PODCAST · business
Info Risk Today Podcast
by InfoRiskToday.com
Exclusive, insightful audio interviews by our staff with info risk/security leading practitioners and thought-leaders
Episodes
-
How Agentic AI Is Reshaping the Modern SOC
Agentic AI is redefining security operations by embedding intelligence across detection, investigation and response. Optiv's Ben Spencer and Google Cloud's Wayne Kearns explain how AI-powered SOCs strengthen defense, why human expertise is essential and how MSSPs can accelerate enterprise adoption.
-
How Renown Health Is Reshaping Its Digital ID Strategy
Renown Health is reshaping digital ID management with a strategy that reduces friction for clinicians, strengthens security and prepares the organization for emerging AI-driven identity challenges, said Steven Ramirez, Renown Health's chief information security and technology officer.
-
How Cloud Security Risks Grow With Home-Based Care
As hospital-at-home programs expand and AI adoption accelerates, healthcare organizations face mounting cloud security demands. Anahi Santiago, CISO of ChristianaCare, discusses vendor accountability, identity management, clinical AI risks and the need for stronger cybersecurity foundations.
-
Addressing Quantum Readiness in Healthcare Security
Healthcare organizations should prepare for post-quantum cryptography without overreacting to hype, said John Frushour, CISO of New York-Presbyterian Hospital. Stronger encryption standards, commercial software support and attention to medical devices can help providers manage emerging risks.
-
How FDA's Draft Guidance Shapes AI Medical Device Safety
FDA's draft guidance for AI-enabled medical devices reflects a major change in how regulators address software that changes over time, recognizing AI's ability to evolve while emphasizing patient safety, transparency and accountability, said Phil Englert of the Health-ISAC.
-
How AI Governance Protects Patient Care and Sensitive Data
Healthcare organizations face mounting pressure to govern AI without slowing innovation. Krista Arndt of St. Luke's University Health Network explains how agile governance, technical controls and collaboration can reduce data loss risks, protect patient care and strengthen AI security programs.
-
Why Hospitals Must Rethink Cyber Resilience
In the face of relentless cyberattacks that threaten patient safety, hospitals must strengthen their resilience, with clinical continuity, secure backups and coordinated recovery emerging as critical strategies, said John Riggi of the American Hospital Association and Josh Howell of Rubrik.
-
The Privacy Risks of Embedded, Shadow AI in Healthcare
Artificial intelligence that is embedded in newer editions of software and other technology tools but is not explicitly revealed by vendors is a substantial risk on par with shadow AI, said regulatory attorney Elizabeth Hodge with the law firm Akerman LLP.
-
Fighting the Mobile Malware Hydra
Every organization is concerned about malware - how it evolves, slips past multilayered defenses and infects networks. John Nielsen, Product Manager for IBM Mobile Security, discusses the latest malware trends and steps organizations may take to fight back.
-
The Case for Privileged ID Management
If you look at recent breaches, you see a common thread: If privileged identities were better managed, breach impacts would greatly lessen. Bill Mann of Centrify discusses the essentials of privileged ID management.
-
Brent Williams
Brent discusses deploying multi-factor authentication to mega-enterprises with millions of end-users, knowledge-based authentication user enrollment, and how educational institutions are utilizing multi-factor authentication solutions.
-
Why 'Emerging Threats' Are Harder to Prioritize in the AI Era
AI is accelerating cyberattacks faster than organizations can prioritize them, forcing security leaders to rethink how they define and defend against “emerging threats.” Most modern threats aren’t new, just amplified by AI, says Akamai's Brent Maynard.
-
The End of Static Security: Why AI Demands Real-Time Microsegmentation
AI is compressing cyberattack timelines from months to minutes. While segmentation has been a gold standard security practice for years, many organizations are still operating with outdated, static approaches.
-
Why Data Security Standards in Cancer Innovation Matter
Cancer research and treatment innovation - and the tech that powers that - requires a great deal of collaboration and data sharing among multiple parties. But keeping that sensitive information secure and private is crucial - and requires adherence to standards, said Baxter Lee of Clearwater.
-
How Main Line Health Secures Devices With Microsegmentation
An identity-based microsegmentation deployment at Main Line Health in Philadelphia is helping to control how its roughly 60,000 devices communicate across the network in order to protect clinical operations and limit the impact of potential cyberattacks, said Main Line Health CISO Aaron Weismann.
-
Conducting a Security Risk Analysis Under Legal Privilege
Attorneys can conduct security risks assessments under the color of client privilege, making it less likely to surface in discovery during litigation. But healthcare firms should consider the cons before they take that route, said attorney Adam Greene, partner at the law firm Davis Wright Tremaine.
-
Navigating Cybersecurity Obstacles in Rural Healthcare
Real and intense financial pressures on rural and small healthcare clinics mandate making difficult decisions on allocating funds to cybersecurity, said Greg Sieg, CISO at the University of Michigan Regional Health Network. "The funding is just not there."
-
How Medical Device Cyber Challenges Could Become Easier
Medical device cyber challenges are among the most complex for manufacturers and healthcare delivery organizations for a variety of reasons, but there are some promising developments underway that could help ease the pain, said Phil Englert of the Health Information Sharing and Analysis Center.
-
'Systemic Risk' Stalks Healthcare Sector
For the U.S. healthcare ecosystem, the 2024 ransomware attack on Change Healthcare proved to be a supply-chain earthquake in showcasing critical third-party risk that entities now must carefully and urgently consider, said Erik Decker, CISO of Intermountain Health and a federal cyber adviser.
-
Medical Device Concerns for a Post-Quantum World
Long-life medical devices - products typically used for a decade or longer - are among the most post-quantum, cryptographically vulnerable technologies in healthcare, said Joern Lubadel, global head of product security at German-based medical device and healthcare products maker B. Braun.
-
Stretching Cyber Resources in Rural Healthcare
Rural hospitals and clinics continue to struggle with a lack of cyber resources but a federal grant program set to provide $50 billion worth of funding across all 50 states could hopefully help lessen some of the pain, said Jim Roeder, VP of IT at Lakewood Health System in Minnesota.
-
Groups Aim to Strengthen Health Ecosystem Incident Response
To help strengthen the health ecosystem's overall incident response preparedness, the Health Sector Coordinating Council in coordination with the Health Information Sharing and Analysis Center will in July host a first-ever nationwide virtual cyber exercise, said Greg Garcia, of the HSCC.
-
How Healthcare Can Get Started Addressing Post-Quantum Risk
Many healthcare sector organizations are delaying to even begin contemplating - let alone strategizing - how to mitigate post-quantum risk - but procrastination is a major mistake, said Ali Youssef, director of emerging tech security, at Henry Ford Health.
-
How AI Could Help Hospitals Address Device Vulnerabilities
Tools that could help healthcare providers - regardless of size - to prioritize their medical device vulnerability management is where artificial intelligence could make a significant impact, said David Brumley, chief AI and science officer at security firm Bugcrowd.
-
Going Passwordless in Healthcare: Overcoming Hurdles
Healthcare CISOs and their teams often contemplate the benefits of going passwordless in their organizations but face pushback from clinicians concerned that the new tech will slow down their access to critical patient care systems or disrupt their workflow.
-
The Danger of IT, OT, Medical Device Cyber Turf Wars
What often appears to be turf wars between healthcare technology management, facilities OT staff, IT departments and security teams are often the result of unclear ownership and accountability for device security. And that presents safety risks to patients, says Mohammed Waqas, CTO of Armis.
-
Chatbots, IT Outages, Devices Top 2026 Health Tech Hazards
AI chatbots rank as the number-one health tech hazard in 2026, followed by "digital darkness" and legacy medical device cyber issues, said Rob Schluth and Scott Luney, technology and security experts at patient safety group ECRI Institute, which compiles an annual top 10 list. They explained why.
-
Why Banks Need AI-Driven Segmentation Against Ransomware
Discover how AI-driven segmentation is reshaping customer strategy in financial services. Learn how adaptive microsegmentation helps banks contain threats faster and strengthen resilience against modern attacks.
-
Writing Ransomware Using AI to Get Rich? Don't Bet the Farm
Attackers that want to use artificial intelligence tools to build ransomware or help run their cyber operations risk getting much less than they bargained for, said security expert Candid Wuest, in part because they'll still rely on known tactics that can be readily spotted and blocked.
-
Questions Loom Ahead of Substance Abuse Privacy Rules Shift
As the compliance deadline quickly approaches for changes to align the federal rules for the confidentiality of substance use disorder records with HIPAA, entities that participate in so-called Part 2 programs still face critical unanswered questions, said attorney Aleksandra Vold of BakerHostetler.
-
Why AI Use in Healthcare Requires Continuous Oversight
Artificial intelligence use in healthcare is only as safe and accurate as the governance and trust frameworks surrounding it, particularly in clinical environments where errors or hallucinations can directly impact patient care, said Dave Bailey, vice president at consultancy Clearwater.
-
The Case for a Ransom Payment Ban and When It Might Happen
Britain will likely ban at least some types of ransom payments as it revamps the nation's cybersecurity laws, but many open questions remain, including sectors and the organizational sizes to be covered, and if all payments might be required to pass sanctions checks, said policy expert Jen Ellis.
-
Aligning Substance Use Privacy Regs With HIPAA Isn’t Simple
Revisions to 42 CFR Part 2 that go into effect soon to better align federal regulations for the confidentiality of substance use disorder records with HIPAA require entities to adjust their compliance programs. But the changes aren't easy, said attorney David Holtzman, founder of HITprivacy LLC.
-
Red Team Brainstorming With GPTs Accelerates Threat Modeling
Large language models have a well-earned reputation for making things up. But for AI cybersecurity architect Erica Burgess, rather than being a bug, GPT hallucinations can be a threat-modeling feature. "I like to think of the hallucinations as just ideas that haven't been tested yet," she said.
-
AI Use Cases in Healthcare: Growth, Governance and Risk
Use cases of AI in healthcare will continue to expand in 2026 - including for back-office automation, ambient exam room documentation, claims processing and clinical decision support - but so will critical privacy, security, legal and other risks, said attorney Wendell Bartnick of law firm Reed...
-
Implantable Brain Devices: Top Cyber and Privacy Concerns
Implantable brain devices introduce a new and significantly more complex class of cybersecurity risk and critical privacy concerns, compared with traditional medical devices, given the sensitivity of neural data, says Professor Kevin Fu of the Archimedes Center at Northeastern University.
-
Reducing Cyber, Privacy Risks in Healthcare Sector M&As
Healthcare sector mergers and acquisitions dramatically amplify cybersecurity and data privacy exposure for potential buyers and sellers, said attorney Jonian Rafti of law firm Proskauer. But there are critical steps entities can take to reduce those risks, he said.
-
Getting a Tighter Grip on Third-Party AI Risk in Healthcare
Third-party security threats remain one of the most critical risks facing the healthcare sector. But now the increasing use of artificial intelligence by vendors adds a new layer of third-party concerns, said independent consultant Rick Doten, former healthplan CISO at Centene Corp.
-
How AI Will Reshape Health Data Breach, Attack Trends
Healthcare data breaches are becoming more frequent but smaller in scale, targeting smaller entities and high-value credentials and records - and AI is reshaping both the attack landscape and fraud patterns, said Jim Van Dyke, senior principal of innovation at TransUnion.
-
Preparing Healthcare Workers for Secure, Responsible AI Use
Preparing a healthcare workforce to responsibly engage with AI tools without over relying on automation or undermining human oversight will require awareness training akin to phishing exercises, said Skip Sorrels, field CTO and CISO at security firm Claroty.
-
Why Smart Glasses in Hospitals Are Not a Bright Idea
Smart eyewear such as Meta-AI Ray Ban glasses - which sport microphones, cameras and can connect to artificial intelligence - pose emerging patient privacy and other risks especially when worn in healthcare settings, said Garrett Zickgraf of consulting firm LBMC.
-
How to Talk to the Board About Agentic AI
Boards are becoming increasingly focused on understanding the mechanics and implications of agentic artificial intelligence, but traditional governance processes aren't built for the speed and complexity of today's AI-driven innovation cycles, said JoAnn Stonier, former chief data and AI officer…
more -
Scaling AI From Copilots to Agentic Workflows
Organizations are adopting agentic artificial intelligence as the next phase of AI. Kim Basile, CIO of Kyndryl, explains how organizations can prepare teams to work with agentic AI, emphasizing culture, training and governance as the crucial drivers of AI readiness and adoption.
-
New York Hospital Cyber Rules to 'Raise the Bar' Nationwide
New York State's stringent new cybersecurity requirements for many hospitals will have a ripple effect, raising the security bar and expectations for healthcare providers across many other states, predicts Chris Stucker, deputy CISO at Wisconsin-based Froedtert ThedaCare Health.
-
Why Cyber Defenses Continue to Lag at Rural Hospitals
Rural and small community hospitals are continuing to face growing cyber challenges driven by limited and shrinking resources, staffing shortages, and increasingly sophisticated cyber threats, said Jackie Mattingly, senior director at privacy and security consulting firm Clearwater.
-
Info Blocking Enforcement: What HHS Will Likely Focus On
While information blocking regulations were authorized under the 21st Century Cures Act nearly a decade ago, regulators are only starting to ramp up enforcement of the prohibited practices. Attorney Nan Halstead of Reed Smith explains critical steps organizations need to take to comply.
-
Akamai Study Shows Microsegmentation Boosts Security
Microsegmentation no longer remains a buzzword. In today's threat landscape, organizations are adopting it as a frontline defense against cyberattacks and higher cyber insurance premiums. About 90% of organizations are using some form of segmentation, according to Akamai's 2025 Segmentation…
more -
AI and Patient Health Data Access: Considering the Risks
Among pressing issues facing healthcare providers and health IT vendors is how artificial intelligence enabled tools such as AI assistants might further facilitate patients' access to records as well as the transmission of records themselves, said attorney Alisa Chestler of law firm Baker Donelson.
-
New York Hospitals Are Facing Tougher Cyber Rules Than HIPAA
State cybersecurity regulations that apply to some hospitals in New York state go well compliance under the federal HIPAA security rule, posing expanded data governance challenges for providers, said Matthew Bernstein of consulting firm Bernstein Data.
-
NASA, Google Testing AI 'Doctor in a Box' for Space Missions
A new AI-powered clinical decision support system developed by Google and NASA aims to help astronauts diagnose and treat medical issues during space missions - even when real-time communication with Earth is unavailable, said Chris Hein, field CTO of Google Public Sector.
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
Exclusive, insightful audio interviews by our staff with info risk/security leading practitioners and thought-leaders
HOSTED BY
InfoRiskToday.com
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does Info Risk Today Podcast have?
Info Risk Today Podcast currently has 1000 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is Info Risk Today Podcast about?
Exclusive, insightful audio interviews by our staff with info risk/security leading practitioners and thought-leaders
How often does Info Risk Today Podcast release new episodes?
Info Risk Today Podcast releases new episodes frequently with a large back catalog of 1000 episodes. Check the episode list for recent publication dates.
Where can I listen to Info Risk Today Podcast?
You can listen to Info Risk Today Podcast on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts Info Risk Today Podcast?
Info Risk Today Podcast is created and hosted by InfoRiskToday.com.
URL copied to clipboard!