GE Healthcare looks to Microsoft’s Model in revamping Security

GE Healthcare is modeling its product security program on Microsoft’s Trustworthy Computing and Secure Development Lifecycle (SD3), recruiting former Microsoft security staff and emphasizing threat modeling, "secure by design/default/deployment," and assigning security responsibility to business unit managers; the article frames this as a response to growing concerns about medical device vulnerabilities and cites recent industry disclosures as context.