It's been a long wait, but IEC 80001 has just been approved. This is a standard governing risk management for networks incorporating medical devices. Read more details on the MED blog. —Lawrence Lloyd