top of page

CRO Chief Risk Officer Community Supports MedTech World Asia 2026 Day 1: Integrate Risk into Decision Making on 27 August

andrewchan722
Sep 3
6 min read
Andrew Chan FCA, CRO Chief Risk Officer Community Supports MedTech World Asia 2026 Day 1: Integrate Risk into Decision Making at Hong Kong Convention and Exhibition Centre, 27 August 2026
Andrew Chan FCA, CRO Chief Risk Officer Community Supports MedTech World Asia 2026 Day 1: Integrate Risk into Decision Making at Hong Kong Convention and Exhibition Centre, 27 August 2026

The awards gala on Day 0 named the companies. Day 1 named the decisions.


At HKCEC the floor opened, eight companies took the Main Stage, and an invite-only room spent midday on a quieter question: what still kills a MedTech deal after the term sheet looks good. That is not a compliance afterthought. It is risk integrated into decision making — capital decisions, market-entry decisions, AI-deployment decisions, and the decision to call a company “deal ready.”


MedTech in Asia is no longer a science-fair. It is a regulated product, a data platform, a Greater Bay Area supply chain, a SaMD update cycle, and a capital structure that will either underwrite governance before the cheque or discover it in diligence. Day 1 was the map of where those choices are actually made.


What the floor actually decided

Dr Dylan Attard opened the two-day programme. The morning then moved from rhetoric to paper: MedTech World with the SCSS Smart Healthcare & Big Health Professional Committee and Shenzhen Innovation Bay Research Institute; Beijing Zhongchuang Hongjian Medical Technology; and Wenfair International Network Technology. Cross-border collaboration was not a slide. It was a decision with residual risk attached.

The strategic session that followed — Why Hong Kong? The Strategic Gateway to Asia’s MedTech Ecosystem — put the city’s regulatory posture on the table. HUNG See Long Aaron, Senior Medical & Health Officer in the Medical Device Division at the Department of Health, walked the room through Hong Kong’s approval landscape. Dr Renzo De Gabriele brought Malta’s health-innovation policy as a counterpoint. The pitch was familiar and still true: capital markets, common law, and forty-five minutes to Shenzhen. A gateway is only an asset if risk is in the market-entry decision, not discovered after the first shipment.

Two panels set the decision register for the rest of the day.

  • Beyond APAC: Building a MedTech Expansion Strategy for Europe and the USA — evidence generation, reimbursement, pricing, quality systems and cybersecurity as inputs to the decision to open a second continent, not as conditions bolted on after the board has already said yes.

  • East vs. West: Funding Dynamics Compared — risk appetite, deal structures, diligence expectations and the cultural gap in how capital actually moves. Different markets price risk differently. Integrating that into the raise decision is the work.

Eight companies then had minutes, not months, in front of investors, hospital leaders and partners: Sparrow BioAcoustics, Vascular Perfusion Solutions, Cimple Biotechnology, Belun Technology, ANRim Biotech (HK), LUMAT-SERS / COCHE, NASELLA, and EyeMed Technologies. Several had already been named the night before. Day 1 was not a victory lap. It was the first public test of whether the story survives a room that can write a cheque — and whether that room is integrating risk into the investment decision or only into the closing checklist.

The afternoon went where residual risk now lives inside the decision: AI & Precision Medicine: Turning Data into Targeted Care; Where the Smart Money is Going: MedTech Capital in Asia 2026; Capital, Cloud & Clinical Translation. Then three commercialisation panels in a row — what hospitals and CROs wish founders knew; APAC market-entry; digital health and connected devices built for the region’s infrastructure, not a US reference architecture.

The most useful conversation was not on the Main Stage. The invite-only luncheon, From Due Diligence to Deal Ready, powered by Blue Goat Cyber and CS Lifesciences, put investors in the same room as regulatory, quality and cybersecurity specialists. The subject was the gap between a promising company and one that is actually investable, expandable and acquirable. That is risk-based decision making in one sentence: do not decide “yes” on narrative and discover “no” on the quality file.

Evening closed at Grill Bar, Grand Hyatt. Networking is not a control. It is where the next decision starts.

Why this matters to a Chief Risk Officer

The CRO seat exists so risk is inside the decision, not after it. Day 1 made that concrete.

1. An MoU is a decision, not a control environment.


Three signatures in one morning is useful diplomacy. It is not quality-system maturity, data-residency design, or a dual-use labelling file that will survive NMPA, FDA and MDR on the same product. Boards that treat partnership announcements as risk transfer have already made the decision without integrating the residual risk.

2. Hong Kong’s gateway value has to sit inside the market-entry decision.


The Department of Health session was the honest part of the day. Market access here is not “fast.” It is legible. That asset evaporates if founders use Hong Kong as a logo for a China story without a living quality system, post-market plan and cyber programme that can be shown to a hospital CISO before the launch decision.

3. East–West funding divergence is a diligence input, not a cultural footnote.


Different risk appetite and different deal structures mean different definitions of “ready.” A company that is fundable in one market can be uninsurable in another. Integrate that into the round you accept — not into the apology after the next investor’s second request.

4. AI and precision medicine are deployment decisions, not demo decisions.


Turning genomics, imaging and real-world evidence into targeted care is the growth story. It is also software as a medical device, training-data lineage, update cycles, vendor concentration and the question of who owns the model when it is wrong. The decision to put a model on the ward is a risk decision. Treat it as one.

5. “Deal ready” is a first-line control on the investment decision.


The closed-door luncheon named what public stages often skip: quality files, regulatory path, cyber posture and clinical evidence that can survive an acquirer’s second request. Capital that does not underwrite those items before it says yes is not patient capital. It is leverage with a healthcare logo.

6. Scale across APAC is an infrastructure decision.


“Building for APAC’s infrastructure realities” is the right phrase. Connectivity, reimbursement fragmentation, hospital procurement cycles and last-mile device support do not appear in a Series A model. They appear when the first SLA is missed. Put them in the scale decision, not in the incident review.

Takeaways for CROs and boards — integrate risk into the decision

  • Put MedTech on the same enterprise-risk and decision agenda as financial, cyber and third-party risk. Product liability, SaMD, trial integrity, data residency and post-market vigilance belong in the paper that recommends “go,” not only in the paper that explains “why it went wrong.”

  • Treat the registration file as part of the growth decision. If regulatory strategy arrives after the raise, delay is already priced in — just not disclosed when the decision was taken.

  • Ask who owns clinical evidence as a control on the first-patient decision. Hospitals and CROs said it plainly: first-patient-to-market is a quality-system problem wearing a commercial title.

  • Do not confuse a showcase slot with assurance. Eight companies on stage is deal flow. ISO 13485, a living residual-risk register and a cyber programme that can be audited are what make the investment decision defensible.

  • Be water with the map. US, EU, Mainland China, Hong Kong and ASEAN pathways will not converge on your timetable. Adaptive market-entry is how risk gets into the decision instead of arriving as a surprise.

  • Ask the growth question, not only the gatekeeper question. The job is not to slow the next Belun or EyeMed. It is to get them to patients because the board integrated patient safety, evidence and insurability into the yes — not after it.


Bruce Lee still applies. Be shapeless, formless — like water. Asian healthcare markets will not hold one shape. The organisations that last are the ones whose risk function can change form without losing principle: patient safety first, evidence that can be defended, and growth that can be insured because risk was in the decision, not parked in a register.

Day 2 would bring the Startup Pitch Competition, the Greater Bay Area conversation, robotics and India’s manufacturing role. Day 1 already told you where value is created or destroyed: between the MoU and the quality file, between the AI demo and the model card, between the cheque and the diligence room.

The trophies were handed out on the 26th. On the 27th the question was simpler. Were we integrating risk into decision making — or decorating decisions we had already made?

That is the work.


Stay connected

If you lead risk, audit, compliance, quality or clinical governance in healthcare, MedTech, insurance or investment — this is the conversation CRO Chief Risk Officer exists to host: connecting CRO and risk professionals to the CFO, CEO and C-Suite so risk insights sit inside strategic and operational decisions.

Follow CRO Chief Risk Officer for executive roundtables, workshops and community events across Hong Kong, Asia and the world. Support the work of putting more value-added CRO seats in the region. Join as a Global Risk Advocate — individual and corporate memberships are open.



Andrew Chan FCA


CRO Chief Risk Officer

 
 
 

Comments


bottom of page