This is a huge issue for us hospital CIOs. The device manufacturers claim that they cannot retrofit the numerous devices in the field as, besides being cost-prohibitive, they simply weren't designed to have such capability. The FDA says it understands the issue but will take 18-24 months to release updated guidelines. In the meantime, we must institute our own countermeasures, like segmentation of the medical device network (e.g., separate VLAN with its own firewall). Hopefully part 2 of this blog provides some other options.