Product Info

Vercise™ Deep Brain Stimulation Systems Information for Prescribers

92366224-01 26 of 29

Clinician Programmer Security

The Clinician Programmer (CP) is a hardened computer with the following security controls:

• Access to the CP is restricted to authorized users and the CP screen locks out if there is

no activity and may only be unlocked with a password to prevent unauthorized access.

• The CP Platform enforces a password lockout duration after a predened number of

unsuccessful login attempts.

• Only authorized incoming connections are allowed.

• The encrypted le system restricts access of the data in the le system to authorized

users only.

• Non‑whitelisted applications cannot be installed.

• All BSN applications are code signed so that any compromise to their integrity via USB

or other data channels may be detected and prevented from execution.

• User actions and login attempts are logged by the Windows Event Log.

• The CP logs and noties the user upon detection of malicious software.

Boston Scientic has developed a process to receive potential product security vulnerabilities from

external sources in order to validate their existence and determine how to best respond to improve

product security and safety. Please refer to the following webpage to report potential product

security vulnerabilities to the Boston Scientic Product Security team:

https://www.bostonscientic.com/en‑US/customer‑service/product‑security/responsible‑disclosure.

html