New regulatory frameworks aimed at improving cybersecurity are being introduced in both Europe and North America. This could lead to a step change in how the health care sector manages its colossal cybersecurity risks, by forcing medtech manufacturers and health care providers to make the necessary investments to improve the resilience of their tools and IT networks.