A system and device (200) which combines a defibrillator, patient monitor and a telemedicine server is described. The device enables a method whereby an external system or remote station may “pull” data from the device without the need for operator action or intervention. Safety-critical and non-safety-critical features in the device (200) are maintained separate by a firewall circuit (240) such that the remote station cannot write data to the device.