Risk Never Sleeps Podcast

What if cancer treatment could be as unique as your own DNA? In this episode, Jim Foote, CEO and Co-Founder of First Ascent Biomedical, shares how his company is transforming oncology through functional precision medicine, designing personalized cancer treatments tailored to each patient’s biology. He explains how this approach moves beyond population averages to improve outcomes and why technolog...

How do you protect rural hospitals with limited resources from today’s growing cyber threats? In this episode, Ashini Surati, Chief Information Security Officer at CloudWave, shares her journey into healthcare security and how her team supports community and mid-sized hospitals through disaster recovery, managed security, and 24/7 SOC operations. She explains the importance of bridging frontline r...

How can healthcare harness AI while keeping ethics front and center? In this episode, Bob Berbeco, CIO of Mahaska Health, discusses building a Data Science and AI Center of Excellence to advance predictive modeling, machine learning, and research with ethical governance. He also highlights the importance of listening with a beginner’s mind, simplifying technology conversations, and balancing the p...

The core of every healthcare innovation, whether in IT, AI, or cybersecurity, must remain the patient. In this episode, Dr. Joseph Izzo discusses his transition from programming to medicine and how that unique background allows him to bridge clinical care with technology. He shares insights on EMR optimization, the importance of AI governance, and creating safe spaces for residents to experiment w...

The biggest risk in cybersecurity today isn’t just technology, but how humans interact with it under constant pressure. In this episode, Ross Leo discusses the evolving threats to patient safety, from ransomware to AI-driven phishing, and how his team builds systems that resist both mistakes and attacks. He reflects on his journey through the Navy, NASA, and healthcare, showing how risk can also b...

What if the real power of AI isn’t in the models, but in how we use them? In this episode, Keith Deutsch shares why the real breakthrough in AI isn’t the models themselves, but how we design agentic systems that guide and reason with them. He explains why using AI effectively is less about hype and more about craft, iteration, and thoughtful engineering. Tune in as Keith Deutsch shares eye-opening...

What happens when cybersecurity becomes a true enabler of healthcare innovation rather than a roadblock? In this episode, Anahi Santiago shared how ChristianaCare is managing a major transition to Epic, reopening shuttered facilities in southeastern Pennsylvania, and advancing AI initiatives like ambient listening and robotics to improve care delivery and cybersecurity. She emphasized that a cultu...

Are you really getting the most out of the platforms you're already paying for? In this episode, Elevsis Delgadillo emphasizes the importance of helping healthcare organizations fully utilize platforms like ServiceNow to cut costs, reduce tech sprawl, and address staffing challenges. He highlights that successful transformation requires both technology and strong change management, leadership tran...

This is the story of a healthcare IT leader who swapped a 450-person team for startup life and ended up selling the very tech he used to buy. In this episode, Elevsis Delgadillo, SVP of Customer Success at KeenStack, shares how his 14-year career in healthcare IT leadership prepared him for the fast-paced world of startup life. From leading digital platforms at Banner Health to rethinking sales wi...

What happens when cybersecurity steps out from under IT and sits at the executive table? In this episode, Sara Coverstone shares how moving cybersecurity out of IT and aligning it with risk functions improved board visibility and elevated cyber risks as a strategic priority. Emphasizing that "cyber safety is patient safety," she’s leading efforts in IAM, IoMT security, and AI governance, while enc...

One of the most urgent lessons from this conversation is that healthcare cybersecurity must become everyone’s responsibility, not just IT's. In this episode, Dr. Leanne Field shares how a pioneering Healthcare Cyber Risk Management micro-credential program equips healthcare professionals, from physicians to National Guard members, with real-world skills to address growing cyber threats. She also r...

What happens when a cybersecurity leader sees their role not just as a job, but as a calling? In this episode, Patrick Voon shares how his nearly nine-year journey has been shaped by purpose, mentorship, and a commitment to aligning cybersecurity leadership with the organization’s mission of “making man whole.” From building a formal security program and leading strategic transformation to encoura...

The true challenge with HIPAA isn't the regulation itself, but shifting healthcare providers' perspectives from compliance to proactive cybersecurity and patient risk management.  In this episode, David Sims shares deep insights into HIPAA, emphasizing its flexibility, the importance of "recognized security practices" under PL 116-321, and the need for the regulation to evolve with modern challeng...

AI isn't going to take our jobs; it's the people who know AI who will. In this episode, Eric Brown emphasizes security as a business enabler across diverse sectors like government, healthcare, and manufacturing, and highlights the imperative of understanding and harnessing AI. He also touches on the entrepreneurial journey, the importance of peer support, and personal interests like aviation. He a...

What happens when cybersecurity, clinical care, and innovation converge in a hospital setting? In this episode, Lisa Bisterfeldt explores the evolving landscape of healthcare cybersecurity and the importance of aligning technical strategies with clinical operations. She emphasizes the need for collaboration, hands-on experience, and adaptability, especially as technology expands and threats grow....

Assume good intentions as you partner with your clinicians for the best patient outcome.  In this episode, Shane Pilcher shares insights on adopting artificial intelligence for automation, machine learning, and improving provider experience. Shane also addresses cybersecurity initiatives, the importance of a strong security culture, and developing governance policies for AI. Drawing on his militar...

Sometimes, the best cybersecurity professionals come from the most unexpected places. In this episode, Kiersten Brill shares her journey from a non-IT background into cybersecurity, highlighting how the organization supported her growth and how she’s now focused on strengthening vendor risk assessments and protecting pediatric patient data. She also reflects on the impact of a mission trip to Hait...

What happens when nearly 7,000 hospitals are left to fend for themselves in the face of rising cyber threats and AI risks? In this episode, Chris Plummer reconnects with host Ed Gaudet to share cautious optimism about HIPAA rulemaking, highlight the inefficiencies of decentralized cybersecurity across thousands of hospitals, and discuss how mergers can support under-resourced rural facilities. He...

A strong security posture requires trust between IT, clinicians, and patients, emphasizing the importance of collaboration and culture over solely technical solutions.  In this episode, Bill Laukaitis emphasizes the importance of digital empathy, listening to clinical staff, and providing options rather than prescriptive solutions. He highlights the significance of process discovery, documentation...

How can organizations manage third-party cybersecurity risks, secure executive buy-in, and improve security communication? In this episode, Jeffrey Wheatman discusses how Black Kite helps organizations identify cybersecurity threats in their supply chain and emphasizes the need for clearer ownership of third-party risk, a shift toward collaborative security approaches, and improved communication b...

GRC (Governance, Risk Management, and Compliance) is evolving, requiring practitioners to have both technical and business acumen. In this episode, Ainhoa Iglesias-Diaz highlights the importance of a broad background to understand technical and business security aspects, enabling effective communication and collaboration. Ainhoa emphasizes the criticality of third-party risk management, advocating...

How can healthcare organizations balance tightening cybersecurity regulations with limited resources and still protect patient data effectively? In this episode, Carter Groome discusses how his company has evolved from an electronic health record optimization firm to a healthcare security, privacy, and risk management consultancy. He and host Ed Gaudet explore the challenges of improving cybersecu...

The cybersecurity landscape is constantly shifting and requires continuous education. In this episode, Will Conaway shares invaluable lessons learned from a career spanning executive roles at major healthcare systems to leadership positions in the technology sector. He emphasizes the critical importance of understanding and solving client pain points, predicting industry trends, and crafting imple...

Effective communication is crucial for bridging the gap between cybersecurity and business operations, especially in healthcare.  In this episode, Ashley Gelisse discusses the challenges of communicating cybersecurity risks to business leaders in healthcare organizations. Ashley highlights the importance of tailoring language and messaging to resonate with the audience, whether technical practitio...

The key takeaway from this Risk Never Sleeps podcast episode is the growing importance of AI governance and how it uniquely differs from other governance structures. In this episode, Sam Khan discusses the evolving legal landscape surrounding AI in healthcare and the need for organizations to develop comprehensive risk assessments that include AI-specific vulnerabilities. He also highlights the im...