A medical device cybersecurity risk assessment is no longer a documentation exercise that supports a submission — it is now a condition of market access. Since the…