The FDA is increasingly finding cybersecurity lapses during inspections of medical device manufacturing facilities — and most often because cybersecurity risk management is not fully documented as part of design controls, according to compliance expert Eric Henry.