AH115 - Achieving FedRAMP® Ready Status & Why Security is a Team Sport, with Shane Garoutte

In this episode of Astonishing Healthcare, host Justin Venneri sits down with Shane Garoutte, Chief Information Security Officer at Judi Health, for a conversation about cybersecurity and what it takes to protect member data in a landscape where the adversaries don't play by any rules. Shane offers a practical look at why cloud security standards matter so much in healthcare, especially as large-scale breaches continue to affect organizations handling protected health information. He explains why FedRAMP® Ready status is different, how continuous monitoring changes business behavior, and why security must be treated as a company-wide responsibility and "team sport" rather than a narrow compliance exercise.Shane also offers listeners some timely, actionable cybersecurity tips for remote work and travel, including why multi-factor authentication, physical device awareness, and healthy skepticism around texts and login alerts help reduce risk.HighlightsFedRAMP® Ready status is a differentiated achievement. The real investment is not just technical compliance, but changing day-to-day business behavior through continuous security practices across the entire organization. ‍Healthcare security depends on practical habits, not just frameworks – everyone plays a part. Shane shares advice on physical device awareness, multi-factor authentication, passkeys, and healthy skepticism, offering listeners simple steps to reduce risk at work and at home. ‍A strong cybersecurity culture is built on trust and teamwork. Security teams should be seen as partners, not punishers; fear can push employees to hide mistakes instead of reporting them early. ‍Security maturity is a business differentiator. Shane connects FedRAMP Ready status to Judi Health's cloud-first architecture, scalability, and technology-first approach to benefits administration, showing why employers, plan sponsors, and health plans should care. ‍Agentic AI is changing the threat landscape, and fast. The most astonishing story highlights why cybersecurity defenses must be at least as dynamic, adaptive, and creative as AI-powered systems and threat actors move beyond traditional attack patterns.Related Content & Reference MaterialsTop 10 New Judi® Updates Improving Health Benefits AdministrationAH112 - From Transparent PBM to Unified Health Technology, with AJ Loiacono and Kristin BegleyWhat is a Core Administrative Processing System (CAPS) in Healthcare Payer Operations?Judi Health Partners with CLEAR as a Preferred Identity Verification Partner to Power Secure, Interoperable Health Benefits AccessThe OpenAI Team's Black Hat PresentationPlease visit Judi Health - Insights for more information about this episode and content from the Judi Health team!