Meet Our Project Partner: University of Warwick

Connected healthcare only works if people can trust it. When medical devices and health apps share data across hospitals and homes, a cyber issue can affect patient safety, privacy, and day-to-day care. That is the problem we are tackling.

The University of Warwick (UoW) takes part in the EU-funded MedSecurance project. MedSecurance focuses on cybersecurity for connected medical devices and digital health services. Our work helps teams find risks early, decide what matters most, and keep clear evidence of what they checked and fixed.

At UoW, we mainly support the project through the Threat, Vulnerability and Risk Analysis (TVRA) work. In simple terms, TVRA is a structured way to understand what could go wrong, how likely it is, and what to do about it. We help turn this into a practical tool that fits real healthcare settings and can feed into the wider MedSecurance toolbox.

Our role focuses on:

• Build and improve the TVRA tool to spot likely threats, find weaknesses, and produce clear risk reports.

• Scan medical device environments using a tailored vulnerability-checking approach

  that fits common hospital network setups.

• Prioritise risks so teams can fix the most important issues first, instead of trying to doeverything at once.

• Share TVRA results with other toolbox parts so findings support wider review and assurance, not just a one-off report.

• Recommend practical fixes that help teams move from “what is wrong” to “what should we do next”.

• Align outputs with recognised good practice such as ISO/IEC 27001 by linking risks to controls and keeping evidence for security reviews.

In short, we help make cyber security work feel more like a normal part of safe care: find issues sooner, act on them faster, and show clearly what was done and why.