September 13, 2022 A day in the life of a Product Security Intern
By Amber Schneider
You just clicked a link to go to another website. If you continue, you will leave this site and go to a site run by someone else.
It is possible that some of the products on the other site are not approved in your country.
The content on this site may not be allowed under the laws of your country of residence. Please review the applicable healthcare laws in your country. If not allowed, please exit this site. Medtronic declines any liability as to your access to such information.
Click “Continue” to close this window and view the site’s content.
Your browser is out of date
With an updated browser, you will have a better Medtronic website experience. Update my browser now.
Medtronic, Inc. (“Medtronic”) offers RemoteView, which permits a user (“Programmer User”) of the Medtronic CareLink® 2090 Programmer (“Programmer”) to allow the viewing of information presently displayed on the Programmer screen with one or more individuals in remote locations anywhere in the world (“Remote Viewer”), including remote health care professionals or Medtronic representatives.
Limited License Grant. You are hereby granted a nonexclusive, nontransferable, terminable, nonassignable, nonsublicensable, limited license to install and use a copy of the Licensed Software solely for authorized and legitimate purposes. You may not otherwise copy, use, modify, reverse engineer, decompile, disassemble, create derivative works based on, or integrate with other systems or programs the Licensed Software without the prior written consent of Medtronic. You shall have sole responsibility for any fees or charges, including service or data charges, incurred by you in connection with your use of the Licensed Software. You shall not remove any proprietary or other legend or restrictive notice contained or included in the Licensed Software or other documentation associated with such Licensed Software. You agree to maintain any and all copyright, trademark, and other notices on the Licensed Software and any associated documentation.
Licensed Software Functionality and Data Use, Collection, Viewing, and Transfer.
“Active Remote Viewer” as referred to herein shall mean a Remote Viewer that has installed the Licensed Software and has at the relevant point in time an active network connection to a Medtronic server via the Licensed Software.
By installing or using the Licensed Software or clicking any acceptance button in connection with this Agreement, you acknowledge, understand, agree to, and consent to all of the following, including when you are an Active Remoter User:
) Registration. To obtain access to the Licensed Software, you must register at the Medtronic RemoteView website and establish a user name and password. All information that you provide in connection with such registration must be complete, accurate, and truthful. The user name and password are personal to you and must not be shared with anyone else. You will also not attempt, directly or indirectly, to disable, bypass, or defeat any password protection associated with the Licensed Software. Medtronic reserves the right to deny or disable any user name or password or request for any user name or password.
) Your Personal Information. Medtronic will collect information in connection with your registration and installation and use of the Licensed Software, including your first and last name, your email address, a selected security question(s) and your corresponding answer(s), your address, and your telephone number. You agree that Medtronic may store this personal information about you on a Medtronic server, including a server located in the United States of America.
) Session Key. To view the information on the Programmer, the Remote Viewer must generate a Session Key that must be shared with and entered by the Programmer User. “Session Key” as used herein means a unique token active for a limited period of time generated by the Remote Viewer. You agree not to share this Session Key with anyone other than the Programmer User who has initiated the specific session.
) Logging of Session Activity. Each time you log in to the Licensed Software, Medtronic will collect information about your activity, including in an aggregated log or database, regarding you and your session, including your name, username, computer name, IP address, operating system details, and session details (including transferring and sharing activity, start and end times, view only or control activity, and any chat messages between or among any Active Remote Viewers. You agree that Medtronic may store any personal information about you on a Medtronic server, including a server located in the United States of America.
) Active Remote Users. When you are an Active Remote Viewer: (1) you will be able to view the name and/or user name of any other Active Remote Viewer who is logged into the same Medtronic server; and (2) any other Active Remote Viewer who is actively logged into the same Medtronic server will be able to view your name and/or user name. The Licensed Software also permits one Active Remote Viewer to share the information being viewed to any other Active Remote Viewer. You must not share any information from the Medtronic programmer, including with any other Active Remote Viewer, absent the express permission from the Programmer User that is allowing you to view the information.
) Availability. Medtronic has limitations on the number of users that can concurrently log in to the Licensed Software at any given time. Thus, installation of or accessing the Licensed Software does not guarantee that it will be available to you for use at any time.
Permissions. By installing and using the Licensed Software, you represent that you have permission to do so from any associated clinic, hospital, or medical practice and that your use of the Licensed Software complies with any policies or requirements of such associated clinic, hospital, or medical practice. You are also responsible for confirming that the Programmer User has obtained any necessary patient consent before allowing you to view any patient information via the Licensed Software.
Your Acknowledgements. You acknowledge that the Licensed Software is not the exclusive method of viewing information from the Programmer and that the Licensed Software is not the exclusive method by which to obtain a patient’s implanted cardiac device data, including any data on the Programmer. You also acknowledge that the Licensed Software is not intended to be used as a life-sustaining or interventional tool during medical emergencies. You further acknowledge that Medtronic is not, and shall not be deemed to be, a provider of patient health care services by virtue of its provision of access to the Programmer screen information via the Licensed Software. You also acknowledge that information from the Licensed Software is not an electronic medical record and use of the Licensed Software does not in any way relieve you from using your best medical judgment to determine a proper course of treatment for patients.
Security/Privacy of Patient Data. Your use of the Licensed Software and any Session Keys shall be solely for legitimate and lawful purposes and not for any malicious purpose. You are solely responsible for and will use your best efforts in maintaining the confidentiality and security of any copies of the Licensed Software as well as any user name, password credentials, and any Session Keys that can be used in accessing the Licensed Software, a Medtronic server, or any information from a Programmer. You are solely responsible for and will use your best efforts in keeping any patient information you may receive or view in connection with the Licensed Software confidential and secure, and you will not attempt to capture or copy any patient information you view in any electronic or hard copy format without the express permission of the Programmer User. You will be responsible for any obligations or liabilities associated with any lost, stolen, or otherwise compromised patient information.
Reporting Issues and Feedback. You agree that you will report any issues or questions, technical or otherwise, regarding the Licensed Software promptly and directly to Medtronic. If you submit any comments or ideas to Medtronic, in the absence of a separate agreement regarding such submissions, you grant to Medtronic an unrestricted, royalty-free, irrevocable license to use, reproduce, display, perform, modify, transmit, and distribute such ideas in any medium and agree that Medtronic is free to use them for any purpose. In addition, Medtronic has no obligation to provide continued maintenance and support to you in connection with the Licensed Software. Any maintenance and support services provided by Medtronic shall be at Medtronic’s sole discretion.
Limitations of Liability.
THE LICENSED SOFTWARE IS PROVIDED TO YOU “AS IS,” AND MEDTRONIC EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES WITH RESPECT TO THE LICENSED SOFTWARE AND YOUR USE THEREOF, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NONINFRINGEMENT. MEDTRONIC DOES NOT WARRANT THAT THE USE OF THE LICENSED SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE.
Legal Compliance. You shall at all times use the Licensed Software in compliance with all applicable laws. You shall ensure that your installation and use of the Licensed Software complies with all applicable export and import laws, regulations, orders, and policies of the United States of America and any other applicable jurisdiction. You represent and warrant that (i) you are not located in a country that is subject to a U.S. Government embargo, or that has been designated by the U.S. Government as a “terrorist supporting” country, and (ii) you are not listed on any U.S. Government list of prohibited or restricted parties.
Term, Termination, Modifications, and Support. This Agreement shall be in effect from the date when you first install or use the Licensed Software. Medtronic may modify, amend, or terminate this Agreement at any time, including by providing notices or an updated version of this Agreement on a Medtronic website. Medtronic may modify, disable, or terminate your use or Medtronic’s support of the Licensed Software at any time, including by providing notices on a Medtronic website. All obligations which are ongoing in nature shall survive termination or expiration of this Agreement. At any time upon Medtronic’s request (including via a notice on a Medtronic website), you agree to promptly delete and terminate use of any and all copies of the Licensed Software. In addition, upon Medtronic’s request, you agree to provide written verification that you have destroyed all copies of the Licensed Software together with the manner, date, and time of such destruction.
NayaMed International Sárl Customers: Whether the RemoteView feature shall be used in connection with NayaMed customers or devices shall be solely within the discretion of NayaMed International Sárl. If the Licensed Software is used connection with NayaMed customers or devices, this Agreement shall be directly between you and NayaMed with respect to those uses.
By Amber Schneider
My name is Amber Schneider and I’m an intern with the Product Security Office within Global Quality. I just finished my sophomore year at the University of Wisconsin – Madison, where I study biomedical engineering with a minor in computer science. I bet a lot of you are wondering what a day in the life looks like for an intern at Medtronic, so I took the time to record all that I did in a day to share! I hope you enjoy a Day in the Life of a Product Security Intern:
I wake up at 7:30am to get ready for work. Today is a Tuesday, which means I am in the office. My team operates out of the Mounds View, MN location, and I have about a 30-minute drive to work every day. After rolling out of bed, I grab a quick breakfast, pick out my most business casual outfit, which typically includes nice pants and a short sleeve shirt, and head off to work.
Once I get to work, I walk upstairs to my desk. I get all my things out of my backpack and set up my workstation for the day. Right when I log on to my computer, I read any new emails and reply to them as needed. I also check for Microsoft Teams messages, which can range from product security communications to general intern conversations. Then I check my calendar for the day. I like to write my meetings and to-dos of the day on the whiteboard by my computer. This helps me stay organized and motivates me to cross things off my list. Today I have more meetings scheduled than usual, so I get settled in and start preparing for them.
After a small break, I am off to a meeting that is part of the Mission Immersion Series. The Mission Immersion Series is an opportunity for interns to dive deeper and learn more about each of Medtronic's six tenets - the guiding principles that lay the foundation for the work we do every single day. This week we focused on Tenet 3 which emphasizes reliability and quality in our products. Since the Product Security Office is within Global Quality, I found this tenet very easy to relate to my work. During this meeting I was also able to eat lunch at my desk. Afterwards, we are asked to reflect on a question related to the tenet and answer in a Team’s channel.
Now it is my favorite part of the week—the coffee break with my team. One perk of working in the Mounds View location is the Caribou coffee shop on the main floor. We walk down as a team and order our drinks (I have been working towards trying something new every week). Then we sit down to chat and catch up with each other. The conversations vary a lot, from weekend plans to gardening to Wi-Fi routers. I really appreciate this time because it allows me to get to know my team on a more personal level in a relaxed environment.
After coffee, I hop on a Zoom meeting with a member of my team in Colorado to discuss one of my projects. We are creating a Penetration Testing tracking system to track previous pen test data and future needs. This is one of my repeating weekly meetings where we have a chance to discuss the work we have completed and our next steps. This week we finished the first draft of the system and are going to send it out to the rest of the team for review and suggested improvements.
Next is the weekly Product Security Office (PSO) meeting with the whole team. This meeting is in-person for all the members of the team located in MN, while the other team members are virtually present on a TV in the front of the room. It is amazing to see how Medtronic has invested in the hybrid work model. The meeting technology in the office allows our team to have seamless communication with each other. In this meeting we go over the PSO calendar and any special events. Then we review any team action items that are coming up and get quick updates and barriers to completion. Lastly, there is usually a loose agenda that tracks who is participating and various topics that the team has added and wants to discuss.
Shortly after, I have another meeting with a project manager on my team to discuss a threat modeling project I am working on. We reviewed and discussed my previous assignment. This assignment was to complete a threat asset matrix of a monitoring device that is currently being developed. Afterwards, I was assigned to review the security plan for the device. I have about a week to complete this new task.
Now I have another informational interview. At first, these meetings were nerve-racking but now they have gotten easier. I continue to get real, honest insight into what people like about their jobs and Medtronic company culture.
I am done with all my meetings for the day! Now I have time to work on my Product Security projects, which include updating the pen testing spreadsheet and reading the PSO Security Plan requirements. I also spend some time recording milestones and updating progress on my goals. I end the day working on the layout of my upcoming final internship presentation.
I enjoy my drive back home. The nice thing about internships is that there is no work to complete at home (unlike school). The rest of the night I have to myself, which includes eating dinner with my family, working out, then watching TV before heading to bed. That is the end of my Product Security Intern Day in the Life!
Disclaimer: This page may include information about products that may not be available in your region or country. Please consult the approved indications for use. Content on specific Medtronic products is not intended for users in markets that do not have authorization for use.