I was excited to take part in my first ever SHI Summit hosted by the good people at SHI International. They hold these Summits each quarter and bring together their clients from across multiple industries. Each Summit has a focus and this quarter’s summit was focused on Cybersecurity and AI.
At the SHI Summit, the sessions explored the latest technology innovations and heard from cybersecurity leaders about what it takes to build a resilient security program. From hands-on technology labs and cybersecurity testing to managing risk, prioritizing investments, building trust, and communicating effectively with executive leadership, these takeaways highlight the people, strategies, and technologies that healthcare organizations need to strengthen their cybersecurity efforts.
Below you’ll find some of the key perspectives we heard and shared on social media along with a little extra additional commentary.
I really don’t know how to capture the experience of checking out the unique spaces that SHI has available to their customers. For a techguy (largely becoming former techguy) like me, this was like heaven. The Next Gen Device Lab was great to see all the latest AI powered devices and to see the benchmarking tools that SHI was using to evaluate them. Not to mention their warehouse’s ability to store, prep, and ship out devices was amazing.
The AI and Cyber Labs took me back to my data center days. A really unique space for SHI customers to be able to see the latest products. Plus, the way they could test all of these products and help their customers understand how they’re going to work before being in production was really cool. Not to mention the racks in a box (literally) that they can build and ship out to a data center where it can just be plugged in and ready to use. The Customer Innovation Center was a great showcase of the latest products as well. Sometimes it’s hard to really understand a new device until you get your hands on it. I was handed one device that felt like a sheet of paper it was so small. Always great to get your hands on devices before buying them.
Cybersecurity is a hot topic in every healthcare organization. However, while there’s a lot of concern, I wonder if healthcare is going this deep with their cybersecurity efforts. What do you think?
I was really struck by what it takes to create resiliency in your cybersecurity efforts. However, Tammy Moskites pointed out how it’s the humans that make it all work. This isn’t something you can just buy and forget about it.
Technology is great and necessary when it comes to healthcare cybersecurity. However, Tammy appropriately pointed out that people are still the strongest response. You could say that people + technology is where the real magic happens though.
I’d never really connected some of the “softer” skills of self doubt and imposter syndrome to security risks. It was fascinating to see Moskites tied those two things together. Of course, over confidence can also be a security risk as well. As with most things in life, there’s a balance that we have to achieve.
I think most of us have faced some version of imposter syndrome in our live. I like Moskites 4 suggestions on how to battle imposter syndrome. What do you think of these ideas?
I don’t think I’ve ever heard someone say an audit was a friend. Most people hate audits. Although, Moskites makes a really good point that the details from an audit can be a key lever you can use to get money for cybersecurity efforts.
I’ve been chewing on this idea for a while. Kind of reminds me of the famous phrase, you’re only as strong as your weakest link. Leadership is good and can help a team become more resilient, but a team that works together is key to building a resilient cybersecurity program.
We’ve often heard this at Healthcare IT Today, but it was a good reminder. Board rooms care about risks, not the details. If you lead with the details, you’ll lose them. If you lead with the risks, you’ll win them over.
I know this can be a challenge for IT and security leaders that aren’t known for being the best communicators. However, it’s a skill you can develop and need to develop since Finance and Operations are essentially your “competition” for budget, attention, and resources.
This was a fascinating response. I was impressed by the CISO’s conviction in their roadmap. With the pace of change in cybersecurity, hopefully they have some flexibility in that roadmap. However, I can see why that conviction matters. When budgets are tough, it’s easy to cut cybersecurity which only gets attention when something goes wrong.
The idea of sharing the truth was powerful as well. Not being truthful is how people get fired. Candid truth with an appropriate response builds trust in leaders even when the truth is hard to hear.
It was so powerful when the CISO panel shared that if you don’t share the problems that you’ll become the fall guy. I like to say that ignorance is bliss until it’s not. Transparency is key.
I heard this a number of times at the SHI Summit. No one has enough resources for cybersecurity, so you have to prioritize where you invest. It really is the most important thing a healthcare CISO does.
As part of an organization’s prioritization, I really liked this idea and analogy around risks and threats. What do you think of the analogy?
This is a drastic shift and one I’ve seen as well. We went from “If we have a security incident…” to “When we have a security incident…” This doesn’t absolve us from trying to reduce cybersecurity incidents, but it does mean we need to have a good recovery and mitigation plan in place when a cybersecurity incident happens.
It was great to hear so many cybersecurity perspectives that healthcare can use. Next up, we’ll share some of the AI insights from the SHI Summit.
The following is a guest article by