Business Continuity Management / Disaster Recovery , Events , Governance & Risk Management

Beyond Silos: When AI Meets Healthcare Security

Healthcare has become the number one target for cyberattacks, with organizations spending an average of $11 million to recover from a ransomware incident, according to Jojo Nufable, vice president and group chief information and cyber security officer at St. Luke's Medical Center.

See Also: Securing Healthcare: Minimizing Risk in an Ever-Changing Threat Landscape

Healthcare organizations must protect three distinct technology domains: IT, OT and IoT. The complexity of these systems demands a governance framework based on the cyber governance, risk management and compliance principle, Nufable said. Organizations need automated processes and closed-loop systems to reduce vulnerabilities.

"As a CISO, you have to use all the technologies in mind, but it's still people, process and technology. With people you use the cyber GRC, and with process, you have to have a good process," Nufable said. "You have to automate what is to be automated. And with technology, you have to make sure that all of these are working together, so that it's a closed-loop system."

In this video interview with Information Security Media Group at the GovWare Conference and Exhibition 2024, Nufable also discussed:

• What CIOs and CISOs should focus on to strengthen incident response and disaster recovery;
• Mitigating security risks associated with the rise of IoT in healthcare;
• How healthcare organizations can adopt AI and cloud technologies to maintain a robust and adaptable security posture.

Nufable is responsible for enhancing organizational resilience against cyberthreats and implementing robust security frameworks at St. Luke's Medical Center. He has more than 30 years of experience in IT governance and strategy, digital transformation, cloud computing, and cybersecurity.