What wisdom have you gained from your career about balancing service delivery and security, when these priorities often compete with each other?

The key lesson is to avoid silos between security and IT. Our previous ISO struggled with this division, believing that technology always superseded security. By fostering an integrated IT security team, we have achieved better alignment and collaboration. Breaking down silos and working together is essential. Healthcare regulations, such as HIPAA and state-specific guidelines, add complexity to security and AI adoption.

It is absolutely a partnership. Security should be a primary consideration for any product or service, and a strong relationship with the CISO makes collaboration easier. Participating in pilot groups for new cybersecurity products strengthens this partnership.

Reporting to the board involves updates on security, AI, and cybersecurity. Board members are increasingly interested in AI, sometimes more than cybersecurity. Data confidentiality remains the top risk, and we are cautious in adopting AI tools, especially in healthcare, due to patient data concerns and regulatory requirements.