Makers of medical devices already have a substantial series of requirements related to cybersecurity, but those requirements may increase per a draft rule released by the U.S. Cybersecurity and Infrastructure Security Agency.