What inputs are typically required from a sponsor?

Sponsors typically provide inputs such as:

  • Device architecture descriptions and software design documentation.
  • Cybersecurity risk analyses, threat models, or security risk assessments.
  • Existing cybersecurity testing artifacts, including vulnerability assessments and penetration testing results, where available.
  • Intended regulatory pathway and submission format (e.g., eSTAR).