1. Pick the device archetype
The archetype determines which scenario library and which compensating controls apply. Not sure which?
Archetype 1 — General-purpose OS legacy
Windows XP/7/Server 2008, older Linux. PACS workstations, imaging modality consoles, lab analysers, pharmacy automation.
Archetype 2 — Embedded RTOS legacy
VxWorks, QNX, ThreadX, proprietary firmware. Infusion pumps, ventilators, patient monitors, anaesthesia, dialysis.