key Takeaways from Renown Health‘s Approach to AI & IT Security
This article details renown Health’s strategic shift towards IT resilience, data integrity, and security-first thinking as they integrate AI into their operations.Here’s a breakdown of the key themes and actions:
1. Shifting from Disaster recovery to IT Resilience:
* Problem: Conventional paper-based downtime procedures are becoming obsolete due to a digitally native workforce and patient safety risks during extended outages.
* solution: Investing heavily in redundant systems (new data center, dual network carriers, highly available systems, rapid recovery). Exploring dedicated backup workstations on each floor.
* Rationale: Downtime is costly – impacting efficiency, quality of care, and finances.
2. Evolving Threat Landscape & Vendor Risk:
* Threat: Attackers are increasingly targeting third-party vendors (like the Change Healthcare breach) in addition to direct attacks on health systems.
* Solution: Rigorous vendor contract review, focusing on data ownership, data sharing clauses (especially related to bundled AI features), and business associate agreements. Utilizing an AI questionnaire for deeper compliance checks.
3. Data as the Foundation for AI:
* Core Principle: AI initiatives must be built on a foundation of clean, consolidated data.
* Recommendations:
* Prioritize a unified data platform before pursuing advanced AI use cases.
* Use simpler AI tools (like Copilot) as a testbed for organizational AI readiness.
4. Security Integration into Automation:
* Proposal: Layer identity verification into service desk automation (password resets, incident reporting) to combat social engineering.
5. Platform-First Technology Strategy:
* Recommendation: Leverage existing partnerships (Epic, Microsoft) to deliver capabilities before adding point solutions that increase the attack surface.
6. Leadership & Empowerment:
* Key to Success: CIO Chuck Podesta fosters a culture of autonomy and support, empowering teams to execute while providing resources and removing obstacles.
In essence, Renown Health is proactively building a secure and resilient infrastructure to support its AI ambitions, recognizing that data integrity and robust security are paramount to prosperous AI implementation. They are moving beyond simply recovering from disasters to preventing disruptions and ensuring continuous, secure access to critical systems and data.