Frameworks · Middle East
DESC EBMD Security Standard
The Dubai Electronic Security Center developed the Electronic Biomedical Devices (EBMD) Security Standard in collaboration with the Dubai Health Authority. Its purpose is to ensure that electronic biomedical devices in Dubai operate securely.
Who it applies to
It applies to healthcare providers in Dubai that operate connected biomedical devices, and to the manufacturers and service providers that supply and maintain them.
Main requirements
Device inventory & classification
Every connected biomedical device is identified, classified and assigned an owner.
Device security
Devices need authentication, secure configuration, patching within clinical constraints and correct network placement.
Data
The health information that devices capture and transmit is protected.
Supplier & lifecycle
Controls cover procurement, maintenance access and decommissioning for device suppliers.
How xmodo supports it
- 1
Biomedical devices are recorded in the asset register with their classification and owner, so the standard's controls are evidenced against real equipment.
- 2
Supplier maintenance access is managed in the third-party module, with each grant recorded.
- 3
Requirements map to the DHA NABIDH standards and ADHICS V2 for groups with facilities in Dubai and Abu Dhabi.
Related frameworks
DESC EBMD Security Standard shares requirements with the frameworks below. Controls you already run for any of them count towards DESC EBMD Security Standard as well.
Frequently asked questions
How does this relate to ADHICS?
ADHICS V2 is Abu Dhabi's health-sector standard and includes medical device security. The EBMD Standard is Dubai's device-specific standard from DESC and the DHA. A group with facilities in both emirates runs both standards on one control library.