Vitea recently partnered with Fortified Health Security, a leading healthcare cybersecurity services firm, to host an executive dinner bringing together healthcare leaders from across the country for a candid, off-the-record conversation on two of the most pressing challenges facing the industry: cybersecurity and AI governance in healthcare.
Over the course of the evening, discussion moved from how health systems are navigating shadow AI, to today's threat landscape and the actors behind it, to the evolving regulatory environment — and to the very real tension between moving fast on AI adoption and doing it safely.
Three themes stood out.
1. AI governance in healthcare is an existing problem.
Every organization represented at the table is already living it. Employees across health systems are using AI tools today, whether IT has sanctioned them or not — and in many cases, whether IT knows about them or not.
The leaders in the room were consistent on this point: the question is no longer whether to build a healthcare AI governance capability, but how quickly one can be stood up relative to adoption that's already underway. Waiting for a mature regulatory framework before acting means governing tools that have been in clinical and administrative workflows for years.
2. Cybersecurity and AI governance are converging.
The disciplines are increasingly inseparable. AI expands the attack surface — new data flows, new vendors, new endpoints — while ungoverned AI usage creates exposure that traditional security tooling wasn't built to see.
The teams responsible for one can no longer afford to ignore the other, and several leaders described organizational shifts already underway: CISOs taking seats on AI governance committees, and AI oversight programs borrowing directly from security's playbook of continuous monitoring and risk assessment.
3. Healthcare's stakes are unique.
Every industry is wrestling with AI risk, but the margin for error in healthcare is smaller than almost anywhere else. The data is more sensitive, the regulatory exposure is greater, and the consequences of a model behaving badly are measured in patient outcomes, not just dollars.
That reality shaped the tone of the entire evening: urgency without recklessness, and a shared conviction that AI governance in healthcare done right is what enables speed rather than preventing it.
Vitea and Fortified Health Security look forward to convening more of these conversations in the months ahead. If you're a health system leader interested in joining a future dinner, contact our team here.
