheir, Email Introduction: Whilst risk management has become fundamental in the development of medical devices, enforced by regulations and international standards, there is still no comprehensive model that explains how risk management in medical devices' development should be tackled, especially with regard to the type of risks that should be addressed. Risk management in the medical devices' development field is currently focused on technical risks, comprising product, usability, and development process risks, in alignment with standards' requirements and regulations, without giving enough attention to non-technical risks, which include business and project risks. Start-ups within this heavily regulated domain have a key role in the innovation process, yet they suffer a structural lack of tangible, such as financial capacity, and intangible resources such as development, risk management, and regulations' compliance. Nonetheless, they can still optimize their risk identification coverage beyond the enforced requirements to increase their products' chances of success. Methods: A set of qualitative interviews, serving the adopted grounded theory building research method, with seven start-ups who are involved in the development, commercialization, and quality control of medical devices was accomplished. The purpose was to determine the applied risk management practices and most importantly identify the risk types covered by them. Since every start-up is a project by itself, a sample of project risks, as identified by the project management institute, was utilized to scope the risk coverage and flag missing non-technical risks by the participating start-ups. Results: Un-identified risk types, lack of involvement of the right teams, and other related loopholes were presented. Discussion: A list of requirements was developed and sketched in a user-friendly risk management framework, which is believed to be crucial in helping start-ups attain successful, safe, and regulatory compliant medical devices production, is shared in the discussion and proposed framework section of this paper. Keywords: medical devices, product development, process, risk management, risk identification, risk types, risk framework, start-ups Risk management (RM) has been recently confirmed as a new success factor in the medical devices development (MDD) industry with a growing importance that previous studies on MDD success factors did not emphasize on. 1 The trending digitization of medical devices imposes a new horizon of risks that may have not been thoroughly considered before. Security risks resulting from intentional threats have only recently been confirmed, as medical devices increasingly use newer information and communication technologies (ICT) such as wireless communication and Internet access. 2 Such associated risks necessitate a more thorough RM framework that would ensure wider risk coverage because if they remain unknown, without suitable countermeasures, further data breaches and even malicious attacks may occur threatening the lives of patients, jeopardizing their information in terms of confidentiality, integrity, and availability, and not to mention hindering the success of MDD projects. MDD firms are frequently recalling devices from the market due to product quality failure, impacting almost all the key participants of the medical device supply chain. 3 According to Thirumalai and Sinha, 3 the core reasons behind these failures can be related to manufacturing defects, functional defects, packaging errors, and software glitches, which poses a potential health risk to the patients and personnel using these devices. A recent study by Kamisetti 29 investigates 21 medical devices that were recalled in the United States due to sensible risk which may lead to serious health problems or even death. Therefore, for MDD firms to overcome such potential failures and maximize their projects' success, it is crucial to pinpoint the factors that systematically increase the likelihood of the triggering risks at the early development stages. Therefore, considering the significant impact MDD can reflect on human lives as well as the struggle of MDD start-ups in specific, the scope of RM in MDD among start-ups shall be thoroughly investigated to enhance risk detection and timely mitigation. This paper will tackle this investigation in effort to extend an RM framework that would cater for the gaps that this study will reveal. Start-ups in the domain of MDD seek compliance to regulations, such as the European Union's MDD directives and regulations as well as the FDA requirements i -Abstract Truncated-

Consideration of Cybersecurity Risks in the Benefit-Risk Analysis of Medical Devices: Scoping Review

Cardiac implantable electronic devices and cybersecurity

Cybersecurity and medical devices: A practical guide for cardiac electrophysiologists

Security and privacy qualities of medical devices: an analysis of FDA postmarket surveillance

New Cybersecurity Requirements for Medical Devices in the EU: The Forthcoming European Health Data Space, Data Act, and Artificial Intelligence Act

How AI challenges the medical device regulation: patient safety, benefits, and intended uses

A New Methodology for Information Security Risk Assessment for Medical Devices and Its Evaluation

A Review of Biomedical Devices: Classification, Regulatory Guidelines, Human Factors, Software as a Medical Device, and Cybersecurity

Improved clinical investigation and evaluation of high-risk medical devices: the rationale and objectives of CORE–MD (Coordinating Research and Evidence for Medical Devices)

Towards an evaluation framework for medical device-integrated electronic medical record

Law-based and standards-oriented approach for privacy impact assessment in medical devices: a topic for lawyers, engineers and healthcare practitioners in MedTech

Evaluating applied security controls for safeguarding medical device‐integrated electronic medical records

Embracing Cybersecurity Risk Management in the Industry of Medical Devices

Artificial intelligence in medical device software and high-risk medical devices – a review of definitions, expert recommendations and regulatory initiatives

Risk Identification and Analysis in the Development of Medical Devices Among Start-Ups: Towards a Broader Risk Management Framework

Clinical Simulation in the Regulation of Software as a Medical Device: An eDelphi Study

Towards cyber-biosecurity by design: an experimental approach to Internet-of-Medical-Things design and development

A review of the literature on the new European Medical Device Regulations requirements for increased clinical evaluation

Cybersecurity of AI medical devices: risks, legislation, and challenges

Patient Perspectives and Preferences for Consent in the Digital Health Context: State-of-the-art Literature Review

Methodological guidelines and publications of benefit-risk assessment for health technology assessment: a scoping review