{
  "docId": "019dd923-622c-750b-8b96-76efb5813bae",
  "docSlug": "8ff52fe302da",
  "documentTitle": "St. Jude Medical (STJ)",
  "authorId": "51_Muddy_Waters",
  "authorName": "Carson C. Block",
  "documentKindSlug": "research-note",
  "documentKindLabel": "Research note",
  "sourceTypeSlug": "short_seller",
  "sourceTypeLabel": "Short seller",
  "presentationDate": "2016-08-25 00:00:00",
  "orientation": "portrait",
  "aspectRatio": 0.77272725,
  "pageNumber": 21,
  "pageCount": 34,
  "prevPage": 20,
  "nextPage": 22,
  "slideType": "expose_contradiction",
  "function": "expose_contradiction",
  "density": "balanced",
  "nDataPoints": 0,
  "notes": "The slide highlights a specific case study involving St. Jude Medical to demonstrate 'uncontrolled risk' in medical device security.",
  "elementsJson": [
    "heatmap",
    "paragraph",
    "footnote"
  ],
  "metadataConfidence": 0.9,
  "imagePath": null,
  "slideHref": "/slides/019dd923-622c-750b-8b96-76efb5813bae/21",
  "deckHref": "/decks/019dd923-622c-750b-8b96-76efb5813bae",
  "deckJsonHref": "/decks/019dd923-622c-750b-8b96-76efb5813bae.json",
  "deckAnchorHref": "/decks/019dd923-622c-750b-8b96-76efb5813bae#slide-21",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "The Draft Guidance provides several examples of uncontrolled risks. One examples is strikingly similar to the vulnerabilities and attacks MedSec has discovered:",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd953-64d3-706e-a462-6552b82eec32",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.5,
        "x": 0.25,
        "y": 0.08
      },
      "kind": "chart",
      "text": "Risk Matrix showing Severity Impact to Health vs Exploitability",
      "attrs": null,
      "subkind": "heatmap",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "a6d53d6c-cebb-48ee-9aa4-f125a7114bf3",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.15,
        "w": 0.8,
        "x": 0.1,
        "y": 0.71
      },
      "kind": "paragraph",
      "text": "Pursuant to the Draft Guidance, FDA recommends specific changes to address vulnerabilities associated with the types of uncontrolled risks described in this example.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "1ff00a68-fc4f-448f-adc0-688169031079",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.15,
        "w": 0.8,
        "x": 0.1,
        "y": 0.45
      },
      "kind": "paragraph",
      "text": "A manufacturer becomes aware of a vulnerability via a researcher that its Class III medical device can be reprogrammed by an unauthorized user. This vulnerability could result in permanent impairment, a life-threatening injury, or death.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "354d4940-9614-4f9f-a3cc-dfe11b8d6552",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.8,
        "x": 0.1,
        "y": 0.34
      },
      "kind": "paragraph",
      "text": "The Draft Guidance provides several examples of uncontrolled risks. One examples is strikingly similar to the vulnerabilities and attacks MedSec has discovered:",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "5d3bc576-28ed-4398-8c6f-2da544dd3c34",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.3,
        "x": 0.1,
        "y": 0.87
      },
      "kind": "source-note",
      "text": "Draft Guidance, part VII.B. Id. Id.",
      "attrs": null,
      "subkind": null,
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "0784ae7d-a0f9-4c6a-80b7-d3b7bf26be10",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.8,
        "x": 0.1,
        "y": 0.39
      },
      "kind": "title",
      "text": "Examples of Vulnerabilities Associated with Uncontrolled Risk That Must Be Remediated and Response Actions:",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d0a168b0-83ca-4bf4-bf06-7321180d89cc",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [
    {
      "name": "heatmap-matrix",
      "slug": null,
      "matchId": "68d8c799-fc58-4c6e-9ef2-8b13370ae314",
      "evidence": "Risk assessment matrix used to categorize vulnerability severity and exploitability.",
      "confidence": 0.9
    }
  ],
  "arcBeats": [
    {
      "to": 22,
      "from": 18,
      "beatId": "f0d4f08b-4c30-4578-a808-4dc45468a7de",
      "arcName": "Problem-Agitate-Solution",
      "arcSlug": "problem-agitate-solution",
      "beatName": "Solution (Provide relief)",
      "beatSlug": "problem-agitate-solution-solution-provide-relief",
      "evidence": "The document provides a solution through regulatory action and recall likelihood analysis",
      "position": 2,
      "confidence": 0.8,
      "parentBeatName": "Resolution",
      "parentBeatSlug": "resolution"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}