CSIWORKS

The decision to adopt AI for use in clinical settings and enterprise business systems in healthcare should involve a wide range of constituents. A variety of departments and functions, from the board of directors to all the way down to line workers, will need to give input, author policies, write procedures, and be involved in the lifecycle management of AI. Given the depth of staff involved and the number of activities and interactions, organizations should be looking at utilizing automated risk management tools that can become a central repository of records for all things AI. This should not be a

Cybersecurity is obviously a critical concern for hospitals and healthcare organizations. Cybersecurity and HIPAA compliance are typically managed with a biannual or yearly audit, which then generates items to be remediated to bring the organization into compliance. As cyber threats become more sophisticated, traditional methods of assessing and managing these risks are proving inadequate. This is evident in the number of recent breaches across healthcare.  Enter Cyber Risk Quantification (CRQ) – a revolutionary approach that is transforming how organizations understand, manage, communicate, and mitigate cyber risks. Additionally, CRQ allows you visibility into HIPAA and Cybersecurity compliance in real-time and the ability to manage your compliance

In light of recent outages, let’s go back to basics and reexamine best practices for change management and vendor management in healthcare. Healthcare Change Management Discussion An appropriate change management program is one of the pillars of maintaining a robust, resilient, and secure IT environment in healthcare. This program should be governed by a team of multi-disciplined professionals who can ascertain and scrutinize the impact of changes being introduced into the healthcare production environment. What do we mean by “changes”? Anything being added, subtracted, or altered in the production IT environment is a change. The smallest faulty change to this environment can

For the last couple of newsletters, I have been writing from a fairly general level as introductions to this topic. In this newsletter, we attempt to get down to some technical details and examples of why automating your risk management and compliance is so important. We’ll even note how we are seeing AI being used within automated risk and cybersecurity compliance tools and what it’s doing on your behalf. Now, the real question around life, the universe, and everything is: have I covered all of my bases with our cybersecurity and risk management program, and how would I know that? 

Caution! This content was not written by AI, an actual human being wrote this. How do we ensure that AI is set up appropriately and behaving responsibly in our healthcare organizations? Typically, systems, devices, and applications send data to logs; traditionally, that data is accumulated and reported monthly. Errors are corrected, abuses addressed, and problems fixed, but this is typically in retrospect. With the immediacy of changing environments in healthcare IT, the introduction of new data daily, new users, network changes, and so on, it would be ideal to monitor the activities associated with AI in real time in order to ensure