Programmable logic

FDA's cybersecurity guidance treats programmable logic much like software: its configuration can contain vulnerabilities and belongs within security risk management.

hardware that has undefined function at the time of manufacture and must be programmed with software to function (e.g., Field-programmable gate array).

FDA guidance: Cybersecurity in Medical Devices: Quality Management System Considerations and Content of Premarket Submissions (February 2026), Appendix 5, Terminology