Building Resilient Security Communities in Healthcare

Dan Dodson hosts Drex DeFord, a leader in healthcare cybersecurity, to discuss the evolution and current state of cybersecurity in healthcare. Drex shares his career journey from a hospital administrator in the Air Force to leading roles in various healthcare organizations and consulting for tech companies. He describes how the rapid digitization of healthcare, particularly through electronic health record (EHR) adoption and the lack of simultaneous investment in cybersecurity, led to an expanded risk landscape and new threats like ransomware.

The conversation covers the unintended consequences of digitization, including physician burnout, and weighs whether these changes were “worth it”—both agree that overall care has improved. They discuss the rise of artificial intelligence in healthcare, its promise for improving clinical care, and the double-edged sword it presents from a security perspective. Drex emphasizes the importance of organizational awareness, responsible AI adoption, and ongoing education.

Key Discussion Points:

Healthcare Digitization Journey

• Evolution from paper-based systems to electronic health records (EHR)
• Impact of rapid digitization without simultaneous cybersecurity investment
• Rise of ransomware and new threat landscapes in healthcare

Professional Communities & Collaboration

• Creation of strong professional communities (such as the 229 project)
• Importance of candid sharing of challenges and solutions among cybersecurity leaders
• Building both personal relationships and collective resilience

Current Healthcare Security Challenges

• Artificial Intelligence: Promise for improving clinical care vs. security risks
• Third-party vendor risk management: Managing complex vendor ecosystems
• Continuity of care: Maintaining operations when electronic systems fail
• Minimum viable hospital: Prioritizing essential systems during incidents

Progress and Ongoing Challenges

• Increased industry awareness and stronger data sharing
• Board-level engagement in cybersecurity
• Resource constraints and increasing complexity
• Political difficulties in governance

About the Speakers:

Dan Dodson hosts discussions on cybersecurity topics with industry leaders.

Drex DeFord is a leader in healthcare cybersecurity with extensive experience from hospital administration in the Air Force to leading roles in healthcare organizations and consulting for tech companies. He advocates for ongoing collaboration, security fundamentals, and leveraging technology and communities for better patient outcomes.

Connect:

Listeners are encouraged to connect via the 229 project and related platforms for ongoing collaboration and knowledge sharing.

Part of ThinkSecure Initiative’s series on collaborative cybersecurity approaches.