Risk Never Sleeps Podcast

Catching up with trends is crucial, but first, solid programs and processes must be in place—leadership first, technology last.  In this episode, Heather Costa shares her insights into the evolving field of technology resilience, emphasizing the importance of proactive measures, strategic planning, and relationship building across different teams and departments. She discusses her personal life an...

Understanding the entire attack surface, including patching programs, firewalling technologies, and data segmentation, is key to strengthening healthcare security programs. In this episode, Phil Davis discusses the challenges and risks posed by disruptive technology in healthcare. He highlights the complexity of healthcare systems, involving multiple vendors, technologies, and staff, which creates...

Building a strong community is essential for effectively managing AI's risks and benefits. In this episode, Sandy Dunn, CISO at the Brand Engagement Network, explores the importance of understanding and communicating AI risks in healthcare. Sandy shares her work with chatbots and AI threat maps, highlighting the double-edged nature of technology. Sandy also talks about the impact of the Change Hea...

How has the shift from network to identity as a security focal point changed the healthcare cybersecurity landscape? In this episode, Bill Willis reveals his journey from being a Chief Information Security Officer to helping digitize Australia's healthcare system. He explains how IDMWORKS focuses on securing identities to protect against attacks and offers insights into its unique advisory approac...

Are healthcare and cybersecurity prepared for the next wave of tech? In this episode, Jason Alexander shares his insights on the cautious adoption of new technologies like ChatGPT and DAX Copilot and the importance of evaluating their cost-effectiveness and integrating them through established governance structures. He delves into the transformative potential of AI in healthcare, from automating p...

Empathy and effective communication are key when dealing with IT issues and hot-headed individuals. In this episode, Scott Dickinson, CISO of AnMed Health with extensive experience in the Department of Defense, FBI, and state government, discusses how manual processes play a vital role in business continuity and taking responsibility for a person’s success. Scott highlights the significance of tab...

It's crucial in healthcare IT to stay connected to the mission of improving patient outcomes.  In this episode, Inderpal Kohli shares his incredible journey from a software engineer in the banking sector to a pivotal role in transforming patient care through technology. Inder discusses everything from the large-scale digital transformation initiatives underway at Englewood Health to the integratio...

Every successful healthcare leader agrees that the healthcare industry’s mission-driven nature attracts many who value doing good over high pay. In this episode, Drex DeFord, a former Air Force enlistee, President of 229 Cyber & Risk Community at This Week Health, and Healthcare IT Strategy Consultant, talks about his journey from farm kid to tech enthusiast, emphasizing the role of AI in the futu...

Understanding single points of failure is crucial for managing risks and ensuring patient safety in healthcare organizations. In this episode, Steve O’Halloran highlights that partnerships with legal, risk, internal audit, HR, and compliance are essential for addressing IT challenges in healthcare. He covers the complexities of running a healthcare business, particularly in cloud-hosted facilities...

Establishing a governance committee helps address AI's impact on healthcare by focusing on IT, compliance, and risk. In this episode, Pam Austin discusses Ballad Health's proactive approach to cybersecurity, including establishing a governance committee focused on AI, compliance, and risk. Pam highlights the importance of customer service and the new IT PMO process in handling the volume of IT req...

Emphasizing a shared mission, vision, and values within healthcare organizations is crucial for true transformation and cultural change. In this episode, Apurv Gupta, the Vice President of Premier, highlights the importance of quality, performance, and operations improvement in healthcare. Apurv emphasizes the need for a shared mission, vision, and values within organizations to drive true transfo...

Training in phishing email detection and downtime strengthens an organization's cybersecurity defenses. In this episode, Aaron Weismann, the Chief Information Security Officer at Main Line Health, discusses the significant impact of Change Healthcare on various healthcare organizations. He highlights a recent incident involving reputation, revenue cycle, and uptime, where tabletop exercises were u...

Discover how building a culture of security is key in healthcare cybersecurity. In this episode, Rebecca Kennis discusses the importance of managing third-party vendors, continuous security training for staff, and evaluating AI technologies in healthcare. She also reflects on her journey into healthcare IT and offers valuable advice for professionals looking to break into cybersecurity. Tune in an...

Working closely with business partners, such as legal risk and internal audit, helps mitigate potential risks associated with AI integration. In this episode, Michael Jefferies discusses the importance of third-party risk, especially highlighted by the recent Change Healthcare incident. Michael emphasizes working closely with business partners and maintaining regulatory compliance while integratin...

Collaboration and proactive measures are key to safeguarding sensitive information and systems in healthcare IT. In this episode, Alexander Kot, AVP of cybersecurity at Aveanna Healthcare, delves into the intricacies of healthcare IT and cybersecurity. Alex’s journey from a help desk employee to a security officer provides insights into the evolving landscape of healthcare cybersecurity. He emphas...

In the wake of serious cyberattacks on healthcare, a cybersecurity director shares crucial advice on strengthening defenses and preparing for future threats. In this episode, Skip Sorrels discusses the cybersecurity ramifications of the Change Health breach and broader challenges within the healthcare industry. He underscores the need to understand third-party relationships, assess security contro...

Long-term strategic planning is essential for building resilience in healthcare cybersecurity. In this episode, Nick Sturgeon, Vice President and Chief Information Security Officer for the Community Health Network in Indiana, emphasizes the critical role of cybersecurity in healthcare, especially in light of recent cyberattacks like Change Health, which severely impacted healthcare organizations f...

Embrace AI through trusted partners while maintaining high security and data protection standards. In this episode, a returning guest, Steve Ramírez, elaborates on constructing robust backup systems and the necessity of a stringent third-party risk management program, particularly highlighting the recent scenarios with Change Healthcare. He also touches on the pivotal role of AI and cybersecurity,...

Marry urgency with patience to lock down security gaps. There’s no overnight fix.  In this episode, Saad Chaudhry dives deep into the challenges of protecting patient data in an industry that operates nonstop, necessitating a unique blend of urgency and patience. From dealing with the 24/7 nature of healthcare cybersecurity to the mindset newcomers should adopt, Saad provides insight into the stoi...

Cybersecurity laws are stringent, and compliance is essential for healthcare organizations. In this episode, James Wellman, the Vice President and Chief Information Officer at Nathan Littauer Hospital & Nursing Home, dives into his multifaceted role, tackling IT management, healthcare challenges, and AI integration. James stresses the importance of focusing on basic operations and optimizing techn...

Cybersecurity professionals must grasp the intricacies of business processes, aligning their strategies with organizational goals, to safeguard digital assets and data effectively. In this episode, Connie Barrera stresses the significance of understanding business processes and ensuring IT professionals are adequately skilled to deploy tools effectively.  Tune in and learn from the insights of a h...

Possessing the training and resilience to address challenging situations is essential in both healthcare and IT. In this episode, Joel Klein shares his experiences working in a 12-hospital system and discusses the challenges and priorities in healthcare technology. Joel provides valuable advice to professionals entering the cybersecurity and healthcare industries and offers a glimpse into his pers...

The rapid rise of technology has improved healthcare, but it has also increased the number of breaches organizations suffer. In this episode, Brian Sterud delves into integrating artificial intelligence in a rural healthcare setting and reflects on the challenges faced during the pandemic, highlighting the resilience and innovation demonstrated by his team and the broader healthcare community.  Tu...

Cybersecurity in hospitals is crucial for ensuring patient safety and quality care. In this episode, Bob Schlotfelt shares insights on cybersecurity in hospitals. Bob emphasizes the importance of patient safety and quality care, emphasizing the challenges of keeping devices updated and addressing the growing threat of AI. His experiences in various industries, including financial services, inform...

Communication is crucial in managing IT risk. In this episode, Rick Doten, VP of Information Security at Centene Corporation, shares insights into cybersecurity, emphasizing its crucial role in various industries like healthcare and finance. Rick stresses the importance of foundational cybersecurity practices like asset management, data protection, and identity management. He discusses the need fo...