SOUP

Software of Unknown Provenance

Definition

IEC 62304 term for software not developed for a specific medical device (e.g., OS, libraries, OSS). Must be identified, risk-assessed, and tracked for vulnerabilities throughout the product lifecycle.