Episode #127. Risk is a Moving Target—So Aim Smarter, with Bill Laukaitis, Director of IT for Genesis Medical Associates
A strong security posture requires trust between IT, clinicians, and patients, emphasizing the importance of collaboration and culture over solely technical solutions.
In this episode, Bill Laukaitis emphasizes the importance of digital empathy, listening to clinical staff, and providing options rather than prescriptive solutions. He highlights the significance of process discovery, documentation, and the Capability Maturity Model Integration (CMMI) for achieving a proactive security approach. Bill also touches on the ethical use of AI, dynamic risk-scoring models, and the critical nature of third-party vendor management in healthcare. Ultimately, he advocates for a community-driven approach to risk management and data protection.
Tune in and learn how to build a culture of security that supports both patient safety and efficient workflows!
For more information and ways to increase risk awareness and safety, visit us at www.censinet.com.
About Bill Laukaitis:
Bill L. is a seasoned IT and Security leader in Pittsburgh, PA, dedicated to empowering organizations through strategic digital transformation and security excellence. With experience spanning C-level roles (CIO/CSO) and Directorships across diverse sectors, including significant depth in Healthcare IT (Genesis Medical Associates, Share Medical Center, Community Veterinary Partners, Pharmacy Quality Solutions, Celtic Healthcare, Adagio Health), he brings a holistic view to technology leadership.
As a self-described servant leader and technology enthusiast, Bill excels in IT infrastructure management, compliance, operations, data analytics, and security strategy. He holds a Master's in Leadership in Information Technology from Duquesne University. He strongly advocates leveraging innovative and ethical tech solutions to solve complex challenges and drive organizational success. His background also includes entrepreneurial experience as the long-time owner of Prime Time Athletic Training.
Things You’ll Learn:
- Embed a level of digital empathy into your security design. Understand how people work and what their processes are to build controls that support users, not block them from functionality or workflow.
- Risk is never static and constantly evolving. Implement dynamic risk-scoring models based on workflow and monitor real-time system usage to make informed decisions.
- Prioritize a culture-driven approach to compliance within the organization. Engage staff early and often to create a shared mission for data protection and patient safety, ensuring long-term success.
- Bring collaboration back into the technology sphere to foster community. No should not be in your vocabulary; instead, take a collaborative approach of engagement rather than direction.
- Third-party vendor management is necessary. Treat third-party vendors as a part of your resilience program as a whole ecosystem.