Asset

In a device threat model, assets include patient data, device functions and the software itself. Listing assets first makes it possible to see what an attacker would want and what needs protection.

anything that has value to an individual or an organization.

FDA guidance: Cybersecurity in Medical Devices: Quality Management System Considerations and Content of Premarket Submissions (February 2026), Appendix 5, Terminology