Protecting the security, integrity, and privacy of our systems and data is a core priority at MicroPort Orthopedics. We are committed to safeguarding the information entrusted to us by patients, healthcare professionals, partners, and employees. Our cybersecurity program is built around industry-leading standards, continuous monitoring, and proactive risk management.
 

Our Cybersecurity Approach

1. Security by Design

We incorporate cybersecurity principles into the design, development, deployment, and maintenance of our technologies and digital services. This includes secure coding practices, threat modeling, and rigorous validation procedures.

2. Compliance and Framework Alignment

MicroPort Orthopedics aligns its cybersecurity program with globally recognized frameworks and regulatory requirements, including:

  • NIST Cybersecurity Framework (CSF)
  • ISO/IEC 27001 Information Security Management Standard
  • FDA and international guidance for cybersecurity in medical devices
  • Applicable data protection laws and regulations in the regions where we operate

3. Continuous Monitoring and Threat Defense

We implement advanced security tools and monitoring capabilities to identify, prevent, and respond to cyber threats. Our security operations processes include:

  • Real time threat detection and alerting
  • Routine vulnerability assessments and penetration testing
  • Network segmentation and zero trust architecture principles
  • Regular patching and remediation programs

4. Data Protection and Privacy

We apply strong administrative, technical, and physical safeguards to protect confidential and personal data. Access to sensitive information is strictly controlled via role based permissions, multi factor authentication, and encryption of data in transit and at rest.

5. Employee Awareness and Training

All employees receive ongoing cybersecurity awareness training to ensure they understand current threats, best practices, and their role in protecting company and customer information.

6. Incident Response and Business Continuity

MicroPort Orthopedics maintains a formal incident response plan and disaster recovery processes to ensure we can act quickly and effectively in the event of a cybersecurity incident. We regularly test and refine our response procedures.

7. Collaboration with Partners and Healthcare Providers

We work closely with our technology partners, healthcare providers, and industry organizations to promote cybersecurity resilience across the medical and healthcare ecosystem. We encourage responsible disclosure of security vulnerabilities through coordinated communication channels.

8. Reporting a Cybersecurity Vulnerability

If you believe you have identified a potential cybersecurity vulnerability in one of MicroPort Orthopedics’ products or services, please notify us at your earliest convenience by emailing MPOITSecurity@ortho.microport.com.

Our team will review the information provided and take appropriate steps to evaluate the reported vulnerability.
Please include the following information in your email:

  • Your organization information and contact details 
  • Affected product(s) and version(s) 
  • A detailed description of the potential vulnerability 
  • The method by which the vulnerability may be exploited 
  • Any recommended vulnerability remediation solution 
  • Any additional information that may assist us in evaluating the reported vulnerability

By sending us an email:

  • You confirm that you have read and agree to our Terms of Use and Privacy Policy. 
  • You agree that the information you provide does not create any rights for you and that MicroPort Orthopedics may use such information, in whole or in part, for any purpose, without restriction and without compensation or other obligation to you.
     

Our Commitment

Cybersecurity is an ongoing commitment and a shared responsibility. MicroPort Orthopedics will continue investing in technologies, people, and processes that strengthen our resilience and safeguard our customers, patients, and stakeholders.

If you have questions or wish to report a security concern, please contact our information security team at: MPOITSecurity@ortho.microport.com