{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T20:58:39Z","timestamp":1791233919178,"version":"4.1.0"},"reference-count":32,"publisher":"JMIR Publications Inc.","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JMIR Res Protoc"],"abstract":"Abstract<\/jats:title>\n \n Background<\/jats:title>\n Remote patient monitoring (RPM) systems based on the Internet of Medical Things (IoMT) technologies are increasingly integrated into chronic disease management and telemedicine pathways. Despite their widespread adoption, cybersecurity performance, system resilience, and user behavior in real-world clinical environments remain underexplored. Existing evidence is fragmented, often limited to laboratory simulations or vendor-driven assessments, leaving a critical gap in understanding how cybersecurity risks across the full life cycle of RPM systems deployed in health care settings.<\/jats:p>\n <\/jats:sec>\n \n Objective<\/jats:title>\n This study aims to systematically analyze the cybersecurity posture, system resilience, and user behavior across the full life cycle of IoMT-enabled RPM systems in a real-world hospital and home-care environment. The study aims to generate empirical evidence on how technical safeguards, operational workflows, and human factors influence cybersecurity risks during procurement, integration, deployment, routine use, and decommissioning of these platforms.<\/jats:p>\n <\/jats:sec>\n \n Methods<\/jats:title>\n This observational study will analyze 2 independent RPM systems used for chronic disease monitoring in a real-world hospital setting. The assessment framework includes (1) system-log analytics to evaluate authentication events, device connectivity, update and patch management, and anomalous behaviors; (2) a controlled phishing simulation targeting health care professionals to assess susceptibility and response patterns; (3) an evaluation of update management processes and vendor-hospital interactions; (4) measurement of cybersecurity awareness and practices among patients and health care professionals using validated instruments; and (5) mapping of vulnerabilities across all life cycle phases, from procurement to decommissioning. Although the study includes cybersecurity training, preassessments\/postassessments, and controlled phishing and update-management scenarios, these activities are part of the observational framework and are not designed as experimental interventions that have an impact on the clinical aspects of patient care. Quantitative data will be analyzed using descriptive and inferential statistics, while qualitative insights from operational workflows will be integrated to contextualize system performance. Ethical approval has been obtained from the institutional ethics committee.<\/jats:p>\n <\/jats:sec>\n \n Results<\/jats:title>\n The CYMEDSEC (enhanced cybersecurity for networked medical devices through optimization of guidelines, standards, risk management, and security by design) project received funding from the European Union\u2019s Horizon Europe program (grant 101094218) and started on November 1, 2024. Ethical approval was obtained on December 18, 2025, and institutional authorization on January 29, 2026. Patient enrollment is scheduled to begin on April 1, 2026. At the time of paper submission, no patients were recruited. Data analysis will begin after completion of patient involvement, with results expected before the project end date in October 2027.<\/jats:p>\n <\/jats:sec>\n \n Conclusions<\/jats:title>\n This study will provide real-world evidence on the cybersecurity performance of IoMT-enabled RPM systems, capturing the interplay among technical safeguards, operational processes, and human factors. Findings are expected to support the development of security-by-design approaches, inform procurement and regulatory frameworks, and guide the safe integration of connected medical devices into routine care within the framework of the CYMEDSEC research project.<\/jats:p>\n <\/jats:sec>","DOI":"10.2196\/98934","type":"journal-article","created":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T20:24:56Z","timestamp":1791231896000},"page":"e98934-e98934","source":"Crossref","is-referenced-by-count":0,"title":["CYMEDSEC Cybersecurity Performance in Remote Patient Monitoring Systems in a Live Hospital Setting: Protocol for an Observational Study"],"prefix":"10.2196","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-5575-9865","authenticated-orcid":false,"given":"Michela","family":"Falcone","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5707-2158","authenticated-orcid":false,"given":"Francesco","family":"Giuliani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1997-1689","authenticated-orcid":false,"given":"Stephen","family":"Gilbert","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3323-2492","authenticated-orcid":false,"given":"Oscar","family":"Freyer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0068-9912","authenticated-orcid":false,"given":"Francesco","family":"Ricciardi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1010","published-online":{"date-parts":[[2026,10,5]]},"reference":[{"issue":"8","key":"R1","doi-asserted-by":"publisher","first-page":"105080","DOI":"10.1016\/j.jamda.2024.105080","article-title":"Remote vital sign monitoring in admission avoidance hospital at home: a systematic review","volume":"25","author":"Patel","journal-title":"J Am Med Dir Assoc"},{"key":"R2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSADL61749.2024.00120","article-title":"A comprehensive survey of IoT applications in remote patient monitoring, chronic disease management, and smart healthcare infrastructure","author":"Kavitha","journal-title":"Proc 3rd Int Conf Sentim Anal Deep Learn"},{"issue":"12","key":"R3","doi-asserted-by":"publisher","first-page":"2776","DOI":"10.1089\/tmj.2024.0521","article-title":"The promise of remote patient monitoring","volume":"30","author":"Holtz","journal-title":"Telemed J E Health"},{"issue":"1","key":"R4","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1089\/tmj.2016.0051","article-title":"Remote patient monitoring via non-invasive digital technologies: a systematic review","volume":"23","author":"Vegesna","journal-title":"Telemed J E Health"},{"key":"R5","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2015.2437951","article-title":"The Internet of Things for health care: a comprehensive survey","volume":"3","author":"Riazul Islam","journal-title":"IEEE Access"},{"key":"R6","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3382011","article-title":"Illuminating healthcare management: a comprehensive review of IoT-enabled chronic disease monitoring","volume":"12","author":"Talpur","journal-title":"IEEE Access"},{"issue":"7","key":"R7","doi-asserted-by":"publisher","first-page":"659","DOI":"10.1080\/17434440.2020.1782734","article-title":"Telehealth in chronic disease management and the role of the internet-of-medical-things: the Tholomeus\u00ae experience","volume":"17","author":"Omboni","journal-title":"Expert Rev Med Devices"},{"issue":"4","key":"R8","doi-asserted-by":"publisher","first-page":"789","DOI":"10.51542\/ijscia.v5i4.21","article-title":"The role of telemedicine in chronic disease management: a literature review","volume":"5","author":"Hidayat","journal-title":"Int J Sci Adv"},{"issue":"1","key":"R9","doi-asserted-by":"publisher","DOI":"10.1038\/s41746-024-01182-w","article-title":"A systematic review of the impacts of remote patient monitoring (RPM) interventions on safety, adherence, quality-of-life and cost-related outcomes","volume":"7","author":"Tan","journal-title":"NPJ Digit Med"},{"key":"R10","doi-asserted-by":"publisher","DOI":"10.2196\/68464","article-title":"Effects of remote patient monitoring on health care utilization in patients with noncommunicable diseases: systematic review and meta-analysis","volume":"13","author":"Smedslund","journal-title":"JMIR mHealth uHealth"},{"issue":"4","key":"R11","doi-asserted-by":"publisher","first-page":"100","DOI":"10.7812\/TPP\/23.022","article-title":"Benefits and challenges of remote patient monitoring as perceived by health care practitioners: a systematic review","volume":"27","author":"Serrano","journal-title":"Perm J"},{"key":"R12","doi-asserted-by":"publisher","DOI":"10.1109\/ETCM67548.2025.11304419","article-title":"IoMT device security: systematic review of threats, vulnerabilities, attacks and mitigation strategies","author":"Cruz-Gavilanez","journal-title":"IEEE 9th Ecuador Tech Chapters Meet (ETCM)"},{"issue":"1","key":"R13","doi-asserted-by":"publisher","first-page":"104","DOI":"10.51249\/jid.v7i01.2921","article-title":"A systematic review of cybersecurity attacks on medical devices","volume":"7","author":"Paes","journal-title":"J Interdiscip Debates"},{"key":"R14","doi-asserted-by":"publisher","DOI":"10.1016\/j.maturitas.2018.04.008","article-title":"Cybersecurity in healthcare: a narrative review of trends, threats and ways forward","volume":"113","author":"Coventry","journal-title":"Maturitas"},{"key":"R15","unstructured":"Postmarket management of cybersecurity in medical devices: guidance for industry and food and drug administration staff. US Food and Drug Administration; 2016. URL: https:\/\/www.fda.gov\/media\/95862\/download [Accessed 11-09-2026]"},{"key":"R16","doi-asserted-by":"publisher","DOI":"10.1109\/PDGC64653.2024.10984079","article-title":"Securing internet of medical things: exploring vulnerabilities and attack vectors","author":"Umesh","journal-title":"8th Int Conf Parallel Distrib Grid Comput (PDGC)"},{"key":"R17","doi-asserted-by":"publisher","DOI":"10.3233\/SHTI220970","article-title":"An overview on security and privacy of data in IoMT devices: performance metrics, merits, demerits, and challenges","volume":"299","author":"Khatiwada","journal-title":"Stud Health Technol Inform"},{"issue":"15","key":"R18","doi-asserted-by":"publisher","DOI":"10.3390\/s21155119","article-title":"Influence of human factors on cyber security within healthcare organisations: a systematic review","volume":"21","author":"Nifakos","journal-title":"Sensors (Basel)"},{"issue":"1","key":"R19","doi-asserted-by":"publisher","first-page":"024","DOI":"10.30574\/ijsra.2025.17.1.2734","article-title":"Human factor vulnerabilities in healthcare cybersecurity: mitigating insider threats in medical facilities","volume":"17","author":"Erukayenure","journal-title":"Int J Sci Res Arch"},{"key":"R20","doi-asserted-by":"publisher","DOI":"10.3233\/978-1-61499-488-6-215","article-title":"Workarounds to computer access in healthcare organizations: you want my password or a dead patient?","volume":"208","author":"Koppel","journal-title":"Stud Health Technol Inform"},{"issue":"3","key":"R21","doi-asserted-by":"publisher","first-page":"96","DOI":"10.2345\/0899-8205-55.3.96","article-title":"The case for medical device cybersecurity hygiene practices for frontline personnel","volume":"55","author":"Grimes","journal-title":"Biomed Instrum Technol"},{"issue":"3","key":"R22","doi-asserted-by":"publisher","first-page":"176","DOI":"10.4258\/hir.2017.23.3.176","article-title":"Prevalence of sharing access credentials in electronic medical records","volume":"23","author":"Hassidim","journal-title":"Healthc Inform Res"},{"key":"R23","doi-asserted-by":"publisher","DOI":"10.2196\/48220","article-title":"Evaluating staff attitudes, intentions, and behaviors related to cyber security in large Australian health care environments: mixed methods study","volume":"10","author":"Dart","journal-title":"JMIR Hum Factors"},{"key":"R24","unstructured":"Regulation (EU) 2017\/745 of the European Parliament and of the Council of 5 April 2017 on medical devices, amending Directive 2001\/83\/EC, Regulation (EC) No 178\/2002 and Regulation (EC) No 1223\/2009 and repealing Council Directives 90\/385\/EEC and 93\/42\/EEC. European Union; 2017. URL: https:\/\/eur-lex.europa.eu\/eli\/reg\/2017\/745\/oj\/eng [Accessed 11-09-2026]"},{"key":"R25","unstructured":"Digital investigation techniques: a NIST scientific foundation review. National Institute of Standards and Technology (NIST); 2022. URL: https:\/\/nvlpubs.nist.gov\/nistpubs\/ir\/2022\/NIST.IR.8354.pdf [Accessed 11-09-2026]"},{"issue":"3","key":"R26","doi-asserted-by":"publisher","first-page":"640","DOI":"10.3390\/jcp2030033","article-title":"Security and privacy management in internet of medical things (IoMT): a synthesis","volume":"2","author":"Hireche","journal-title":"J Cybersecur Priv"},{"issue":"5","key":"R27","doi-asserted-by":"publisher","first-page":"1439","DOI":"10.1108\/IJQRM-01-2025-0039","article-title":"An investigation of the current status quo of ISO 14971 risk management challenges in the medical device industry","volume":"43","author":"Nolan","journal-title":"Int J Qual Reliab Manag"},{"key":"R28","unstructured":"CYMEDSEC. URL: https:\/\/cymedsec.eu\/ [Accessed 23-03-2026]"},{"issue":"4","key":"R29","doi-asserted-by":"publisher","first-page":"1893","DOI":"10.1007\/s11135-017-0574-8","article-title":"Saturation in qualitative research: exploring its conceptualization and operationalization","volume":"52","author":"Saunders","journal-title":"Qual Quant"},{"key":"R30","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.01.004","article-title":"The Human Aspects of Information Security Questionnaire (HAIS-Q): two further validation studies","volume":"66","author":"Parsons","journal-title":"Comput Secur"},{"key":"#cr-split#-R31.1","unstructured":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation). European Union"},{"key":"#cr-split#-R31.2","unstructured":"May 4, 2016. URL: https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj\/eng [Accessed 11-09-2026]"}],"container-title":["JMIR Research Protocols"],"original-title":[],"language":"en","deposited":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T20:24:58Z","timestamp":1791231898000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.researchprotocols.org\/2026\/1\/e98934"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10,5]]},"references-count":32,"URL":"https:\/\/doi.org\/10.2196\/98934","relation":{},"ISSN":["1929-0748"],"issn-type":[{"value":"1929-0748","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,10,5]]},"article-number":"v15i8e98934"}}