Securing legacy medical devices is daunting but not optional

Skipping out on comprehensive device documentation and risk assessment will cripple an organization's cybersecurity program, experts say.