Difference between MDS2 and MDM assessments:
Manufacturers can select to perform either the MDM or the MDS2 Assessment in MDRAP. The MDS2 assessment contains only the MDS2 questions. The MDM assessment contains all the MDS2 questions and additional questions describing expected network attributes. It also contains Level of Effort for remediation and Impact of exploit quests for each of the 10 control categories. The MDM questionnaire is the same question set that the healthcare delivery organizations complete and provides scoring. Scored assessment can be compared at the control level.
Both the MDS2 and MDM assessment are contributed to the community and are available based on the manufacturer's organization sharing settings. They also create an MDS2 document which is stored in the MDS2 library. All assessments provide a printable report that includes all questions, answers, and comments. The MDS2 assessment was developed some manufacturers not having developed a mechanism to create and share MDS2s with their customer base.