< + > Deploying AI? Healthcare Leaders Must First Consider Cybersecurity and Equity

The following is a guest article by Tim Boltz, Healthcare Solutions Executive at Carahsoft

Artificial intelligence is the most disruptive technology since the widespread adoption of the internet. AI could permeate industries the same way, transforming their operations. Healthcare is not immune. 

Health institutions of all types are already exploring AI’s potential to refine patient treatments, relieve the burdens of workforce shortages, and accelerate new research discoveries. Some in the healthcare landscape are already running pilots to determine use case possibilities. 

Deploying AI solutions in this rightfully risk-averse industry will require addressing longstanding security issues and equity concerns before its full promise can be fulfilled.

Fortifying Health Networks

AI projects among healthcare institutions are attracting interest and funding, but the industry needs to overhaul its cybersecurity posture to prevent threats to patient safety and privacy. Healthcare institutions work with a treasure trove of data, harnessing all four data types—Personally Identifiable Information (PII), Payment Card Industry (PCI) data, Protected Health Information (PHI), and Intellectual Property (IP)—making these organizations prime targets for cybercriminals. 

Most healthcare facilities run networks composed of outdated legacy systems and a huge number of internet-connected devices, like imaging machines and monitors, that create an Internet of Medical Things (IoMT). The result is a highly vulnerable attack surface rich with valuable patient, financial, and research information. Highly organized hackers deploy ransomware, knowing the sensitivity and urgency of operations make healthcare organizations a high-value target. 

Healthcare organizations, however, often do not have the budget to replace outmoded equipment or invest in the latest cyber advancements. Many are still recovering from the lasting effects of the pandemic and a workforce shortage that extends to their IT departments. 

To dictate the standards for responsible protection of networks and deployment of new technologies, the Federal government must step in. In addition to helping providers find the funds to secure this critical sector, agencies should also lead efforts to create more cybersecurity standards and playbooks for responding to incidents. The Department of Health and Human Services’ release of a risk management framework is a good start. Still, the healthcare industry would benefit from the sector-specific security standards that the government’s Cybersecurity Maturity Model Certification program is creating for the defense industrial base. 

Robust security practices would deter would-be attackers, and healthcare organizations could focus on providing patients with high-quality care, furthering research efforts, and embracing new technology.

Ensuring Equitable Access and Outcomes

AI in healthcare is still nascent, but equity must be a top consideration in building policies and projects. Emerging technologies like AI offer a chance to design systems for healthcare delivery and clinical research with equity principles built in.

Some worry that AI could exacerbate health disparities. For example, organizations could develop technology that is informed by large data sets that could breed inequality at the institutional level, especially when those datasets are unvetted.

However, many see the technology as a way to mitigate inequities. For patients, AI tools could more accurately spot and predict illness from images or create personalized treatment options. Even more simply, calling offices with AI tools that optimize schedules could decrease wait times and improve appointment availability. After all, getting access to a doctor is the first step of any treatment plan.

For medical providers, AI can help unburden overworked staff. Automation of administrative tasks can shift physicians and other frontline staff from paperwork to focusing on delivering excellent patient care. AI can also help overcome staffing challenges, bolstering recruitment and retention efforts with tools that screen job descriptions to remove biased language or enhance training programs. In back offices, AI could help refine grant proposals, detect fraud, and accelerate reimbursements.

Unlocking AI’s Potential

To embrace AI’s full potential, we need support from regulatory bodies, innovation from the private sector, and also participation from the public, as developing an AI tool without data is impossible. 

Data fuels projects that could predict the next big outbreak, giving medical professionals time to prepare and refine response plans. Key regulations like HIPAA have yet to be modernized to address potential AI uses. Regulatory bodies should take time to review that the rules address new technological developments. 

In December 2023, President Joe Biden issued an executive order for HHS to lead policy and regulatory efforts to pave the way for safe, secure, and trustworthy AI use in healthcare settings. However, health-focused agencies have the opportunity to do more to drive adoption, such as incentivizing with Medicare and Medicaid reimbursements. 

What can be done with artificial intelligence is still being discovered. By working together to improve security and ensure equity, the federal government and healthcare organizations can pave the way for revolutionary new treatments and improved health outcomes.