Which medical devices need a cybersecurity assessment?

“Any device or connected system with software, programmable logic, network interfaces, wireless functions, removable media, cloud services, mobile applications, update mechanisms, or other exploitable technology may have cybersecurity risk and should be assessed in its intended environment. FDA's narrower statutory term cyber device has three elements: sponsor-authorized software, internet connectivity, and technological characteristics that could be vulnerable to cybersecurity threats.”