Connected medical devices present a unique facete of OT deployment and support. They are critical, potentially life saving devices with long lifespans, significant costs, and regulatory restrictions. The deployment of these devices is a balance of risk to provide safe and effective patient care while protecting personal health information. Medical device regulations can limit cybersecurity actions and create situations where standard IT paradigms are not applicable. This presentation will discuss the regulatory space of medical devices in Canada, the deployment of these devices in our current IT landscape, and the balance of risk that must be struck.