Editorial and Review Policy
This policy describes how CyberMed writes, reviews, sources, dates, and corrects the content on cybermed.ai: the reference guides, the free Medical Device Cybersecurity Book, the articles, and the service pages. It exists so that readers, and the reviewers who read our clients' submissions, can see where a claim came from and who stands behind it.
Published · Updated
1. Who writes
Every guide, book chapter, and article on this site carries a named byline. The byline links to the author's profile, which states their role, background, and years in the field.
Content is written by CyberMed's engineering leadership: Jose Bohorquez, PhD, President; Mohamad Foustok, Chief Security Officer; and Andres Echeverry, Chief Operating Officer. The named author is responsible for the accuracy of the page.
Service pages describe CyberMed's own offerings. They are written by the person who leads that service and carry the same byline and date treatment as the guides.
2. Who reviews
Regulatory and technical claims are checked against the primary source before publication by the author. Where a second CyberMed engineer has reviewed a page, the page shows a "Reviewed by" line under the byline and names that reviewer in its structured data. A page without a "Reviewed by" line has had author review only.
Reviewers check three things: that each FDA, statutory, or standards claim matches the cited document; that the page does not overstate what a document requires versus recommends; and that the page does not describe client work without written permission.
3. How we choose sources
We cite primary sources first: the statute at uscode.house.gov or govinfo.gov, FDA guidance documents and FDA web pages at fda.gov, the Federal Register, NIST, CISA, and the standards bodies (AAMI, ISO, IEC) for their own documents. Secondary commentary is not used as a source for a regulatory claim.
Every guide ends with a Sources section that lists each cited document with its publisher and, where the document states one, its issue date. Links go to the current version of the document. When a guidance is superseded, we cite the new version and note the change on the page.
Standards from ISO, IEC, and AAMI are paraphrased and cited, not reproduced. We do not publish long verbatim passages from paid standards.
If a fact cannot be tied to a source, it is left out. We do not publish statistics, rankings, or client names that we cannot support, and we do not present estimates as measurements.
4. How we describe other companies
When a page names another company, it states only what that company's own public pages say about its services and focus. We do not rank competitors, and we do not attribute claims to them that they have not made.
5. How pages are dated and updated
Each guide and article shows a visible published date and a visible updated date, marked up as machine-readable time elements and repeated in the page's structured data. The sitemap carries the same last-modified date.
The updated date changes only when the content changes in a way that affects meaning: a new guidance version, a corrected fact, a new section, or a changed recommendation. Formatting and link fixes do not move the date.
When FDA issues or supersedes a guidance that a page relies on, the page is revised and the revision is described in the text, as the Section 524B guide does for the February 2026 guidance.
6. Independence and disclosure
CyberMed does not run advertising, affiliate links, sponsored posts, or paid placements. Pages that link to CyberMed's own services say so plainly, in CyberMed's name.
CyberMed provides regulatory engineering services. Content on this site is general information about FDA expectations and engineering practice. It is not legal advice, and it does not replace a review of your specific device and submission.
7. How to report an error
If you find an error, email info@cybermed.ai with the page URL, the text in question, and the source you believe is correct. A CyberMed engineer replies within one business day.
Confirmed errors are corrected on the page, the updated date is changed, and the correction is described in the page text when it changes a conclusion. We do not silently rewrite substantive claims.
Related: About CyberMed, Privacy Policy, Terms and Conditions.