Foundation for Innovation Translation and Safety Science

What it reported doing in 2017

Fitss will:-establish appropriate committees to identify and address specific issues;-ensure representation across government, manufacturers, providers, payers and broader technology companies including infrastructure, security, device components and services companies;-establish a public/private reporting infrastructure to accurately assess the national exposure and identify, track and trend incidents;-ensure the public/private surveillance and adverse incident response model protects the interests of patients, providers, manufacturers and regulators to protect the public;-develop case definitions for security risks and medical device associated adverse events;-develop a data collection network that support premarket clinical trials and postmarked adverse event surveillance;-leverage the data collection network to support innovation in medical devices.fitss first project is the medical device innovation, safety and security consortium (mdiss) which is designed to protect the public health and well-being by advancing innovation and computing risk management practices to ensure wide availability of innovation and safe medical devices.on september 8, 2015, fitss' mdiss initiative received written notice that it was awarded a $1,800,000 grant from the department of homeland security to support an important public health initiative over a two year period. It will support mdiss activities that will bring innovation to assessing risk of medical devices, providing near real-time insights into health care delivery organizations' (hdo) cybersecurity requirements, provide an efficient crowd-sourcing approach to assessing a large number of diverse medical devices that will be useful for the fda and for hdos; and linkage to a newly emerging medical device vulnerability information sharing initiative (a collaboration between fda, mdiss and national health information and analysis center (nhisac)). The grant will support foundation work to improve the science (including but not limited to risk assessment and analytics), and its immediate translation into platforms and methods that will be made available to medical device stakeholders for free or low cost. The overall activity strengthens a critical innovation community that has been doing critical work to better secure medical devices and their associated health care delivery networks. Our nation's entire healthcare system rests upon this nationally connected biomedical device network that, like the internet, was never planned or properly secured.examples of how this proposal will advance the goals of this broad agency announcement call include:1. The medical device regulatory affairs program (mdrap) through vanderbilt university will collect comprehensive information about the medical devices in the healthcare delivery system environment, or other environments. This will provide the data and information needed for manufacturers or healthcare delivery organizations to add the necessary security enhancements to the design and implementation of cps.2. Consistent with executive order 13636 and presidential policy directive 21, mdrap will collect and analyze data on cps so that the medical devices in healthcare delivery systems will be made more robust and strengthen our nation's health critical infrastructure.3. The medical device security data collected by mdrap will provide near real-time requirements to manufacturers about the needs of the implementers, healthcare delivery organizations. This will improve the quality of security controls at design phase as well as in the implementation phase.4. The medical device networks in health care delivery systems are complex and mdrap will help systems plan, architect, and operate safer medical device ecosystems as manufacturers ramp up the design, build and marketing of more secure devices.5. Mdrap, as it collects data on medical devices, will provide important insights into the security posture for biomedical devices themselves, the biomedical devi

Financial Efficiency

• Mission deployment rate: 100%; rating input score 100
• Program expense ratio: 87.2%; rating input score 87
• Fundraising efficiency: Limited

Transparency & Controls

• Consistency checks: 100%; rating input score 100; 62nd percentile among comparable filings
• Pay-setting controls: Limited
• Foreign activity oversight: Limited
• Grant itemization coverage: Limited
• Major donor itemization: Yes; rating input score 100
• Related-party transparency: Limited

Accountability

• Independent voting board: 66.7%; rating input score 67; 12th percentile among comparable filings
• Governance controls: 3 of 8 controls in place; rating input score 38
  • Conflict-of-interest policy: Pass
  • Whistleblower policy: Pass
  • Document-retention policy: Fail
  • CEO compensation review process: Fail
  • Other executive compensation review process: NotApplicable
  • Form 990 shared with the board: Fail
  • Board meeting minutes documented: Pass
  • Audit committee oversight: Missing
  • Independent financial-statement audit: Fail

Sustainability

• Operating margin: -81.2%; rating input score 1; 1st percentile among comparable filings
• Total-asset coverage ratio: 0.01; rating input score 1; 1st percentile among comparable filings
• Liabilities to assets ratio: 54.38; rating input score 0; 0th percentile among comparable filings
• Officer compensation ratio: 8.6%; rating input score 42; 42nd percentile among comparable filings

Growth

• Program expense growth: 59.4% per year; rating input score 100; 97th percentile among comparable filings
• Revenue growth: 43.7% per year; rating input score 100; 96th percentile among comparable filings
• Asset growth: -25.2% per year; rating input score 0; 2nd percentile among comparable filings