Episode #118. From Compliance to Collaboration: How Healthcare Can Strengthen Cybersecurity, with Kate Pierce, former Senior vCISO and Executive Director of Government Affairs at Fortified Health Security

What does it take to safeguard the most targeted sector in cybersecurity?
In this episode, Kate Pierce emphasizes the disparity in cybersecurity resources between well-funded and underfunded healthcare providers and advocates for government and state-level initiatives to elevate minimum cybersecurity standards. She also discusses the growing demand for fractional CISOs, the need for responsible AI adoption, and the importance of collaboration in the healthcare sector.
Don’t miss this conversation packed with actionable insights on policy, innovation, and building stronger defenses in healthcare!
For more information and ways to increase risk awareness and safety, visit us at www.censinet.com.
About Kate Pierce:
With over 30 years of experience in healthcare information technology and over 13 years in healthcare cybersecurity, Kate Pierce has deep insight into the persistent challenge of improving security with increasingly limited resources. During her tenure as the CIO and CISO at a Critical Access Hospital, Kate spearheaded the creation of the organization's security program, encompassing governance, strategic planning, and the selection and rollout of security controls. To further the cause of cybersecurity in healthcare, Kate actively collaborates with the HSCC CWG and the 405(d) program and consistently advocates at the federal and state levels to fortify cybersecurity within healthcare organizations.
Things You’ll Learn:
- There is a significant gap between well-resourced organizations and smaller, underfunded providers. Addressing these disparities through elevated minimum cybersecurity standards and government initiatives is critical.
- The integration of Cybersecurity Performance Goals (CPGs) into the HIPAA Security Rule is anticipated, marking a major update to healthcare cybersecurity regulations after 23 years.
- Fractional CISOs are becoming essential for smaller organizations unable to recruit and retain full-time cybersecurity leaders, particularly in meeting new state and national regulatory requirements.
- While adoption varies, organizations must use AI responsibly by addressing security concerns, ensuring patient transparency, and evaluating its impact effectively.
- Building strong relationships and leveraging collective expertise are essential strategies for overcoming complex cybersecurity challenges.
- Smaller organizations face financial and workforce barriers that may lead to loss of autonomy as they are acquired by larger systems, underscoring the importance of tailored solutions for community-specific needs.